Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS393577.roa
File:                     AS393577.roa (raw, json)
Hash identifier:          NtsgD0dzTswmR+LBDHEV5BHBjcPK8cScGSDSbq/PbJ0=
Subject key identifier:   C4:96:83:32:B5:8E:6D:1F:6D:1C:65:65:4E:05:29:09:D6:9B:D7:38
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       5759E93CF632FB3D2E079591CF3E9FB4A11E199A
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS393577.roa
Signing time:             Sat 08 Apr 2023 03:25:25 +0000
ROA not before:           Sat 08 Apr 2023 03:20:25 +0000
ROA not after:            Sat 06 Apr 2024 03:25:25 +0000
asID:                     393577
IP address blocks:        2a12:dd47:d100::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:59:e9:3c:f6:32:fb:3d:2e:07:95:91:cf:3e:9f:b4:a1:1e:19:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:25 2023 GMT
            Not After : Apr  6 03:25:25 2024 GMT
        Subject: CN=C4968332B58E6D1F6D1C65654E052909D69BD738
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:82:2e:ff:94:89:57:27:ec:22:3e:c8:16:89:
                    e5:06:0d:10:80:01:d4:7c:c5:82:8a:c5:e7:3c:3f:
                    fc:5e:d5:22:2b:f6:b1:73:43:4f:3c:06:46:6d:dd:
                    31:92:b3:45:61:af:67:79:07:e7:b2:2a:51:78:d9:
                    97:83:8b:d8:ea:cc:8e:59:1f:bb:41:fc:80:fb:e7:
                    2a:dd:a5:bd:1c:c4:7d:ab:94:88:8a:34:5d:43:0c:
                    9f:bb:41:29:79:05:8f:f3:7e:c8:34:cf:f8:c8:ab:
                    ef:d6:09:25:cd:99:02:49:6c:b7:55:f8:eb:0c:a2:
                    68:20:96:fe:3d:38:8e:5e:45:ac:72:f2:43:c1:95:
                    40:20:4e:8f:b5:8e:65:6a:4f:d4:c6:b9:05:f4:6e:
                    90:b5:49:fa:a9:93:3c:e7:64:db:33:67:0f:05:6b:
                    1e:ec:a4:69:09:5a:ad:06:27:68:7e:fb:19:e7:16:
                    fa:a9:82:02:38:4c:80:5c:71:5e:f6:4e:5e:d1:94:
                    9e:9a:ba:3b:29:e2:60:03:5f:b6:b4:07:43:0b:aa:
                    c8:26:5c:e2:13:45:72:6e:f0:43:61:0a:23:8d:a5:
                    64:9c:9f:1c:fe:63:35:61:4f:da:1e:23:ec:83:66:
                    9b:fd:64:ac:4b:0b:a0:a6:5b:fc:ee:f8:aa:e3:d6:
                    6f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:96:83:32:B5:8E:6D:1F:6D:1C:65:65:4E:05:29:09:D6:9B:D7:38
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS393577.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:d100::/40

    Signature Algorithm: sha256WithRSAEncryption
         4c:1b:43:f3:1b:4e:84:43:87:ce:58:4a:b2:a1:54:15:eb:4b:
         e8:c0:46:62:ea:38:7e:11:7b:14:0a:b2:f7:5c:be:eb:a0:b7:
         53:87:72:83:e5:56:00:9a:d3:07:72:ce:d1:0c:27:00:70:5f:
         43:22:79:87:d9:65:d5:64:63:b8:9a:2b:1e:8a:f7:c2:7d:bf:
         08:ab:05:e0:ce:d4:26:82:93:ab:86:87:15:c6:a2:ef:2d:a2:
         78:f9:75:86:0d:b5:94:65:b9:12:e6:ec:c9:3d:dd:9d:d7:33:
         30:fd:cd:08:32:2a:3f:f3:a9:01:3c:83:02:07:c5:24:74:0b:
         a2:f9:ed:ab:77:79:ea:d6:4d:3f:e4:88:5e:7c:76:ff:ae:6d:
         07:26:ba:31:d2:c3:44:e4:37:d7:11:da:5d:b8:28:bc:06:70:
         a2:51:53:ce:c1:ae:eb:2d:ac:60:c9:5b:3d:b4:04:0c:a1:65:
         16:22:47:d0:15:75:03:57:0e:f0:76:dc:e8:1f:7a:39:7d:bc:
         37:ec:84:87:a1:bc:31:25:5d:d0:90:af:0c:11:55:af:82:79:
         8f:30:e3:ea:55:6c:c7:ce:c6:d2:d6:9f:3e:ea:5a:63:77:44:
         db:eb:a6:f9:a5:c5:c3:03:36:18:5f:d1:b4:68:d3:3f:8a:c0:
         2f:2c:65:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----