Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS211946.roa
File:                     AS211946.roa (raw, json)
Hash identifier:          WR+XH2GuL8OkoSONbrZNRNOCMTCzcMFtarE3cnJns3U=
Subject key identifier:   5F:2A:26:44:6E:A2:D4:AD:11:51:68:EA:7E:70:F6:18:57:6B:20:73
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       18A71B719BAA271589C36BB78F3DFDC3219D653A
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS211946.roa
Signing time:             Sat 08 Apr 2023 03:25:27 +0000
ROA not before:           Sat 08 Apr 2023 03:20:27 +0000
ROA not after:            Sat 06 Apr 2024 03:25:27 +0000
asID:                     211946
IP address blocks:        2a12:dd47:8028::/48 maxlen: 48
                          2a12:dd47:d200::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:a7:1b:71:9b:aa:27:15:89:c3:6b:b7:8f:3d:fd:c3:21:9d:65:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:27 2023 GMT
            Not After : Apr  6 03:25:27 2024 GMT
        Subject: CN=5F2A26446EA2D4AD115168EA7E70F618576B2073
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:80:35:b7:62:17:a1:3b:19:ce:29:0d:ec:81:
                    f8:c4:8f:5d:4f:34:0c:e5:3f:4c:75:d6:00:1c:bd:
                    66:93:f7:5d:8d:07:9a:57:37:65:a3:33:4a:e9:29:
                    68:86:94:00:b3:d2:22:45:00:21:c7:a0:70:d4:d9:
                    d1:60:0f:30:ce:7a:13:90:52:cd:dd:bf:d7:65:ba:
                    bb:f3:56:2b:0e:35:6c:d5:63:1c:5a:30:03:15:e3:
                    9e:0a:43:1b:91:0f:9d:be:0c:9e:cd:45:6f:81:f6:
                    64:22:ff:23:16:67:41:8d:20:f8:b8:f4:ea:e9:ba:
                    f6:93:39:5a:16:f1:a6:b3:16:20:62:30:fc:25:40:
                    29:2d:cd:91:a5:d5:a9:0f:4e:b7:20:9c:4a:c8:85:
                    dc:38:4d:ed:40:89:41:e4:15:4f:c5:f9:a6:ee:a4:
                    f5:25:81:c7:df:30:16:c8:f6:79:46:d1:03:c1:7c:
                    f3:c1:29:9d:d8:92:54:ed:be:c5:29:6d:de:62:51:
                    1e:a0:63:be:35:75:74:09:01:84:d2:cc:3c:3d:ab:
                    d3:ea:06:87:06:47:5d:ad:d4:5d:f9:08:bf:29:3d:
                    8f:38:bd:ab:b2:7c:17:70:2c:5f:9a:4f:c3:40:10:
                    be:99:0e:05:45:1b:63:16:e7:8b:1d:8c:20:f6:f1:
                    4c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:2A:26:44:6E:A2:D4:AD:11:51:68:EA:7E:70:F6:18:57:6B:20:73
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS211946.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8028::/48
                  2a12:dd47:d200::/40

    Signature Algorithm: sha256WithRSAEncryption
