Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS212071.roa
File:                     AS212071.roa (raw, json)
Hash identifier:          P6UcRnzPFAR4QMhHmZcSaknTj+G1tBHH2IVkvuY6qXA=
Subject key identifier:   33:CF:61:72:A5:26:83:FC:47:5C:2F:D8:6C:F3:FE:0B:F2:86:3E:15
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       1C27B9C8113D6C95FBDDD99021CF850CAA8E7EB0
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS212071.roa
Signing time:             Sat 08 Apr 2023 03:25:27 +0000
ROA not before:           Sat 08 Apr 2023 03:20:27 +0000
ROA not after:            Sat 06 Apr 2024 03:25:27 +0000
asID:                     212071
IP address blocks:        2a12:dd47:8190::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:27:b9:c8:11:3d:6c:95:fb:dd:d9:90:21:cf:85:0c:aa:8e:7e:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:27 2023 GMT
            Not After : Apr  6 03:25:27 2024 GMT
        Subject: CN=33CF6172A52683FC475C2FD86CF3FE0BF2863E15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ee:30:30:3a:13:34:83:d1:ab:17:5d:21:79:
                    8f:2f:fc:ab:2f:02:f1:bf:20:75:86:b2:80:79:1d:
                    3e:5e:d2:4e:6f:a1:20:a1:13:e4:f0:5b:33:03:5e:
                    f3:9a:45:3e:cb:db:83:f0:74:33:97:05:76:14:64:
                    53:8e:c4:3c:42:05:36:6e:79:ec:4d:90:7e:e4:bf:
                    d2:68:79:ec:ca:85:f3:ea:a1:76:6f:b9:7b:57:32:
                    d7:bd:43:7f:af:d9:ef:a7:64:84:cb:31:48:e0:f3:
                    1c:37:5a:a9:ae:3e:1d:39:16:64:b4:3a:a2:6f:83:
                    71:88:28:62:d0:62:69:6a:8c:14:c2:d4:c9:83:36:
                    87:31:9d:ea:42:c1:00:6f:b1:b5:21:90:cb:c9:08:
                    41:89:e0:75:20:10:7c:32:66:fb:25:19:78:b4:09:
                    c0:3d:f8:9e:bc:ce:3d:7e:c9:52:5e:1d:82:26:20:
                    ff:44:a3:d9:10:17:6a:d5:c6:a7:54:75:74:ba:ce:
                    69:72:c7:fc:af:d6:01:f1:94:6b:4e:81:2d:a5:73:
                    3c:21:f1:bf:d2:0b:ef:ba:3a:33:f6:58:1b:e7:f7:
                    35:48:12:3c:35:73:c3:12:0e:26:bf:50:c2:e8:a3:
                    83:f6:80:28:9b:76:77:41:8c:57:6f:f6:51:65:34:
                    ce:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:CF:61:72:A5:26:83:FC:47:5C:2F:D8:6C:F3:FE:0B:F2:86:3E:15
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS212071.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8190::/44

    Signature Algorithm: sha256WithRSAEncryption
         02:2d:e6:76:d1:ae:c7:63:89:ba:52:b7:7c:d2:9b:3e:79:0e:
         ef:09:87:a8:fb:19:04:35:a5:45:b8:f6:15:56:83:d6:ec:9f:
         31:f8:9d:c1:03:44:49:1e:54:af:2b:7e:bd:85:d2:0c:a7:57:
         6e:a6:6b:22:7e:0d:3e:bc:31:b3:77:7b:e0:be:49:10:60:43:
         a5:e0:11:98:16:a9:a0:f3:dd:24:8b:5a:3b:af:7d:77:b3:43:
         96:ed:a2:44:ac:79:17:1d:cb:93:b0:ad:1e:33:51:01:fc:2a:
         7b:27:90:0a:6d:85:c1:16:cf:70:f3:0d:94:77:bc:70:f6:38:
         df:46:6a:d9:c3:f4:3d:83:df:12:97:c6:c2:0d:73:c6:01:67:
         f9:92:fc:8a:01:a1:4c:66:e9:66:0f:8c:69:dd:9b:12:fe:a3:
         3f:12:f2:92:4e:64:63:08:cb:c1:45:2a:17:96:28:69:b4:41:
         bb:c1:9b:e0:84:ba:d8:d1:eb:a1:e4:c1:cc:ed:5f:c5:6d:58:
         50:b8:0a:06:d8:97:32:42:01:40:06:fe:f5:bf:82:90:72:0d:
         3a:13:3b:73:20:f6:10:e6:cb:d3:68:fd:b5:52:f8:aa:46:8c:
         e6:70:47:d5:6c:59:0f:0d:cb:05:6b:65:83:6d:0e:33:a2:46:
         4e:3e:25:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----