Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS213327.roa
File:                     AS213327.roa (raw, json)
Hash identifier:          EfBI5m8Rq99Np3eoaXqi7E4GxXbhsTu3m7PxX/nBT8k=
Subject key identifier:   7E:A2:AE:C7:05:0F:AE:7C:2E:0A:85:DF:E9:65:FE:88:E8:F1:58:5C
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       4D2CE5568EDAE3894280F9BFD718349DB8264A72
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS213327.roa
Signing time:             Sat 08 Apr 2023 03:25:33 +0000
ROA not before:           Sat 08 Apr 2023 03:20:33 +0000
ROA not after:            Sat 06 Apr 2024 03:25:33 +0000
asID:                     213327
IP address blocks:        2a12:dd47:804f::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:2c:e5:56:8e:da:e3:89:42:80:f9:bf:d7:18:34:9d:b8:26:4a:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:33 2023 GMT
            Not After : Apr  6 03:25:33 2024 GMT
        Subject: CN=7EA2AEC7050FAE7C2E0A85DFE965FE88E8F1585C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f6:65:39:54:c4:f7:a2:5a:db:bf:ee:75:91:
                    21:21:c3:e0:cf:fb:1a:67:d0:f3:ef:fa:81:40:45:
                    e8:26:81:6c:a3:61:2a:33:be:03:a1:2b:98:44:30:
                    f0:12:50:52:c6:47:1f:28:45:c9:ac:99:70:7d:81:
                    e3:8a:fa:e2:21:d0:85:d8:9c:1b:fe:dd:72:24:b3:
                    e1:89:f6:53:4d:d4:eb:22:c1:a3:15:fd:4f:5f:aa:
                    e5:84:7f:50:51:0b:4e:1b:eb:6e:0d:c6:8c:2f:ca:
                    93:96:5c:3c:52:c1:22:d9:c9:98:8b:a9:bb:e4:6e:
                    c5:b0:c8:6b:c0:63:c5:5e:fe:ec:20:e4:da:7d:d6:
                    f9:02:fd:d5:59:a1:23:e4:38:83:e3:b0:49:9b:13:
                    a8:cf:b4:a0:e9:b6:2e:80:15:78:7d:cd:c9:28:a4:
                    64:62:aa:94:5d:57:7e:ff:8b:13:e7:60:d3:b7:d8:
                    97:9e:cb:1c:63:54:f7:d0:84:7a:8a:49:c8:ca:38:
                    6b:99:5b:82:c8:97:eb:9b:e8:8f:84:c2:6d:6d:6d:
                    c1:3a:71:5b:fe:97:f2:7a:13:c9:40:e4:e4:ff:bd:
                    72:58:40:fa:f7:66:0b:b2:98:7e:c6:02:e0:8b:56:
                    6f:33:b6:40:b9:22:ce:33:eb:a3:23:72:0c:32:2f:
                    ff:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:A2:AE:C7:05:0F:AE:7C:2E:0A:85:DF:E9:65:FE:88:E8:F1:58:5C
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS213327.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:804f::/48

    Signature Algorithm: sha256WithRSAEncryption
         83:1f:53:cf:5f:c6:ae:73:8c:14:84:1e:17:49:41:be:0b:c1:
         bc:66:78:57:99:bc:c3:c1:fe:b7:66:69:d0:68:54:67:25:d4:
         65:d1:33:3b:54:9f:d4:e2:a2:85:b7:cc:3d:ee:8f:3e:bc:1a:
         e2:24:cd:ee:36:33:5d:23:d6:cb:a8:14:e6:68:c2:b3:12:09:
         5a:40:d1:39:06:da:76:27:98:86:c6:07:08:bb:bb:36:16:9c:
         89:69:3d:f4:a2:d9:f8:eb:88:d2:1f:0b:7a:3c:97:14:2e:f5:
         3b:34:c1:b3:63:1c:02:df:02:af:aa:85:66:a0:22:0b:10:46:
         fb:b4:99:20:6b:84:95:90:74:d8:e1:d2:ff:df:3b:af:6a:0a:
         01:a9:36:3a:07:c3:73:ca:58:12:a8:fe:e2:fe:9e:5c:b7:a5:
         a3:f0:1a:60:d0:3f:1b:44:24:f0:8a:35:ca:a6:b6:49:86:cd:
         fd:ac:a4:0d:20:be:24:92:bf:c2:09:34:07:55:d7:d7:00:b6:
         21:fb:9c:70:d1:92:88:13:4c:79:20:00:b9:33:8e:fe:8d:fa:
         26:90:b4:dd:27:76:ba:20:98:eb:05:b8:05:fe:ad:cd:8b:6b:
         18:1c:ee:0e:94:61:0f:bb:2f:9e:91:c2:72:80:82:a9:9c:31:
         23:72:f6:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----