Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS212294.roa
File:                     AS212294.roa (raw, json)
Hash identifier:          wC7/xbtJXAhSjANAMrnwLjjU61EoIWgFEXRNUAB7Y1s=
Subject key identifier:   BA:E1:A2:86:45:29:1D:C6:EA:6F:F6:83:00:7D:23:45:A8:EB:61:D4
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       625625349456BA68C01645D82C96E5A02DA0B113
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS212294.roa
Signing time:             Sat 08 Apr 2023 03:25:36 +0000
ROA not before:           Sat 08 Apr 2023 03:20:36 +0000
ROA not after:            Sat 06 Apr 2024 03:25:36 +0000
asID:                     212294
IP address blocks:        2a12:dd47:8004::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:56:25:34:94:56:ba:68:c0:16:45:d8:2c:96:e5:a0:2d:a0:b1:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:36 2023 GMT
            Not After : Apr  6 03:25:36 2024 GMT
        Subject: CN=BAE1A28645291DC6EA6FF683007D2345A8EB61D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:37:bd:29:38:a0:ba:0b:bc:ce:3c:15:7a:a0:
                    9e:0a:b0:cf:38:94:eb:32:99:02:b9:88:bf:6e:6e:
                    4c:bc:8f:d9:2b:5f:b0:c3:79:b7:84:a5:76:f6:09:
                    55:f5:6e:5e:a1:9b:2b:8a:79:28:5b:dc:0b:e2:1a:
                    fb:61:6f:65:bf:2c:b4:d6:0a:f9:59:91:10:ba:ff:
                    a6:f9:4e:73:27:a4:bd:c1:48:f0:2d:42:bf:dd:71:
                    f9:d2:93:86:8a:89:ae:31:88:9a:0c:60:a5:49:b4:
                    e2:13:5d:f2:4f:f5:c1:12:5f:d8:30:ee:ae:99:bb:
                    ac:81:3f:54:85:29:e2:7a:8c:17:fb:cd:80:b5:1e:
                    cf:5a:6f:93:ec:4b:d7:2a:91:8a:19:e8:59:10:38:
                    2b:22:d9:e5:43:37:1e:56:a9:a7:ce:90:a7:04:a2:
                    27:6d:a3:f6:e0:87:54:e8:fd:4e:ac:cc:83:69:04:
                    9d:f6:fb:89:27:8c:be:21:69:89:0b:b5:26:dc:10:
                    94:d7:65:0a:d8:b4:8c:a2:58:2b:dc:b4:ff:64:00:
                    8a:2e:b5:41:18:24:5d:95:ee:e9:c9:7b:d7:d0:eb:
                    dd:4c:c7:cc:aa:07:94:65:61:60:10:5b:23:99:95:
                    cf:b5:e1:0f:e7:ec:09:54:77:5e:30:e6:24:f4:e2:
                    48:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:E1:A2:86:45:29:1D:C6:EA:6F:F6:83:00:7D:23:45:A8:EB:61:D4
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS212294.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8004::/48

    Signature Algorithm: sha256WithRSAEncryption
         78:d2:a4:9a:82:37:c1:c8:fe:f5:c6:21:e2:1d:50:df:22:e7:
