Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS35913.roa
File:                     AS35913.roa (raw, json)
Hash identifier:          qQSaRJiTvudv6TC1Qb9d9DZoVRbbb7VPMhPkprUu9VA=
Subject key identifier:   64:F4:69:F9:26:DE:15:05:9F:B6:EF:15:1F:6D:9A:B5:73:0A:62:1D
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       2A5F9DDDA6576F4B5F6662CECAA12680C493E229
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS35913.roa
Signing time:             Sat 08 Apr 2023 03:25:39 +0000
ROA not before:           Sat 08 Apr 2023 03:20:39 +0000
ROA not after:            Sat 06 Apr 2024 03:25:39 +0000
asID:                     35913
IP address blocks:        2a12:dd47:804b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:5f:9d:dd:a6:57:6f:4b:5f:66:62:ce:ca:a1:26:80:c4:93:e2:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:39 2023 GMT
            Not After : Apr  6 03:25:39 2024 GMT
        Subject: CN=64F469F926DE15059FB6EF151F6D9AB5730A621D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:bd:d8:e8:20:70:94:d9:18:91:1a:af:24:f7:
                    51:85:f2:56:56:86:c7:93:7a:1f:6b:b4:09:18:50:
                    35:62:29:b7:42:de:23:ef:c4:62:10:d2:4b:8d:2f:
                    a5:2f:d9:cd:d1:92:57:03:cb:98:17:2b:d1:83:1b:
                    c4:28:d6:f0:56:67:fd:81:af:3e:4a:a6:19:93:71:
                    9a:4d:b3:53:80:c5:b6:3d:b1:a4:c7:f2:b7:f4:a9:
                    d6:8a:03:36:07:95:dc:23:fc:6c:55:06:c9:d3:1f:
                    d4:f4:49:be:96:3c:2b:5d:54:5c:19:1d:02:d6:86:
                    bd:14:22:26:8d:94:41:1d:e9:43:af:82:c5:e1:35:
                    d1:0b:d6:14:f5:8d:35:ce:45:92:66:73:e3:2e:bb:
                    bb:56:49:2d:87:c1:4e:73:62:65:e8:63:6c:66:de:
                    48:7c:19:d9:ed:4d:58:93:0d:8e:d8:fb:47:3b:f4:
                    57:0f:ea:53:de:ff:be:68:a8:56:fc:e9:ee:5c:b4:
                    81:9a:5c:34:32:c8:a2:8c:4a:0b:cb:5c:68:2a:3e:
                    ac:8a:af:3e:7b:21:07:52:d5:e0:20:21:53:17:c9:
                    aa:ab:38:ea:a7:97:83:4a:cd:36:89:65:7a:69:b5:
                    8a:0b:66:41:70:ce:04:53:77:93:ba:6a:91:5e:d1:
                    6c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:F4:69:F9:26:DE:15:05:9F:B6:EF:15:1F:6D:9A:B5:73:0A:62:1D
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS35913.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:804b::/48

    Signature Algorithm: sha256WithRSAEncryption
         71:c4:47:2c:ef:e4:40:43:80:c5:34:f7:e8:4f:6a:ce:16:3c:
         ea:ab:be:72:9e:c2:5c:97:ae:e2:72:fe:fd:b7:42:36:e3:3c:
         2d:64:25:5c:d3:10:5b:ba:ad:78:de:f8:d5:e6:16:ba:3b:41:
         94:3b:3c:84:f8:d2:b5:ed:f3:30:53:9b:11:b4:7f:b3:6e:ba:
         e1:02:b7:0a:f7:85:09:f0:f9:17:7f:36:0b:6d:01:66:ff:ab:
         66:eb:83:cc:59:cb:20:47:f8:fc:92:59:7a:c5:63:c4:14:ee:
         38:1c:69:fd:08:1c:e4:22:bc:fb:d4:c7:4a:5b:4e:b2:f3:48:
         f1:72:c1:e0:98:33:59:c5:cb:cb:fd:ee:ee:f6:02:b4:39:71:
         83:d8:42:84:7b:66:d1:8f:0c:6a:82:c1:fd:ea:34:04:a9:19:
         07:9b:48:14:f2:37:2a:ce:0d:98:05:41:e4:eb:d8:05:67:09:
         57:cf:71:3f:4d:68:2c:15:e7:24:ed:e5:2e:e9:ff:e3:7e:57:
         39:34:4a:e4:fb:52:a7:55:8d:72:9a:35:13:cd:4f:90:3e:76:
         28:84:00:73:f0:d9:40:57:89:d3:2e:c8:a9:96:4b:8c:79:40:
         7a:65:49:3a:ff:35:70:17:b1:79:e5:2c:15:ee:0a:8a:74:06:
         38:f5:43:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----