Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS56328.roa
File:                     AS56328.roa (raw, json)
Hash identifier:          xeVcpqncTl5fOSw6Q09l6QSDr6vjZ3iYhii+7Vzzy4w=
Subject key identifier:   F4:2F:62:F0:93:93:51:4A:8B:A7:C6:72:18:E3:62:0B:1F:5E:36:F2
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       41183703E5FF922B08FEFFC3298E37A33BF78857
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS56328.roa
Signing time:             Sat 08 Apr 2023 03:25:42 +0000
ROA not before:           Sat 08 Apr 2023 03:20:42 +0000
ROA not after:            Sat 06 Apr 2024 03:25:42 +0000
asID:                     56328
IP address blocks:        2a12:dd47:8c00::/39 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:18:37:03:e5:ff:92:2b:08:fe:ff:c3:29:8e:37:a3:3b:f7:88:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:42 2023 GMT
            Not After : Apr  6 03:25:42 2024 GMT
        Subject: CN=F42F62F09393514A8BA7C67218E3620B1F5E36F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f4:ee:2c:e9:bd:8e:74:d8:c3:9f:2e:9a:98:
                    00:3c:33:f3:de:4c:47:15:5c:6b:90:66:1a:4e:1c:
                    02:e2:6c:f0:c6:d6:da:ae:8f:65:9d:73:93:3e:bc:
                    06:c6:46:68:94:97:13:28:61:63:6e:22:bd:52:19:
                    f9:c4:d8:e2:09:ef:5d:f6:cf:ed:e8:17:4b:24:f9:
                    c7:3c:a3:b2:d7:32:c6:4b:41:b1:35:64:48:be:3e:
                    a6:df:f3:f8:34:bf:ef:2b:5d:0c:ce:b3:9b:ef:18:
                    0f:5c:5a:89:c4:e4:7a:c4:a9:ce:2a:9e:ce:b6:13:
                    f2:05:66:9d:32:eb:5f:c4:4f:88:12:68:ff:12:7b:
                    54:73:4b:d6:0a:e7:60:39:b8:00:ec:62:a7:30:55:
                    c9:a6:6d:a9:13:1c:65:d5:22:20:a7:70:38:c4:b7:
                    e6:68:90:b9:43:da:68:71:d5:8c:7e:0a:c7:11:e2:
                    7f:61:67:d3:67:06:14:99:4a:5a:1b:ce:eb:7a:20:
                    1e:0f:0c:95:4f:bf:37:a3:07:6b:44:bb:aa:35:08:
                    56:b3:59:10:6c:6c:0b:71:1d:93:e3:f9:42:60:3e:
                    fd:a5:ab:9b:0d:bb:b6:17:75:97:b7:7d:12:cf:22:
                    da:44:4a:60:8d:4a:e9:2a:77:62:23:f4:0a:90:c5:
                    e8:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:2F:62:F0:93:93:51:4A:8B:A7:C6:72:18:E3:62:0B:1F:5E:36:F2
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS56328.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8c00::/39

    Signature Algorithm: sha256WithRSAEncryption
         81:e6:28:eb:8f:92:61:b1:71:38:22:97:16:e9:16:29:1a:31:
