Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS212503.roa
File:                     AS212503.roa (raw, json)
Hash identifier:          FFiP3LpOHh3PBzMJOh3IjinU9UiwTGaVEYutlYcpFs4=
Subject key identifier:   75:15:D7:06:1F:ED:2F:AA:4C:15:16:6B:37:0C:4C:DB:77:46:2E:F4
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       4B78722DAFE2688A76B36EB0EE82321C1E89437F
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS212503.roa
Signing time:             Sat 08 Apr 2023 03:25:24 +0000
ROA not before:           Sat 08 Apr 2023 03:20:24 +0000
ROA not after:            Sat 06 Apr 2024 03:25:24 +0000
asID:                     212503
IP address blocks:        2a12:dd47:8ee0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:78:72:2d:af:e2:68:8a:76:b3:6e:b0:ee:82:32:1c:1e:89:43:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:24 2023 GMT
            Not After : Apr  6 03:25:24 2024 GMT
        Subject: CN=7515D7061FED2FAA4C15166B370C4CDB77462EF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5b:d3:d6:66:5b:22:94:f4:e3:2c:26:46:c2:
                    b8:d7:92:44:c2:8d:fe:7f:62:a9:b0:3a:fa:10:14:
                    7e:c8:cc:9a:ab:c8:ab:47:4f:7a:f1:17:27:64:9f:
                    ac:77:96:6d:99:3d:6e:66:b2:11:b1:05:74:8d:a8:
                    c4:19:f5:6d:66:ed:4e:4c:cd:00:39:61:a2:0c:96:
                    f3:ac:91:6c:25:16:8f:89:84:ef:fa:c7:43:3b:77:
                    92:1a:92:01:89:d9:a3:17:6f:17:db:87:d4:29:33:
                    56:2b:5b:7f:41:ab:e3:73:9c:ba:76:57:04:e8:07:
                    64:d2:4e:a7:a0:cf:42:ab:85:62:8c:95:10:e1:b2:
                    88:d3:fe:49:8d:42:ce:52:1b:71:c1:91:3d:03:68:
                    4a:33:bc:3a:08:51:20:f5:8f:ad:93:78:13:89:b8:
                    97:d5:26:05:9b:fe:cb:9a:de:0f:14:18:ff:f0:f4:
                    fe:35:1f:77:36:2e:34:b8:94:0d:be:d2:28:4c:7e:
                    b3:1f:2a:67:c1:f3:f2:6e:a9:40:49:6f:89:e5:59:
                    6d:67:75:b7:b6:00:04:87:99:21:a5:3e:be:1f:9b:
                    c4:1e:f9:86:0d:bb:8d:bc:61:dd:2c:8d:76:6f:16:
                    ce:6f:43:12:1b:16:40:39:f3:6c:a1:f5:3b:1f:0c:
                    95:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:15:D7:06:1F:ED:2F:AA:4C:15:16:6B:37:0C:4C:DB:77:46:2E:F4
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS212503.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8ee0::/44

    Signature Algorithm: sha256WithRSAEncryption
         5e:8e:4d:6d:3a:c1:36:63:19:fd:a4:38:cc:48:20:b5:77:ee:
         4b:a0:50:04:c5:eb:a0:5b:f2:91:ea:97:b3:f5:40:a3:77:8a:
         2e:8d:65:88:9c:34:c1:ff:37:8d:98:f6:48:37:b5:21:68:f8:
         41:09:fd:0a:43:fe:29:2e:ee:d7:f8:8f:bd:5b:f7:81:62:aa:
         3a:cd:f5:fa:5b:ed:a6:2c:aa:80:71:68:24:51:b4:15:2a:09:
         d0:29:b8:3e:e1:d8:54:22:fe:66:61:9d:da:99:9b:9c:a8:a8:
         b4:68:d2:4f:13:8e:91:ee:e6:4c:86:6e:eb:00:52:8f:48:16:
         09:9b:c2:17:67:84:47:16:86:37:80:38:2c:29:ad:f7:d3:8c:
         36:23:ba:37:ba:77:89:80:52:de:8f:00:6b:ea:a5:e9:8d:ba:
         ce:e8:12:33:b3:ca:af:25:a7:4e:27:03:30:37:99:ff:ed:04:
         58:f5:4f:99:98:fd:c5:92:22:80:4f:3a:a4:5d:52:b0:37:de:
         8e:f8:18:ea:67:e5:ff:8c:78:e0:c0:56:dd:09:74:f0:69:06:
         96:cc:bf:93:d2:fa:53:2f:e6:3c:40:6b:e0:40:9e:ab:e6:00:
         34:1b:da:a9:ce:de:9a:68:e1:ec:49:6f:68:cb:6d:20:fc:f7:
         47:20:14:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----