Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS50580.roa
File:                     AS50580.roa (raw, json)
Hash identifier:          kF9cw36kPGyqW+GdS1ccUE/bPKzaYCBxeuk4neKAmj0=
Subject key identifier:   1C:4C:38:50:23:1E:3A:FB:BE:DF:A5:6D:15:CD:7E:3C:BF:20:72:21
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       57B69D3D5F3D69D78A29216C72400F66156F9982
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS50580.roa
Signing time:             Sat 08 Apr 2023 03:25:39 +0000
ROA not before:           Sat 08 Apr 2023 03:20:39 +0000
ROA not after:            Sat 06 Apr 2024 03:25:39 +0000
asID:                     50580
IP address blocks:        2a12:dd47:db00::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:b6:9d:3d:5f:3d:69:d7:8a:29:21:6c:72:40:0f:66:15:6f:99:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:39 2023 GMT
            Not After : Apr  6 03:25:39 2024 GMT
        Subject: CN=1C4C3850231E3AFBBEDFA56D15CD7E3CBF207221
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fe:9d:71:28:30:88:30:2e:64:a7:95:1c:be:
                    9c:b2:8d:68:ce:4c:ad:2a:5b:2d:d9:50:c7:20:b3:
                    25:03:f2:42:88:17:ff:f0:4d:4d:f3:8f:57:ef:0b:
                    f8:11:21:15:e1:3c:2f:7b:40:c9:22:8e:80:cb:12:
                    28:5a:5b:f9:a2:50:56:ea:ed:b8:87:05:67:5d:42:
                    85:a0:d0:fa:25:24:26:c7:8f:2a:d1:d2:06:36:5c:
                    9a:e8:f2:da:ae:3f:e3:0a:dc:d4:c1:a6:fc:8a:e3:
                    d9:e8:b3:91:19:64:1f:c8:42:8f:7a:4f:d3:f9:eb:
                    9e:4f:a8:68:16:1d:99:e0:8a:d5:2a:cd:7a:08:47:
                    c8:3e:fb:f5:c7:c1:95:be:dd:a3:3e:d0:0c:f1:f0:
                    50:49:13:15:41:1b:8e:61:5b:36:3c:be:c8:e5:76:
                    1f:99:43:b3:e0:48:9b:d0:64:ca:9a:27:6b:a8:36:
                    51:d8:03:a7:6b:be:8a:c2:4e:50:2b:56:c0:c7:d1:
                    82:2a:21:23:ce:41:66:c7:44:cf:1d:98:5b:75:5a:
                    db:e1:e0:16:5d:09:c0:cb:4b:10:be:a1:72:5a:ad:
                    23:c6:3b:8f:8e:f7:f7:9d:39:8b:27:0f:0a:e2:83:
                    f2:3c:65:be:93:fd:92:0a:4b:1d:59:a2:5e:20:88:
                    18:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:4C:38:50:23:1E:3A:FB:BE:DF:A5:6D:15:CD:7E:3C:BF:20:72:21
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS50580.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:db00::/40

    Signature Algorithm: sha256WithRSAEncryption
         1f:ce:b2:32:1b:67:26:b6:9c:84:51:42:b8:5f:b9:9a:e9:dc:
         3b:f5:bb:2a:6d:a5:1f:3a:a4:db:ce:0d:3d:91:3a:ac:05:fd:
         87:f0:24:0e:eb:ef:68:0c:b8:e7:88:39:6d:08:12:d4:81:9b:
         18:fa:90:78:32:6e:9e:34:07:c5:fb:90:81:5a:5e:c3:cf:fa:
         41:82:60:03:c3:b2:bc:9d:dc:af:41:3b:9b:ec:b5:d4:c2:a0:
         d6:10:a0:05:f8:e5:2b:34:4a:6a:a0:4c:b7:8f:85:03:26:5b:
         0b:8a:8d:72:53:da:1b:9f:ea:36:fb:ed:68:9d:47:1d:a1:f6:
         23:c0:bb:de:41:d7:60:a3:fc:ed:8c:6f:39:13:4c:5c:65:fb:
         c0:b6:af:32:ec:e7:0d:a7:1d:3b:78:76:4f:7a:ec:10:8b:20:
         23:26:36:95:44:5b:f8:f7:02:21:6f:25:56:63:32:33:04:47:
         d1:7d:62:2c:b3:f6:5a:1b:c9:6e:d4:c7:33:8d:a7:d8:d7:0a:
         71:64:98:64:77:07:c0:d9:a7:b7:ef:2a:d7:8f:a0:0b:61:a2:
         f0:6b:fa:73:95:8e:22:ed:a9:6e:16:d3:cb:ea:c0:eb:c3:c5:
         d4:21:08:61:2f:8d:2a:ec:82:2c:60:6e:bc:16:8f:52:29:07:
         00:e0:77:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----