Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS47449.roa
File:                     AS47449.roa (raw, json)
Hash identifier:          GPH9I/rJWVA5hUTWKmbH8fejjyJXNJWc3axmlWdPf8M=
Subject key identifier:   D1:06:DB:50:30:C3:4E:3E:ED:86:BB:3E:8A:62:B4:0F:82:6E:A9:25
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       23034FC0EB4848C91F5C6347E18ED567C366571A
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS47449.roa
Signing time:             Sat 08 Apr 2023 03:25:30 +0000
ROA not before:           Sat 08 Apr 2023 03:20:30 +0000
ROA not after:            Sat 06 Apr 2024 03:25:30 +0000
asID:                     47449
IP address blocks:        2a12:dd47:8010::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:03:4f:c0:eb:48:48:c9:1f:5c:63:47:e1:8e:d5:67:c3:66:57:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:30 2023 GMT
            Not After : Apr  6 03:25:30 2024 GMT
        Subject: CN=D106DB5030C34E3EED86BB3E8A62B40F826EA925
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:3a:7b:50:c3:b9:ea:aa:8f:02:2a:ce:2f:cf:
                    a7:cc:67:9b:9c:c3:49:a2:b8:8d:78:14:a3:95:a5:
                    ec:31:82:fb:d8:5d:ba:52:23:48:dc:a2:f2:c5:1c:
                    b2:78:6b:c4:44:fb:78:7b:42:1a:89:49:5f:9c:d4:
                    55:d4:30:39:11:2f:67:bb:be:57:78:47:04:83:20:
                    e8:5b:65:95:db:7d:38:5a:ff:d5:dd:11:c7:38:ce:
                    c7:b1:ac:70:6d:7b:3a:94:9a:13:d9:03:e0:75:0f:
                    1a:d9:c1:9b:77:20:76:4c:43:28:22:8c:20:c5:71:
                    3e:23:29:e4:84:15:5a:15:27:14:67:86:db:57:35:
                    cf:4e:1b:e4:77:a3:d8:6a:b6:ac:b2:4a:a3:d4:1b:
                    6c:f7:18:34:f2:15:5b:c0:bf:2e:24:98:3f:b3:f9:
                    01:4c:2a:64:9b:89:f7:37:bd:5d:35:5c:06:76:9e:
                    4f:d8:bf:67:de:6f:12:14:08:c0:f1:13:25:6a:42:
                    dc:a0:28:3b:ab:a6:e5:35:f8:7b:70:c4:ea:9a:02:
                    da:19:4b:e9:22:2b:e1:a1:52:69:b1:20:9e:d7:68:
                    8d:a2:0e:21:0c:01:55:a3:30:7e:53:f8:89:97:9e:
                    3e:c5:f9:0e:8b:67:d1:c5:d6:a8:92:5f:00:8d:81:
                    ea:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:06:DB:50:30:C3:4E:3E:ED:86:BB:3E:8A:62:B4:0F:82:6E:A9:25
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS47449.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8010::/44

    Signature Algorithm: sha256WithRSAEncryption
         05:10:79:1d:3e:57:19:83:0e:fe:11:5f:0c:99:eb:fe:c3:f7:
