Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS213045.roa
File:                     AS213045.roa (raw, json)
Hash identifier:          2wj2CN1B+Hk/zMw8mO1NLrcRln9Eq3XlG6XWfa5hvSA=
Subject key identifier:   2B:47:61:1B:26:DF:EA:C2:D3:0B:C6:1B:7B:B0:5B:A7:BA:1D:E7:73
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       0BC737E413EBEE681C0179F30FA3CEB33637C2B9
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS213045.roa
Signing time:             Sat 08 Apr 2023 03:25:48 +0000
ROA not before:           Sat 08 Apr 2023 03:20:48 +0000
ROA not after:            Sat 06 Apr 2024 03:25:48 +0000
asID:                     213045
IP address blocks:        2a12:dd47:8075::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:c7:37:e4:13:eb:ee:68:1c:01:79:f3:0f:a3:ce:b3:36:37:c2:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:48 2023 GMT
            Not After : Apr  6 03:25:48 2024 GMT
        Subject: CN=2B47611B26DFEAC2D30BC61B7BB05BA7BA1DE773
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f5:83:d9:d8:78:d2:d4:b2:f4:2f:ed:88:16:
                    79:09:08:87:08:1a:1b:78:f5:a7:4d:b7:81:0b:8e:
                    6b:e7:6d:cd:d2:96:8b:f0:fe:1e:50:50:01:5f:ab:
                    84:60:7d:fa:1c:c9:ea:89:3e:cb:e1:c0:06:64:7a:
                    96:b0:66:32:ae:e1:7d:67:d7:09:02:a4:4c:e3:53:
                    5c:26:42:26:f2:55:49:38:79:05:4d:60:75:90:cb:
                    f6:52:ec:c1:9d:d4:02:45:9a:64:7f:47:c7:4e:0b:
                    be:27:53:23:bb:ba:a1:53:78:24:3a:61:06:5e:2a:
                    62:3b:82:f6:46:9c:2d:8f:41:90:67:f2:70:76:3a:
                    06:86:14:68:31:44:1a:25:2a:83:ca:c1:84:1e:98:
                    6e:12:2f:7f:18:33:11:0f:ee:22:0c:73:e5:e8:e2:
                    e3:46:4c:b8:7c:76:64:80:3a:0a:0e:27:12:fd:97:
                    76:44:0b:e7:79:f9:15:90:fb:9e:80:ca:d9:5c:8b:
                    87:f6:66:70:c8:0f:bb:68:69:06:4f:3f:af:42:a3:
                    5e:39:d0:ea:33:51:75:1a:99:ed:10:27:10:1f:68:
                    2d:1d:c9:0a:d2:79:72:a9:c4:07:1a:6f:ff:22:bb:
                    9f:cf:ad:5c:f1:30:6d:5a:c4:c1:09:37:5d:8a:c0:
                    d9:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:47:61:1B:26:DF:EA:C2:D3:0B:C6:1B:7B:B0:5B:A7:BA:1D:E7:73
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS213045.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8075::/48

    Signature Algorithm: sha256WithRSAEncryption
         ac:cf:02:c2:e8:97:0a:09:dd:fc:0c:82:d9:7a:81:75:7d:c3:
         37:cb:b6:fb:0d:66:97:4d:74:80:3d:41:2b:b4:db:bc:0c:63:
         07:41:ea:d3:ee:d2:83:cf:15:60:e7:bb:0a:d7:ad:65:bf:06:
         24:40:cf:26:8a:b3:42:62:79:94:f4:69:cf:d8:91:d0:13:50:
         8e:74:02:bf:58:b1:90:8d:86:66:71:02:6e:a8:29:80:34:0d:
         ab:bd:15:17:fa:c9:a8:79:b2:ee:7d:5d:0d:00:59:20:4e:d7:
         54:9b:3f:27:c7:32:82:c2:90:c9:1c:1a:92:4f:ac:72:b5:ab:
         46:d4:d1:d7:b0:9a:9a:fd:2a:b7:a3:1b:f9:d7:5e:2c:05:03:
         f7:6b:99:a2:45:e4:bb:07:92:7d:ff:3d:8c:38:63:7b:02:07:
         65:52:6f:1e:26:e4:17:97:21:dc:58:d2:98:ae:22:f7:75:01:
         fb:07:16:c6:7e:39:fb:21:e0:dc:bb:ac:dd:e6:51:42:6d:9e:
         48:87:64:72:5c:9a:e4:55:2a:ad:d2:08:9b:0b:80:47:cd:51:
         a9:02:71:d1:4a:9a:b4:28:11:20:63:79:08:e6:24:cc:f3:4e:
         29:a1:82:b4:20:b1:02:fd:39:1a:99:72:0c:0f:4a:c0:19:c5:
         41:f8:cc:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----