         58:8f:1d:ee:e4:4b:f9:2e:4d:4a:46:f8:bd:b2:00:1d:76:c5:
         7b:62:d6:5c:2a:f6:14:b9:03:aa:ea:ba:1b:de:0c:b9:0d:d8:
         bd:31:c7:2b:98:f6:b5:af:71:26:cc:04:8f:1c:b8:4b:6e:1f:
         74:57:3d:db:99:1a:5f:19:60:e7:18:18:cb:92:a9:5a:df:a6:
         f2:cb:e2:87:ae:f2:84:9b:43:fe:d0:6a:52:8e:41:cd:4a:be:
         07:0d:b6:7b:d7:73:d8:0b:e8:a5:40:80:e6:fa:96:65:c9:2f:
         69:c5:a7:38:96:c7:e5:d7:5f:cf:07:91:0f:44:d3:ee:7a:ad:
         75:27:87:eb:34:61:a7:c7:a4:98:5b:81:d8:55:09:f2:43:11:
         b8:7c:12:13:6a:91:bb:da:fc:d4:53:eb:ac:65:33:0d:a7:d9:
         0b:6b:90:3a:fd:77:01:79:24:46:c9:63:81:14:3c:6c:cc:a7:
         5a:fe:cf:5c:79:ca:9a:f8:c4:27:2b:dd:e1:92:b5:9d:3c:05:
         07:84:11:54:32:42:55:29:5f:6f:c0:df:2f:9a:69:98:51:c0:
         df:f9:4a:78:2d:97:fd:62:66:98:0f:a8:c3:a1:c7:2d:4d:d4:
         57:75:fc:41
-----BEGIN CERTIFICATE-----
MIIEjzCCA3egAwIBAgIUYlYlNJRWumjAFkXYLJbloC2gsRMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjU3ZGNiYTlmYzdiMGVmMWYzY2M4MGExYWVlMjJjMDAx
OThlNzY3YTAeFw0yMzA0MDgwMzIwMzZaFw0yNDA0MDYwMzI1MzZaMDMxMTAvBgNV
BAMTKEJBRTFBMjg2NDUyOTFEQzZFQTZGRjY4MzAwN0QyMzQ1QThFQjYxRDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbN70pOKC6C7zOPBV6oJ4KsM84
lOsymQK5iL9ubky8j9krX7DDebeEpXb2CVX1bl6hmyuKeShb3AviGvthb2W/LLTW
CvlZkRC6/6b5TnMnpL3BSPAtQr/dcfnSk4aKia4xiJoMYKVJtOITXfJP9cESX9gw
7q6Zu6yBP1SFKeJ6jBf7zYC1Hs9ab5PsS9cqkYoZ6FkQOCsi2eVDNx5WqafOkKcE
oidto/bgh1To/U6szINpBJ32+4knjL4haYkLtSbcEJTXZQrYtIyiWCvctP9kAIou
tUEYJF2V7unJe9fQ691Mx8yqB5RlYWAQWyOZlc+14Q/n7AlUd14w5iT04khBAgMB
AAGjggGZMIIBlTAdBgNVHQ4EFgQUuuGihkUpHcbqb/aDAH0jRajrYdQwHwYDVR0j
BBgwFoAUtX3Lqfx7DvHzzIChruIsABmOdnowDgYDVR0PAQH/BAQDAgeAMFkGA1Ud
HwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5jby9yZXBvL0hZU1AvNi9CNTdEQ0JB
OUZDN0IwRUYxRjNDQzgwQTFBRUUyMkMwMDE5OEU3NjdBLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvdFgzTHFmeDdEdkh6eklDaHJ1SXNBQm1PZG5vLmNlcjBEBggr
BgEFBQcBCwQ4MDYwNAYIKwYBBQUHMAuGKHJzeW5jOi8vcnBraS5jby9yZXBvL0hZ
U1AvNi9BUzIxMjI5NC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoS3UeABDANBgkqhkiG9w0BAQsFAAOC
AQEAeNKkmoI3wcj+9cYh4h1Q3yLnWI8d7uRL+S5NSkb4vbIAHXbFe2LWXCr2FLkD
quq6G94MuQ3YvTHHK5j2ta9xJswEjxy4S24fdFc925kaXxlg5xgYy5KpWt+m8svi
h67yhJtD/tBqUo5BzUq+Bw22e9dz2AvopUCA5vqWZckvacWnOJbH5ddfzweRD0TT
7nqtdSeH6zRhp8ekmFuB2FUJ8kMRuHwSE2qRu9r81FPrrGUzDafZC2uQOv13AXkk
RsljgRQ8bMynWv7PXHnKmvjEJyvd4ZK1nTwFB4QRVDJCVSlfb8DfL5ppmFHA3/lK
eC2X/WJmmA+ow6HHLU3UV3X8QQ==
-----END CERTIFICATE-----