         d1:f5:b0:f1:48:9d:7f:e2:6d:aa:7c:e6:3a:9c:32:81:6f:30:
         05:da:3b:3e:ae:03:7d:29:e3:13:bc:64:69:1a:3b:0d:9c:00:
         c2:86:98:be:f2:6d:63:4e:b1:e2:3e:97:77:b5:dd:b3:87:cb:
         60:fe:85:18:ab:ba:b3:3f:fc:8f:c7:64:b9:a1:91:ae:9e:48:
         78:ac:7e:f6:72:e9:7c:14:54:12:22:4b:a5:e9:ce:e6:a0:05:
         c1:34:e6:52:48:f9:e4:79:02:6a:3a:96:c1:c5:7c:1e:c1:49:
         02:b7:d3:71:34:b7:90:67:5e:a3:a9:55:e3:e1:b1:ad:f6:ec:
         b2:77:ad:59:8c:6b:e0:65:69:6b:ec:56:1e:be:f5:58:61:74:
         c0:b5:f7:0d:9f:d6:c5:d9:c1:08:f5:20:23:3f:b5:c0:b7:a9:
         a4:3b:eb:23:58:f4:31:db:ec:43:3c:b6:6b:ad:14:11:57:00:
         1f:a6:01:81:ff:66:d6:12:44:a1:09:53:38:c2:69:39:17:a9:
         b7:fe:5e:8d:68:45:0b:cf:80:0c:80:ad:1e:67:d8:25:9d:c4:
         fd:b9:c2:79:91:8d:a0:b3:b4:5e:97:cd:78:e2:c5:a0:7f:5d:
         80:35:75:65
-----BEGIN CERTIFICATE-----
MIIEjjCCA3agAwIBAgIUIwNPwOtISMkfXGNH4Y7VZ8NmVxowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjU3ZGNiYTlmYzdiMGVmMWYzY2M4MGExYWVlMjJjMDAx
OThlNzY3YTAeFw0yMzA0MDgwMzIwMzBaFw0yNDA0MDYwMzI1MzBaMDMxMTAvBgNV
BAMTKEQxMDZEQjUwMzBDMzRFM0VFRDg2QkIzRThBNjJCNDBGODI2RUE5MjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeOntQw7nqqo8CKs4vz6fMZ5uc
w0miuI14FKOVpewxgvvYXbpSI0jcovLFHLJ4a8RE+3h7QhqJSV+c1FXUMDkRL2e7
vld4RwSDIOhbZZXbfTha/9XdEcc4zsexrHBtezqUmhPZA+B1DxrZwZt3IHZMQygi
jCDFcT4jKeSEFVoVJxRnhttXNc9OG+R3o9hqtqyySqPUG2z3GDTyFVvAvy4kmD+z
+QFMKmSbifc3vV01XAZ2nk/Yv2febxIUCMDxEyVqQtygKDurpuU1+HtwxOqaAtoZ
S+kiK+GhUmmxIJ7XaI2iDiEMAVWjMH5T+ImXnj7F+Q6LZ9HF1qiSXwCNgepxAgMB
AAGjggGYMIIBlDAdBgNVHQ4EFgQU0QbbUDDDTj7thrs+imK0D4JuqSUwHwYDVR0j
BBgwFoAUtX3Lqfx7DvHzzIChruIsABmOdnowDgYDVR0PAQH/BAQDAgeAMFkGA1Ud
HwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5jby9yZXBvL0hZU1AvNi9CNTdEQ0JB
OUZDN0IwRUYxRjNDQzgwQTFBRUUyMkMwMDE5OEU3NjdBLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvdFgzTHFmeDdEdkh6eklDaHJ1SXNBQm1PZG5vLmNlcjBDBggr
BgEFBQcBCwQ3MDUwMwYIKwYBBQUHMAuGJ3JzeW5jOi8vcnBraS5jby9yZXBvL0hZ
U1AvNi9BUzQ3NDQ5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsG
AQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhLdR4AQMA0GCSqGSIb3DQEBCwUAA4IB
AQAFEHkdPlcZgw7+EV8Mmev+w/fR9bDxSJ1/4m2qfOY6nDKBbzAF2js+rgN9KeMT
vGRpGjsNnADChpi+8m1jTrHiPpd3td2zh8tg/oUYq7qzP/yPx2S5oZGunkh4rH72
cul8FFQSIkul6c7moAXBNOZSSPnkeQJqOpbBxXwewUkCt9NxNLeQZ16jqVXj4bGt
9uyyd61ZjGvgZWlr7FYevvVYYXTAtfcNn9bF2cEI9SAjP7XAt6mkO+sjWPQx2+xD
PLZrrRQRVwAfpgGB/2bWEkShCVM4wmk5F6m3/l6NaEULz4AMgK0eZ9glncT9ucJ5
kY2gs7Rel8144sWgf12ANXVl
-----END CERTIFICATE-----