Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS50842.roa
File:                     AS50842.roa (raw, json)
Hash identifier:          Ay+odS49lI19wfPYdl57fRt0oROjkZwMeswYEZda5Eo=
Subject key identifier:   00:1F:89:51:FB:36:04:E7:F3:19:AE:85:79:FB:F0:4C:69:F3:E6:87
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       5E4CF79C91D9958E817A04993A6C53B6AD1717FA
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS50842.roa
Signing time:             Sat 08 Apr 2023 03:25:46 +0000
ROA not before:           Sat 08 Apr 2023 03:20:46 +0000
ROA not after:            Sat 06 Apr 2024 03:25:46 +0000
asID:                     50842
IP address blocks:        2a12:dd47:81a0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:4c:f7:9c:91:d9:95:8e:81:7a:04:99:3a:6c:53:b6:ad:17:17:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:46 2023 GMT
            Not After : Apr  6 03:25:46 2024 GMT
        Subject: CN=001F8951FB3604E7F319AE8579FBF04C69F3E687
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a5:3f:eb:82:5c:88:90:89:7f:44:b7:58:69:
                    7e:ac:10:b2:7d:d1:33:24:88:2c:7e:c1:47:75:d2:
                    dd:0c:77:81:6b:a8:62:1d:9d:13:42:cf:b9:5f:b2:
                    d5:c1:b5:d9:10:28:b5:05:11:ee:ba:06:99:39:8c:
                    3a:25:90:14:8c:ef:73:d8:3b:9f:20:2e:58:d9:cb:
                    89:ba:d6:94:75:96:b3:9d:18:d7:f4:de:fd:09:16:
                    63:06:c6:4e:41:60:56:96:5f:9c:7d:77:4c:43:de:
                    37:6b:88:17:c3:c4:66:fa:f7:13:b0:50:76:98:8f:
                    b3:eb:81:c5:2d:5b:bc:e6:4b:d4:d6:2a:6a:22:3b:
                    87:85:63:26:95:9a:cb:9a:68:bc:1b:f8:b9:2b:95:
                    f0:f9:68:04:a1:aa:d1:01:ad:cb:48:6d:6d:0d:ac:
                    9a:ab:4c:f4:b5:89:e1:5f:bc:16:b1:b9:f6:e0:a9:
                    6a:b2:fc:72:6d:7e:49:3c:22:ab:07:a5:4d:57:e9:
                    9e:72:c9:52:96:99:e5:1a:c5:98:30:96:c7:6b:5e:
                    31:6c:82:f3:7c:75:5c:ed:0e:89:6b:e4:94:2d:22:
                    44:c8:48:8f:dd:f7:74:1b:da:0f:36:19:c3:a2:57:
                    eb:73:c3:10:b0:95:8a:34:3b:55:16:d8:88:69:5f:
                    24:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:1F:89:51:FB:36:04:E7:F3:19:AE:85:79:FB:F0:4C:69:F3:E6:87
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS50842.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:81a0::/44

    Signature Algorithm: sha256WithRSAEncryption
         94:2e:e4:42:34:4c:d3:13:af:7c:45:ed:da:b6:da:bf:69:a5:
         4a:e7:31:a1:73:aa:fa:2f:b8:03:06:b2:48:b6:b9:13:23:7c:
         a7:e0:3d:6e:39:e5:c7:87:37:d4:47:02:8d:7c:f7:10:72:d2:
         7b:b5:1e:68:7f:07:45:08:0e:80:0c:82:35:83:22:46:e6:fc:
         e5:85:d4:86:29:d8:c1:ad:41:d0:86:b4:a1:a2:b1:3d:d7:62:
         4d:8d:c3:d6:a6:60:98:d4:49:43:ef:71:fc:f7:7f:8b:c1:8f:
         c0:04:7c:c4:8e:26:89:b0:f9:8e:6d:c7:b2:2a:a8:cd:3c:97:
         0a:0a:4f:65:a9:5d:05:32:eb:d3:d7:47:2c:6e:4c:92:3c:bf:
         61:6a:8e:49:00:20:33:2a:8b:11:87:4b:b9:74:47:78:cf:65:
         db:05:01:a8:d8:2e:9c:c0:1c:cf:d4:14:f9:9b:7c:26:80:01:
         ef:5a:7b:ba:00:7e:24:38:99:b5:f0:ea:7d:b0:94:19:4f:70:
         bd:1b:13:cc:af:b3:76:4d:87:1e:b2:ea:aa:f5:b3:bf:a1:60:
         fd:77:9b:7c:47:2b:a3:62:87:ae:87:69:0a:ed:81:2c:bc:df:
         c9:7b:58:bf:69:53:4a:ee:21:c4:1f:65:89:9b:43:b8:26:87:
         b0:24:db:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----