Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS57401.roa
File:                     AS57401.roa (raw, json)
Hash identifier:          9g9mT05tUKyclguRBryJWs2bUbujU6K58JcdwxdqrT4=
Subject key identifier:   0D:EE:9F:93:EF:FD:A9:9D:86:43:1C:69:6E:A8:D2:65:31:85:F9:F1
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       7033F83C8A650A515F073E86808DB0099A993848
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS57401.roa
Signing time:             Sat 08 Apr 2023 03:25:29 +0000
ROA not before:           Sat 08 Apr 2023 03:20:29 +0000
ROA not after:            Sat 06 Apr 2024 03:25:29 +0000
asID:                     57401
IP address blocks:        2a12:dd47:8001::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:33:f8:3c:8a:65:0a:51:5f:07:3e:86:80:8d:b0:09:9a:99:38:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:29 2023 GMT
            Not After : Apr  6 03:25:29 2024 GMT
        Subject: CN=0DEE9F93EFFDA99D86431C696EA8D2653185F9F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:07:34:02:9b:f8:cb:29:18:53:f7:02:34:a1:
                    50:35:57:16:3e:3d:d1:a3:e2:23:7c:9c:7e:92:02:
                    ad:bc:cc:3d:eb:6c:a5:86:f7:04:92:d6:ac:20:07:
                    ec:eb:ea:0d:ae:fa:65:68:a7:68:24:82:c5:be:07:
                    4a:62:ed:0e:89:d8:82:d7:15:a9:3e:b9:c8:2e:17:
                    bd:b3:75:2c:a9:8b:14:ec:43:b9:b6:26:9a:cc:29:
                    16:c5:82:a2:8b:16:27:f9:31:f6:b5:a0:65:ca:fa:
                    76:21:ba:3a:41:24:6a:90:c8:17:d0:91:2d:17:50:
                    94:b1:cf:ad:2f:64:5d:36:8f:23:3d:89:0c:b2:07:
                    89:9e:a1:6e:97:af:48:01:55:9a:7f:2b:fa:03:4f:
                    bb:a3:d4:c9:0e:8b:24:12:b8:2f:c3:f6:6e:23:f7:
                    fb:8c:8b:82:af:70:7c:db:6f:89:f0:35:e0:35:2f:
                    5f:24:cf:0f:67:32:6c:11:d3:32:44:07:b1:56:a6:
                    2c:2d:ae:f7:d0:33:7b:2f:a9:e0:25:7f:f8:e2:83:
                    64:dd:8c:df:4d:ca:8a:04:9d:50:1f:f4:5f:a6:a6:
                    6f:39:b3:f7:68:37:bf:70:9d:99:db:29:22:b4:d3:
                    53:70:5a:ce:99:15:94:fa:63:13:c3:71:2d:64:53:
                    a5:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:EE:9F:93:EF:FD:A9:9D:86:43:1C:69:6E:A8:D2:65:31:85:F9:F1
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS57401.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8001::/48

    Signature Algorithm: sha256WithRSAEncryption
         54:5c:56:47:3a:80:5b:52:3e:cf:23:4d:e9:e8:7a:f8:ac:ea:
         62:f1:b4:a1:21:60:a9:43:a0:4c:2c:ff:c1:89:6d:ef:bc:b0:
         52:5a:e8:56:f1:17:9d:e3:19:94:51:1c:3d:dc:85:ff:69:e8:
         a6:ab:6e:e7:3d:5a:d6:d7:5a:73:87:66:d3:2f:2d:84:36:d5:
         a1:b8:05:0e:aa:a4:e6:ce:82:ad:58:53:f8:29:92:2c:82:75:
         97:2f:cd:18:f5:b0:d9:d8:dd:16:9c:a8:b4:a4:2c:dc:f1:02:
         c3:5f:c0:e9:8b:b9:89:d7:1e:86:ef:05:6e:cb:23:a4:c7:0b:
         32:66:2f:89:2c:a8:24:fb:d0:15:b7:38:d2:ba:97:f9:d1:a0:
         46:7b:00:95:b5:6e:98:a4:2d:2c:7b:ef:fb:2d:30:cf:37:6c:
         ec:0a:12:86:0c:dd:96:54:da:26:7d:40:0e:b1:1c:a5:09:97:
         3b:41:e0:85:a8:2e:38:56:11:d8:30:9d:7a:c4:fe:1f:9c:82:
         c8:0a:35:54:30:52:12:e2:1e:c0:9a:21:b0:ec:43:3f:a2:53:
         73:9d:9b:e4:54:59:49:aa:e3:77:41:cf:eb:17:04:7c:e0:35:
         64:96:b9:3b:38:51:e0:09:84:fb:c2:6a:4b:23:73:71:21:0a:
         84:6d:59:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----