Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS21738.roa
File:                     AS21738.roa (raw, json)
Hash identifier:          1d9tNA5LhHeWtwlYykeJkiE8Qt4cacPJ72PGRsQBoX4=
Subject key identifier:   88:15:BD:2D:33:AE:E8:F7:51:26:18:24:76:68:CA:06:8A:22:14:FD
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       2407B83BD0B3A73A1BFF23C846935B9EE3F24CF7
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS21738.roa
Signing time:             Sat 08 Apr 2023 03:25:33 +0000
ROA not before:           Sat 08 Apr 2023 03:20:33 +0000
ROA not after:            Sat 06 Apr 2024 03:25:33 +0000
asID:                     21738
IP address blocks:        2a12:dd47:5f00::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:07:b8:3b:d0:b3:a7:3a:1b:ff:23:c8:46:93:5b:9e:e3:f2:4c:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:33 2023 GMT
            Not After : Apr  6 03:25:33 2024 GMT
        Subject: CN=8815BD2D33AEE8F7512618247668CA068A2214FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b9:92:be:a7:fc:21:e2:44:d6:cb:0c:c8:2d:
                    a0:a5:ed:74:84:da:4d:bb:7c:54:10:42:4c:b4:67:
                    8d:45:4e:e5:d0:f5:ef:e4:fe:35:bc:cc:91:d4:fd:
                    1e:69:b2:8c:42:90:7e:40:88:44:ed:38:c3:0d:cf:
                    7f:81:5b:94:17:68:e7:c2:3a:61:30:28:e3:f7:da:
                    ee:83:c0:a1:6b:5c:9b:5a:1e:b7:0f:fd:6f:a2:af:
                    25:30:bc:d6:7e:44:39:07:e6:16:49:f6:95:b7:e2:
                    14:23:a0:1b:1d:c3:be:e8:c5:b9:bd:b6:4c:96:f4:
                    59:f5:1a:f8:da:e6:c1:f1:ab:62:c3:d7:70:bb:a6:
                    8e:0f:f9:ae:1a:27:a8:f4:3c:fd:b0:38:5b:e6:fc:
                    00:43:92:a5:77:39:95:6f:f9:ec:8a:32:4c:6c:6c:
                    e4:76:b4:c3:2b:c2:ef:3f:fa:bd:82:65:ce:37:8d:
                    3d:b9:dc:86:b5:4d:95:93:07:df:2e:a1:40:c5:aa:
                    0d:d8:54:de:ad:13:c4:7a:b0:e0:e4:9e:73:38:90:
                    53:ac:f6:0f:cb:a4:9b:0d:a5:5d:76:9a:56:fb:37:
                    6e:71:52:43:b8:17:33:80:77:8c:ed:3b:b5:46:50:
                    aa:32:b5:1a:d1:24:c5:74:fa:f8:25:2a:ec:17:4a:
                    58:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:15:BD:2D:33:AE:E8:F7:51:26:18:24:76:68:CA:06:8A:22:14:FD
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS21738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:5f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         8f:81:b3:50:95:a6:4d:c6:b4:53:63:10:ce:34:39:87:08:35:
         30:22:85:48:13:0c:2b:88:7c:1a:d4:90:05:ab:85:55:ac:1b:
         95:34:fe:e0:12:0c:e3:be:df:02:46:7f:8b:a9:a6:ef:5c:38:
         18:44:73:52:d7:82:40:28:54:ff:e1:39:89:59:d4:9d:63:8d:
         14:55:35:03:5b:f6:b9:a3:0e:d6:64:91:77:54:20:16:9b:ff:
         a7:2b:67:9f:fe:ca:0d:92:a6:4b:6b:ab:ef:fa:50:38:9f:50:
         94:c3:23:b2:5a:67:87:69:b6:e4:77:f4:88:dc:1e:c3:5b:56:
         c3:9a:b8:a5:1d:23:51:08:e2:9f:ac:a5:a7:fe:f1:ba:d0:00:
         5a:f1:f7:2c:0d:55:65:f5:bb:b1:93:1b:0c:5d:4f:70:18:9d:
         32:a3:4b:d6:7d:e3:64:24:eb:83:66:04:2d:aa:77:c3:75:5e:
         df:b8:75:a2:f4:b1:1e:80:61:84:91:5d:15:95:c9:9d:39:e6:
         1d:3c:ea:01:28:53:59:f3:58:3d:bf:6a:a9:b6:fc:a9:f1:ed:
         06:de:07:ee:2c:70:f6:c7:59:44:fa:51:19:93:1a:5d:81:54:
         ed:e8:00:8d:f6:0a:75:f6:41:60:51:84:c6:38:66:f7:7e:cc:
         20:b6:3c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----