Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS212242.roa
File:                     AS212242.roa (raw, json)
Hash identifier:          3pFyUMkQf7tgBdOB+Klp8FWjxk/T7P51RWqVhHAUP28=
Subject key identifier:   8E:8C:75:F2:20:14:FD:BF:B1:17:3F:57:91:08:43:57:56:B1:DA:04
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       7C673AC1867453EFD81B6AB99B705B6177D1D7A8
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS212242.roa
Signing time:             Sat 08 Apr 2023 03:25:48 +0000
ROA not before:           Sat 08 Apr 2023 03:20:48 +0000
ROA not after:            Sat 06 Apr 2024 03:25:48 +0000
asID:                     212242
IP address blocks:        2a12:dd47:80e3::/48 maxlen: 48
                          2a12:dd47:d600::/39 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:67:3a:c1:86:74:53:ef:d8:1b:6a:b9:9b:70:5b:61:77:d1:d7:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:48 2023 GMT
            Not After : Apr  6 03:25:48 2024 GMT
        Subject: CN=8E8C75F22014FDBFB1173F579108435756B1DA04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:cf:bb:22:8d:80:46:cd:ac:a9:c3:11:68:15:
                    0e:e9:c9:ab:4b:f6:07:01:e4:74:e4:75:1e:70:7f:
                    96:e2:55:76:55:a3:3f:1e:72:69:db:d2:5a:ad:74:
                    af:6a:9f:84:5d:e7:54:28:cd:a0:83:09:6e:ba:32:
                    5f:4d:4c:f5:f9:ed:42:c1:77:cd:fd:e7:0d:0a:0f:
                    5d:56:16:6d:3f:37:06:e5:72:53:36:5d:fd:d2:23:
                    a4:8c:f0:b3:4e:ca:51:c5:95:93:6f:fb:45:de:c7:
                    18:43:4a:4b:7b:9b:34:3a:20:df:65:8d:df:1e:5e:
                    84:5d:55:32:9c:dc:6a:d7:9e:43:d7:ba:c3:c4:d8:
                    9f:c2:d5:3d:f0:56:0e:10:dd:ca:73:71:8a:ef:58:
                    00:ad:89:72:12:c8:da:a2:77:5c:51:5e:72:1c:4e:
                    9c:b0:0f:3f:e3:f2:23:af:be:66:8e:cf:33:ea:d8:
                    54:fc:4d:62:a8:55:52:aa:3f:4b:59:bb:6c:18:7a:
                    55:98:be:19:82:47:fb:1d:47:71:bc:8a:7b:df:83:
                    25:1e:89:2e:54:e5:ee:43:5f:eb:b0:b9:ad:47:17:
                    13:a2:af:0d:84:b5:8b:2f:f7:db:89:b6:6b:bb:06:
                    a1:5c:4a:6b:71:2c:9f:d3:cd:d9:4c:04:ae:57:fb:
                    69:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:8C:75:F2:20:14:FD:BF:B1:17:3F:57:91:08:43:57:56:B1:DA:04
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS212242.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:80e3::/48
                  2a12:dd47:d600::/39

    Signature Algorithm: sha256WithRSAEncryption
         64:3d:e4:0b:23:32:1e:ed:c5:d0:93:e3:1f:35:43:d9:1d:03:
         dd:fc:3b:9e:6e:c2:33:5f:8d:99:e0:76:0e:8e:59:4b:0d:3a:
         cb:74:15:be:fd:80:72:7f:2f:40:a2:46:26:77:e0:b7:3a:af:
         f3:9c:b6:69:d9:cb:1e:3e:70:51:4f:3e:f9:f7:13:bb:92:79:
         64:78:0c:c7:eb:e8:ed:e1:d4:e4:df:29:df:d5:c6:ed:13:ce:
         60:28:79:77:aa:4e:4b:f6:b2:67:fd:b2:12:22:14:94:26:ad:
         3c:53:58:b4:6c:0a:f9:c8:fb:21:79:d8:6b:36:1e:67:75:95:
         fc:bb:37:17:81:f2:04:36:a8:67:a7:17:54:00:d0:0d:a6:58:
         33:32:31:8e:0b:0a:dd:3b:9d:da:94:0b:10:bc:ff:4c:eb:cd:
         6b:36:57:7c:40:dc:a0:c2:b9:88:0c:e9:b9:84:1c:d4:d5:56:
         91:a7:ec:bf:1c:df:03:3e:ec:7f:39:30:3b:15:76:9a:d8:87:
         44:a8:40:b1:86:39:d1:f7:46:37:03:77:8e:bd:c2:c4:f1:4a:
         1c:ff:1c:01:16:e7:7b:df:44:2f:d6:3c:7c:14:f8:36:b7:97:
         ed:d8:f4:20:50:1e:c4:43:33:f0:31:4b:80:3e:0a:33:0e:71:
         ac:83:f0:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----