Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS212483.roa
File:                     AS212483.roa (raw, json)
Hash identifier:          qgtIZTHtFruYLaYjNJ+r2DgPbcPtZX7AM4GDLJVrwyg=
Subject key identifier:   23:6F:89:B9:C6:9A:D6:87:6D:90:E7:D0:52:B1:1F:65:82:BE:D3:CC
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       257EF8D3DF5E1A05E78F2774E8BECC33FD747168
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS212483.roa
Signing time:             Sat 08 Apr 2023 03:25:40 +0000
ROA not before:           Sat 08 Apr 2023 03:20:40 +0000
ROA not after:            Sat 06 Apr 2024 03:25:40 +0000
asID:                     212483
IP address blocks:        2a12:dd47:80b0::/44 maxlen: 48
                          2a12:dd47:8f00::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:7e:f8:d3:df:5e:1a:05:e7:8f:27:74:e8:be:cc:33:fd:74:71:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:40 2023 GMT
            Not After : Apr  6 03:25:40 2024 GMT
        Subject: CN=236F89B9C69AD6876D90E7D052B11F6582BED3CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:6c:08:aa:74:c8:6a:64:89:18:43:30:99:3e:
                    61:32:ee:d2:e9:05:83:c2:a5:6a:06:3a:99:b0:3c:
                    f4:eb:15:73:72:18:7b:d8:36:40:1f:22:31:96:cf:
                    1a:7e:09:42:c1:ea:74:ce:60:a6:d1:01:58:d1:cb:
                    87:86:94:f0:1e:67:74:75:2d:3f:77:7e:63:6c:e5:
                    75:88:a7:a5:41:35:b9:19:c5:5c:22:ee:bb:a1:2b:
                    40:84:bf:de:e8:8c:33:11:eb:46:21:79:0e:6d:4b:
                    9d:0c:04:21:21:db:ab:4e:73:ec:48:6e:22:41:c9:
                    c0:e9:fc:25:e7:dd:8c:f4:ec:91:f8:8d:98:a8:c7:
                    2a:cf:47:68:f9:9f:52:2a:30:f7:d2:b1:f9:44:6e:
                    22:18:bb:af:e7:13:f9:41:a3:d5:d2:b4:e5:67:d0:
                    a7:86:b8:37:d0:c4:a8:6b:12:ce:af:ec:03:14:e2:
                    d8:87:df:21:0b:8a:2e:85:46:d3:a4:8d:88:89:a4:
                    f0:f8:81:2f:78:cd:96:9d:a0:b4:b6:60:a3:e4:9c:
                    d8:af:50:94:a4:bd:22:3d:f9:02:8a:7a:63:94:a2:
                    b3:2f:66:3e:26:42:77:cf:02:a8:df:20:83:ce:04:
                    4c:8f:12:f2:60:0c:f7:d5:5b:ce:a4:24:0c:00:d9:
                    39:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:6F:89:B9:C6:9A:D6:87:6D:90:E7:D0:52:B1:1F:65:82:BE:D3:CC
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS212483.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:80b0::/44
                  2a12:dd47:8f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         51:8f:75:aa:16:5d:93:6f:e4:f9:c4:ec:10:f1:19:a2:ea:b5:
