Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS211877.roa
File:                     AS211877.roa (raw, json)
Hash identifier:          9s0Bo19ilTVZ50I0dusmnIZbjlyFVc/IQh2vZUTtE48=
Subject key identifier:   8F:D1:EE:52:F6:D1:46:D3:CF:47:E0:09:1A:76:4B:3A:F6:0E:24:16
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       6C07A0597F6061634D23F8BF191EA60921E07CBE
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS211877.roa
Signing time:             Sat 08 Apr 2023 03:25:31 +0000
ROA not before:           Sat 08 Apr 2023 03:20:31 +0000
ROA not after:            Sat 06 Apr 2024 03:25:31 +0000
asID:                     211877
IP address blocks:        2a12:dd47:fb00::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:07:a0:59:7f:60:61:63:4d:23:f8:bf:19:1e:a6:09:21:e0:7c:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:31 2023 GMT
            Not After : Apr  6 03:25:31 2024 GMT
        Subject: CN=8FD1EE52F6D146D3CF47E0091A764B3AF60E2416
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b4:1c:48:9e:54:85:91:de:7f:16:ac:a6:8e:
                    b7:dc:a6:ce:41:5e:38:ae:7f:b0:7f:b8:d0:02:73:
                    46:02:a1:43:e0:df:1c:e6:c0:3b:1e:7b:80:1c:70:
                    1b:bc:41:53:24:21:09:b8:e9:39:ba:f5:85:83:7a:
                    15:7b:c3:e5:c7:dc:db:dd:2e:ad:12:5d:43:f3:95:
                    ec:10:31:0c:c5:0a:02:78:2f:bb:2c:fa:1c:e9:78:
                    a9:24:32:ea:92:3b:19:e2:de:17:f0:9d:0d:25:dd:
                    72:99:15:a9:89:ad:88:d3:ab:f1:ed:71:30:e0:3f:
                    19:96:7f:0c:af:44:43:86:b8:5f:7a:17:44:7c:e6:
                    59:e8:87:6a:2b:11:94:d6:c5:96:ba:2c:31:3a:c0:
                    63:a7:be:ae:bb:c7:a2:1c:b0:a6:05:27:d1:77:c9:
                    7e:b7:63:e7:f3:b0:b1:8f:cc:e2:1c:2d:07:4c:b6:
                    cd:9e:fa:4c:7c:ab:a7:a6:80:ec:8d:66:f8:3d:24:
                    f4:ef:19:1b:6a:bb:91:e9:a4:01:cc:30:ec:05:b2:
                    e5:dc:7f:57:82:51:c7:5c:f2:79:ab:54:bb:55:40:
                    0a:2a:04:91:09:f6:18:f9:13:e8:19:4d:d6:6e:d8:
                    df:33:97:84:18:91:32:1e:58:81:ac:03:98:8e:4f:
                    a3:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:D1:EE:52:F6:D1:46:D3:CF:47:E0:09:1A:76:4B:3A:F6:0E:24:16
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS211877.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:fb00::/40

    Signature Algorithm: sha256WithRSAEncryption
         38:7c:b7:5c:e6:a8:de:6f:d3:cf:6d:41:07:75:48:e6:d6:cc:
         2d:4f:25:f5:f5:f1:1f:75:ab:ba:89:e0:e9:26:94:88:06:30:
         21:f7:58:9f:01:49:8b:c7:d6:f5:6b:f8:4b:44:14:74:82:3d:
         13:f1:98:ca:31:0c:9a:1f:10:2a:dd:f4:33:06:ee:0b:f7:3c:
         a1:0e:c5:70:4d:e5:6a:4a:e7:35:9c:e4:1b:be:e2:a3:3d:5a:
         65:ef:dc:ec:28:1e:4c:51:dd:9d:6c:29:5c:90:3d:50:e2:5a:
         3d:f1:5f:73:bc:c3:6d:91:fd:5a:ba:46:b8:3a:07:bd:75:aa:
         07:e0:d0:d4:04:92:88:8d:98:a5:48:d7:92:6d:f0:9f:16:5a:
         b3:83:b8:06:5f:d8:91:a8:71:99:68:0c:aa:d6:c2:f4:5b:6b:
         fa:c2:d1:8a:b5:21:f4:06:b3:72:f0:f5:7d:be:65:23:6d:90:
         8f:6c:77:a2:47:94:bf:e0:71:ce:2a:71:5f:61:a6:05:47:b8:
         51:24:93:74:33:94:e7:26:3d:dc:ea:85:43:1d:a4:5f:80:89:
         12:d6:38:b7:10:f0:cb:3a:fd:04:ec:62:50:73:32:d3:ab:9f:
         4f:77:cb:ef:28:58:58:7e:38:fd:d1:0f:80:5b:ce:76:1b:6a:
         bb:e8:fb:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----