Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS49519.roa
File:                     AS49519.roa (raw, json)
Hash identifier:          WiSe9dU+QYrsekqRtgQRMCRAFfpTObS730Pz7gPq70k=
Subject key identifier:   0E:9C:39:AB:4E:08:5E:3B:7A:2C:27:12:24:CC:6F:CF:ED:E6:F7:DA
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       3F4EB5C43AB787C6096F2F61929553BBFAFE5BD5
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS49519.roa
Signing time:             Sat 08 Apr 2023 03:25:46 +0000
ROA not before:           Sat 08 Apr 2023 03:20:46 +0000
ROA not after:            Sat 06 Apr 2024 03:25:46 +0000
asID:                     49519
IP address blocks:        2a12:dd47:9000::/36 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:4e:b5:c4:3a:b7:87:c6:09:6f:2f:61:92:95:53:bb:fa:fe:5b:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:46 2023 GMT
            Not After : Apr  6 03:25:46 2024 GMT
        Subject: CN=0E9C39AB4E085E3B7A2C271224CC6FCFEDE6F7DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:eb:0b:68:55:7b:39:9e:64:7a:fd:37:7e:e9:
                    9f:df:2a:ba:30:ed:0c:93:9c:26:8d:cf:aa:92:7a:
                    c8:77:6c:d6:3f:4a:89:3b:e7:8f:37:aa:d7:4b:8f:
                    f1:06:2b:56:c2:a2:86:e7:03:56:49:e2:e6:4c:a9:
                    35:cc:f8:5f:3f:e1:f6:76:b7:ac:7b:a2:48:6b:fa:
                    e0:19:90:41:5c:bf:a3:91:17:17:b0:2e:0d:84:f4:
                    11:b2:19:5b:15:6d:9c:92:ee:21:a9:0b:6f:a2:42:
                    66:70:7c:2f:73:04:a2:01:7e:e1:fe:3a:75:db:a5:
                    92:aa:06:a7:9a:77:46:93:72:26:ed:1a:95:43:0b:
                    86:12:e6:b2:e4:da:f0:31:aa:18:a0:65:8b:ce:42:
                    03:33:7d:f5:af:4c:3e:c0:4e:0a:cd:9c:ae:99:72:
                    7e:fb:95:ca:bf:12:c6:6b:0a:b9:e7:df:c4:81:ae:
                    e8:31:d4:8a:50:61:5d:c1:1b:62:64:a8:09:8e:2c:
                    e2:34:2e:9c:b6:81:40:04:50:90:91:26:dd:26:6e:
                    56:d6:90:06:a2:15:f6:59:e9:84:f2:70:7b:a5:6e:
                    ca:e8:ec:39:27:18:a9:c3:d5:74:fa:7a:6a:30:9f:
                    ab:a4:a4:bc:54:af:b0:f6:a5:ad:23:f5:6f:51:20:
                    bd:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:9C:39:AB:4E:08:5E:3B:7A:2C:27:12:24:CC:6F:CF:ED:E6:F7:DA
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS49519.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:9000::/36

    Signature Algorithm: sha256WithRSAEncryption
         b2:94:cf:73:0f:f6:71:7d:ae:d3:7a:20:bb:d3:90:59:29:c1:
         ee:3b:1f:d9:3a:06:69:78:33:7c:ec:cc:61:30:ea:53:93:84:
         02:b5:2b:5e:b0:48:07:94:a3:cb:c7:f3:e9:76:1a:ef:71:05:
         fc:62:7d:4e:2d:2c:78:33:aa:c6:56:8b:49:f8:2e:3b:ae:58:
         a9:7d:9d:ae:aa:9c:00:55:35:79:ae:20:83:9d:66:0d:34:06:
         88:c3:24:ff:1e:4c:88:cb:87:87:f1:96:e1:e5:7a:f8:fb:f0:
         e8:8f:d8:63:b2:5c:0f:6d:7d:13:b6:1d:8c:98:d3:56:ad:f1:
         c3:6e:bb:32:b9:57:32:42:f6:15:37:4b:71:e6:7c:4a:8f:97:
         ed:e0:8b:26:3a:a7:36:d3:66:e1:94:e5:d9:b5:e6:1d:a8:22:
         08:86:b4:a7:05:c5:85:41:b1:92:eb:b6:8c:6c:44:36:b6:0d:
         c2:d3:d5:c2:37:88:7d:e0:d7:16:12:3f:9d:7d:1a:35:64:2e:
         0b:a0:97:14:48:14:93:ef:bb:a0:c3:82:05:a2:c0:33:9c:9e:
         dc:c9:c6:d7:6c:47:3f:fd:e8:fe:c2:a6:9d:f1:2f:58:cf:f4:
         84:f0:d0:bd:d9:30:8a:f1:35:51:e9:0e:75:d5:ab:10:82:f5:
         7f:09:73:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----