         2c:6f:85:83:b9:a3:7b:58:b2:7e:81:09:a3:ad:9c:15:88:c6:
         f4:f7:f9:9a:92:d1:6c:87:ca:15:38:94:b8:0d:7a:5e:65:af:
         2b:94:c3:7a:fe:9e:b2:ce:56:fb:9f:11:ba:99:67:04:31:27:
         54:65:27:44:f3:ab:50:f8:e9:a5:3a:d1:3e:03:bb:41:af:35:
         f8:21:28:3a:06:16:6f:a1:39:aa:81:c3:10:77:2d:6c:32:c2:
         42:c7:db:44:87:05:f5:a2:67:4a:be:06:8a:2d:5d:24:59:c0:
         13:b4:d3:48:80:f6:d7:4d:94:e8:81:c7:e3:39:2f:bd:cb:e3:
         b8:ac:2b:69:0d:0a:79:55:b9:43:e3:87:2a:86:3a:e7:e2:0d:
         5d:00:4a:29:8d:3d:59:39:41:c1:32:2c:a2:b9:e8:9c:33:33:
         fe:68:4a:c9:12:db:3e:8a:e7:22:96:e6:3a:70:5c:38:ff:9d:
         a6:27:5e:c2:5a:b8:ac:d5:98:4a:0c:a0:2e:82:8c:85:99:3c:
         bb:8d:74:0b:48:2c:d0:bf:ff:7d:a1:4a:9d:2d:fb:e4:8c:28:
         e7:75:11:70:91:a7:0c:18:0c:f8:c6:8e:eb:14:d1:bf:ba:4b:
         22:56:75:b5
-----BEGIN CERTIFICATE-----
MIIElzCCA3+gAwIBAgIUJX74099eGgXnjyd06L7MM/10cWgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjU3ZGNiYTlmYzdiMGVmMWYzY2M4MGExYWVlMjJjMDAx
OThlNzY3YTAeFw0yMzA0MDgwMzIwNDBaFw0yNDA0MDYwMzI1NDBaMDMxMTAvBgNV
BAMTKDIzNkY4OUI5QzY5QUQ2ODc2RDkwRTdEMDUyQjExRjY1ODJCRUQzQ0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYbAiqdMhqZIkYQzCZPmEy7tLp
BYPCpWoGOpmwPPTrFXNyGHvYNkAfIjGWzxp+CULB6nTOYKbRAVjRy4eGlPAeZ3R1
LT93fmNs5XWIp6VBNbkZxVwi7ruhK0CEv97ojDMR60YheQ5tS50MBCEh26tOc+xI
biJBycDp/CXn3Yz07JH4jZioxyrPR2j5n1IqMPfSsflEbiIYu6/nE/lBo9XStOVn
0KeGuDfQxKhrEs6v7AMU4tiH3yELii6FRtOkjYiJpPD4gS94zZadoLS2YKPknNiv
UJSkvSI9+QKKemOUorMvZj4mQnfPAqjfIIPOBEyPEvJgDPfVW86kJAwA2TmHAgMB
AAGjggGhMIIBnTAdBgNVHQ4EFgQUI2+Jucaa1odtkOfQUrEfZYK+08wwHwYDVR0j
BBgwFoAUtX3Lqfx7DvHzzIChruIsABmOdnowDgYDVR0PAQH/BAQDAgeAMFkGA1Ud
HwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5jby9yZXBvL0hZU1AvNi9CNTdEQ0JB
OUZDN0IwRUYxRjNDQzgwQTFBRUUyMkMwMDE5OEU3NjdBLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvdFgzTHFmeDdEdkh6eklDaHJ1SXNBQm1PZG5vLmNlcjBEBggr
BgEFBQcBCwQ4MDYwNAYIKwYBBQUHMAuGKHJzeW5jOi8vcnBraS5jby9yZXBvL0hZ
U1AvNi9BUzIxMjQ4My5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAqBggr
BgEFBQcBBwEB/wQbMBkwFwQCAAIwEQMHBCoS3UeAsAMGACoS3UePMA0GCSqGSIb3
DQEBCwUAA4IBAQBRj3WqFl2Tb+T5xOwQ8Rmi6rUsb4WDuaN7WLJ+gQmjrZwViMb0
9/maktFsh8oVOJS4DXpeZa8rlMN6/p6yzlb7nxG6mWcEMSdUZSdE86tQ+OmlOtE+
A7tBrzX4ISg6BhZvoTmqgcMQdy1sMsJCx9tEhwX1omdKvgaKLV0kWcATtNNIgPbX
TZTogcfjOS+9y+O4rCtpDQp5VblD44cqhjrn4g1dAEopjT1ZOUHBMiyiueicMzP+
aErJEts+iuciluY6cFw4/52mJ17CWris1ZhKDKAugoyFmTy7jXQLSCzQv/99oUqd
LfvkjCjndRFwkacMGAz4xo7rFNG/uksiVnW1
-----END CERTIFICATE-----