         c4:28:f6:d4:be:9d:6f:70:2a:ff:c0:bb:f8:20:5a:7a:26:e5:
         43:80:52:48:46:e0:23:cd:c0:0f:24:e9:43:77:af:3c:15:ba:
         03:03:8e:38:98:4d:b9:ca:23:4f:a7:4b:53:f8:c9:9c:93:4a:
         0e:26:1b:86:d2:38:54:69:96:6f:07:4b:4a:0f:13:a1:50:2b:
         c8:1a:2c:fb:94:36:24:38:57:67:f4:32:97:be:e7:fc:20:45:
         0b:93:eb:c8:2e:62:cd:d4:d9:27:2b:0b:c3:05:c0:41:de:7d:
         5b:5c:08:1d:16:9d:b3:68:ae:0a:45:3a:0f:cb:49:74:91:b0:
         45:1b:a3:87:f9:a4:d4:a7:0f:7d:20:d7:05:03:b6:72:f8:ad:
         68:1d:b7:bc:4c:c2:43:89:17:8f:bc:a4:a8:6a:cc:53:c5:41:
         da:7b:bc:9b:0d:c8:a5:47:69:58:b3:a5:b1:be:68:b7:3d:3f:
         47:2f:af:ee:97:f3:b6:f3:a1:66:92:78:e6:d7:37:8f:89:ef:
         db:dc:ad:c5:d4:69:49:23:81:af:6c:99:0e:c5:d0:3f:9f:1b:
         7c:58:23:44:53:17:ed:a6:43:aa:dd:6b:bf:19:28:86:53:b6:
         d8:22:d0:31
-----BEGIN CERTIFICATE-----
MIIEjTCCA3WgAwIBAgIUQRg3A+X/kisI/v/DKY43ozv3iFcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjU3ZGNiYTlmYzdiMGVmMWYzY2M4MGExYWVlMjJjMDAx
OThlNzY3YTAeFw0yMzA0MDgwMzIwNDJaFw0yNDA0MDYwMzI1NDJaMDMxMTAvBgNV
BAMTKEY0MkY2MkYwOTM5MzUxNEE4QkE3QzY3MjE4RTM2MjBCMUY1RTM2RjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy9O4s6b2OdNjDny6amAA8M/Pe
TEcVXGuQZhpOHALibPDG1tquj2Wdc5M+vAbGRmiUlxMoYWNuIr1SGfnE2OIJ7132
z+3oF0sk+cc8o7LXMsZLQbE1ZEi+Pqbf8/g0v+8rXQzOs5vvGA9cWonE5HrEqc4q
ns62E/IFZp0y61/ET4gSaP8Se1RzS9YK52A5uADsYqcwVcmmbakTHGXVIiCncDjE
t+ZokLlD2mhx1Yx+CscR4n9hZ9NnBhSZSlobzut6IB4PDJVPvzejB2tEu6o1CFaz
WRBsbAtxHZPj+UJgPv2lq5sNu7YXdZe3fRLPItpESmCNSukqd2Ij9AqQxeglAgMB
AAGjggGXMIIBkzAdBgNVHQ4EFgQU9C9i8JOTUUqLp8ZyGONiCx9eNvIwHwYDVR0j
BBgwFoAUtX3Lqfx7DvHzzIChruIsABmOdnowDgYDVR0PAQH/BAQDAgeAMFkGA1Ud
HwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5jby9yZXBvL0hZU1AvNi9CNTdEQ0JB
OUZDN0IwRUYxRjNDQzgwQTFBRUUyMkMwMDE5OEU3NjdBLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvdFgzTHFmeDdEdkh6eklDaHJ1SXNBQm1PZG5vLmNlcjBDBggr
BgEFBQcBCwQ3MDUwMwYIKwYBBQUHMAuGJ3JzeW5jOi8vcnBraS5jby9yZXBvL0hZ
U1AvNi9BUzU2MzI4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsG
AQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYBKhLdR4wwDQYJKoZIhvcNAQELBQADggEB
AIHmKOuPkmGxcTgilxbpFikaMcQo9tS+nW9wKv/Au/ggWnom5UOAUkhG4CPNwA8k
6UN3rzwVugMDjjiYTbnKI0+nS1P4yZyTSg4mG4bSOFRplm8HS0oPE6FQK8gaLPuU
NiQ4V2f0Mpe+5/wgRQuT68guYs3U2ScrC8MFwEHefVtcCB0WnbNorgpFOg/LSXSR
sEUbo4f5pNSnD30g1wUDtnL4rWgdt7xMwkOJF4+8pKhqzFPFQdp7vJsNyKVHaViz
pbG+aLc9P0cvr+6X87bzoWaSeObXN4+J79vcrcXUaUkjga9smQ7F0D+fG3xYI0RT
F+2mQ6rda78ZKIZTttgi0DE=
-----END CERTIFICATE-----