Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS212983.roa
File:                     AS212983.roa (raw, json)
Hash identifier:          O0dYozzXXL6jv7nSDHQnpkKarvCHV9CNS0oEm0foInA=
Subject key identifier:   62:28:4C:94:D1:9A:B3:51:56:A1:23:26:86:EC:06:42:C7:DB:1A:62
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       3EA5DF581555D713D08758693AB42828A80CD5E6
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS212983.roa
Signing time:             Sat 08 Apr 2023 03:25:44 +0000
ROA not before:           Sat 08 Apr 2023 03:20:44 +0000
ROA not after:            Sat 06 Apr 2024 03:25:44 +0000
asID:                     212983
IP address blocks:        2a12:dd47:8169::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:a5:df:58:15:55:d7:13:d0:87:58:69:3a:b4:28:28:a8:0c:d5:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:44 2023 GMT
            Not After : Apr  6 03:25:44 2024 GMT
        Subject: CN=62284C94D19AB35156A1232686EC0642C7DB1A62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:96:3e:fd:00:e9:96:7e:89:55:b5:9a:26:22:
                    04:02:79:2f:62:91:e5:af:d2:89:a0:ac:2b:fb:d7:
                    d9:d3:66:9b:39:00:b5:5f:e3:5c:a7:d1:ed:2b:db:
                    f4:b4:a1:2c:9b:82:2e:f9:ae:08:1a:c8:ec:26:e6:
                    7f:86:dc:c4:58:37:6e:b9:11:c6:43:2c:a5:c8:ec:
                    a9:05:89:e1:08:2a:5d:e0:24:97:38:f5:37:05:97:
                    a4:2d:41:f3:97:cb:bb:1d:23:04:71:c3:15:25:17:
                    0c:d0:0e:cb:ad:d3:96:f6:ee:ae:5f:e5:ec:63:8c:
                    0c:f7:f5:c5:39:f8:99:96:dd:dc:fc:d6:d9:e2:61:
                    6f:4b:f8:6e:07:85:a9:e6:35:f5:3c:2b:f7:4b:c6:
                    d4:ab:b9:d8:41:29:d0:e9:2f:8d:0d:10:bc:87:80:
                    b1:cf:74:9b:d1:d2:8b:0e:1d:2f:f7:b5:10:ab:78:
                    9b:c4:e1:33:76:b5:ab:71:d5:59:3b:0b:a0:0d:df:
                    95:19:28:3b:6c:3e:4b:e5:7d:a6:3c:6e:64:0d:0c:
                    bd:a2:40:19:ce:8d:55:31:2a:51:0f:81:d5:9c:45:
                    e4:d1:f3:f3:25:83:d6:1a:c5:1e:4a:36:f8:c4:43:
                    2e:7b:a6:50:2d:00:4e:7a:4d:7a:92:72:12:bb:57:
                    71:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:28:4C:94:D1:9A:B3:51:56:A1:23:26:86:EC:06:42:C7:DB:1A:62
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS212983.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8169::/48

    Signature Algorithm: sha256WithRSAEncryption
         83:63:bf:4c:6e:fc:30:78:68:a0:5d:4f:e1:bf:fc:c1:05:ac:
         74:7f:d4:23:cd:7e:4d:5e:c7:17:cf:d7:61:e3:0b:77:dc:e2:
         be:72:74:d4:fb:70:c4:22:0c:21:d8:d0:c9:47:cc:87:b2:1b:
         5d:35:8d:b2:90:a1:b2:8e:85:e0:e8:5c:15:a4:52:6b:c0:19:
         32:b1:31:fe:ba:18:f0:5b:7a:d0:dc:0c:68:c3:26:ea:61:15:
         d5:8e:15:06:72:5c:30:b6:d3:32:64:41:b5:9c:17:8a:8b:1d:
         5c:32:39:28:93:d1:ae:71:73:c6:a3:25:d2:9d:fe:e7:39:34:
         f6:bd:64:89:04:fd:dd:10:5f:6b:d9:d7:1c:9d:50:99:dd:97:
         0b:69:49:d5:f5:15:9b:b0:44:9c:90:dc:ff:eb:58:0b:67:6e:
         27:43:0e:8a:b7:b5:f4:b2:6b:12:52:4d:19:78:f0:13:7c:32:
         11:01:43:0d:3e:70:73:82:ef:63:cc:58:6a:aa:1b:60:dc:20:
         06:ac:6a:e3:ca:ca:ae:cf:9c:ae:3e:eb:4c:7b:cd:31:11:5f:
         ba:ac:d4:37:5a:ce:22:39:73:f8:41:e1:47:f3:ca:83:e0:de:
         92:d5:24:15:74:19:5e:bd:0d:9e:9d:3b:a2:ed:dc:6f:ce:ca:
         59:a2:c9:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----