         a8:24:4e:8b:09:ab:90:9e:48:15:2d:f7:0b:05:50:be:9e:6a:
         67:37:15:21:45:d4:c0:60:2c:99:99:6b:25:47:22:62:fa:bf:
         72:2a:65:7b:f9:4b:96:51:5d:c6:4a:fe:ec:01:3d:87:bb:e1:
         18:91:9f:de:a9:fc:39:13:b2:af:c7:18:d3:3f:a3:89:b5:35:
         6e:8c:6d:f2:c2:55:4d:01:4d:ef:75:be:0a:ee:fe:dc:ef:94:
         e6:66:a2:42:6a:1e:b3:ea:f9:b3:32:11:ec:2e:0d:4e:71:44:
         1f:3b:38:a1:b0:db:e4:fa:6a:58:d5:07:f6:0d:9d:49:1b:c1:
         91:c5:b6:7c:d3:59:1c:b8:8e:32:f1:59:2a:75:33:5e:24:68:
         e7:c3:fb:98:23:73:f4:73:5a:68:b8:1f:dc:cd:96:93:31:2b:
         72:ba:e8:ce:00:07:5d:2c:79:dd:c0:82:1b:be:d0:a7:57:6f:
         69:14:20:41:ac:94:b0:f0:93:fe:04:99:ba:fe:0e:0b:45:0b:
         48:02:be:f0:91:c8:af:b9:42:1d:46:67:85:75:e0:7e:3a:67:
         2e:1d:8b:d4:c3:c3:e0:27:4c:e5:7b:58:66:bf:30:b8:e2:cb:
         4d:69:de:52:00:90:72:86:8f:81:06:ef:08:75:79:b4:e4:81:
         96:4e:fd:4b
-----BEGIN CERTIFICATE-----
MIIElzCCA3+gAwIBAgIUGKcbcZuqJxWJw2u3jz39wyGdZTowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjU3ZGNiYTlmYzdiMGVmMWYzY2M4MGExYWVlMjJjMDAx
OThlNzY3YTAeFw0yMzA0MDgwMzIwMjdaFw0yNDA0MDYwMzI1MjdaMDMxMTAvBgNV
BAMTKDVGMkEyNjQ0NkVBMkQ0QUQxMTUxNjhFQTdFNzBGNjE4NTc2QjIwNzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDgDW3YhehOxnOKQ3sgfjEj11P
NAzlP0x11gAcvWaT912NB5pXN2WjM0rpKWiGlACz0iJFACHHoHDU2dFgDzDOehOQ
Us3dv9dlurvzVisONWzVYxxaMAMV454KQxuRD52+DJ7NRW+B9mQi/yMWZ0GNIPi4
9OrpuvaTOVoW8aazFiBiMPwlQCktzZGl1akPTrcgnErIhdw4Te1AiUHkFU/F+abu
pPUlgcffMBbI9nlG0QPBfPPBKZ3YklTtvsUpbd5iUR6gY741dXQJAYTSzDw9q9Pq
BocGR12t1F35CL8pPY84vauyfBdwLF+aT8NAEL6ZDgVFG2MW54sdjCD28UwPAgMB
AAGjggGhMIIBnTAdBgNVHQ4EFgQUXyomRG6i1K0RUWjqfnD2GFdrIHMwHwYDVR0j
BBgwFoAUtX3Lqfx7DvHzzIChruIsABmOdnowDgYDVR0PAQH/BAQDAgeAMFkGA1Ud
HwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5jby9yZXBvL0hZU1AvNi9CNTdEQ0JB
OUZDN0IwRUYxRjNDQzgwQTFBRUUyMkMwMDE5OEU3NjdBLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvdFgzTHFmeDdEdkh6eklDaHJ1SXNBQm1PZG5vLmNlcjBEBggr
BgEFBQcBCwQ4MDYwNAYIKwYBBQUHMAuGKHJzeW5jOi8vcnBraS5jby9yZXBvL0hZ
U1AvNi9BUzIxMTk0Ni5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAqBggr
BgEFBQcBBwEB/wQbMBkwFwQCAAIwEQMHACoS3UeAKAMGACoS3UfSMA0GCSqGSIb3
DQEBCwUAA4IBAQCoJE6LCauQnkgVLfcLBVC+nmpnNxUhRdTAYCyZmWslRyJi+r9y
KmV7+UuWUV3GSv7sAT2Hu+EYkZ/eqfw5E7KvxxjTP6OJtTVujG3ywlVNAU3vdb4K
7v7c75TmZqJCah6z6vmzMhHsLg1OcUQfOzihsNvk+mpY1Qf2DZ1JG8GRxbZ801kc
uI4y8VkqdTNeJGjnw/uYI3P0c1pouB/czZaTMStyuujOAAddLHndwIIbvtCnV29p
FCBBrJSw8JP+BJm6/g4LRQtIAr7wkcivuUIdRmeFdeB+OmcuHYvUw8PgJ0zle1hm
vzC44stNad5SAJByho+BBu8IdXm05IGWTv1L
-----END CERTIFICATE-----