Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS57406.roa
File:                     AS57406.roa (raw, json)
Hash identifier:          qVcBjyn7iDlCcdcFKPE1faDSKJN0RRZDADDY/KNhtVM=
Subject key identifier:   45:E5:6A:7D:E2:9D:4C:38:0F:8C:9D:2D:B5:D6:5F:F9:62:41:2B:10
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       162F650A745F4B00BC30F6EC878A1BF0CA7749D1
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS57406.roa
Signing time:             Sat 08 Apr 2023 03:25:29 +0000
ROA not before:           Sat 08 Apr 2023 03:20:29 +0000
ROA not after:            Sat 06 Apr 2024 03:25:29 +0000
asID:                     57406
IP address blocks:        2a12:dd47:8260::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:2f:65:0a:74:5f:4b:00:bc:30:f6:ec:87:8a:1b:f0:ca:77:49:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:29 2023 GMT
            Not After : Apr  6 03:25:29 2024 GMT
        Subject: CN=45E56A7DE29D4C380F8C9D2DB5D65FF962412B10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:22:87:98:44:59:54:fd:0b:80:3a:b7:ab:7e:
                    c3:c0:1c:87:41:26:c0:a5:65:ae:dc:9e:78:ef:f9:
                    e7:47:e8:ff:e4:5c:6b:f2:ef:bb:a8:de:dd:47:88:
                    ec:ba:a7:ae:a4:f3:4f:ee:59:74:e5:ad:f9:2d:26:
                    b0:73:dd:0b:ef:9a:94:e8:a3:75:49:40:c6:c5:96:
                    ff:24:1d:ea:1f:95:93:16:02:a5:10:5d:26:d3:25:
                    b6:64:62:7c:84:9b:70:9a:c4:dd:9b:a8:94:a7:bd:
                    43:fe:f7:3c:cf:5b:77:99:0f:08:2d:72:22:71:c8:
                    27:6e:53:24:c8:a1:9e:12:47:af:e7:87:6d:10:7b:
                    c3:95:fd:d7:f4:d3:40:ae:ac:10:8a:71:14:a4:d8:
                    83:95:8b:3a:ac:78:aa:33:44:0f:90:fd:fb:f8:95:
                    3f:ec:e4:40:80:d8:43:01:dd:c3:6b:52:f3:dd:41:
                    fc:f3:5b:4e:d2:9d:2b:cb:bf:9e:7b:ec:2f:7c:b7:
                    48:5d:69:16:6c:c8:70:6f:43:40:14:87:f3:57:59:
                    51:f4:48:a8:03:cc:1f:29:48:06:d4:29:4f:82:c0:
                    98:45:14:d7:01:4c:33:f2:fb:4d:10:ea:f7:b6:81:
                    30:05:d9:8f:56:dd:a4:90:51:16:84:0c:86:1b:18:
                    a4:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:E5:6A:7D:E2:9D:4C:38:0F:8C:9D:2D:B5:D6:5F:F9:62:41:2B:10
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS57406.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8260::/44

    Signature Algorithm: sha256WithRSAEncryption
         bb:ec:94:27:68:84:bc:00:5c:a8:c9:7e:00:38:9b:56:1d:ca:
         cc:69:3b:7b:c4:96:fc:88:34:60:2f:04:80:5a:95:42:5c:0b:
         33:00:65:ca:7a:00:cd:b2:9e:e1:d5:6f:b6:32:19:8a:0d:da:
         bc:c0:03:ef:d7:01:cd:53:42:15:47:2e:af:d0:cb:41:68:0b:
         77:59:8d:d2:aa:db:d7:a3:72:2f:98:23:a2:b4:89:13:60:c1:
         5d:21:98:81:d1:1f:5d:6b:2e:61:d6:77:f7:cd:89:eb:53:6f:
         98:68:26:f2:50:93:c4:52:41:3e:3f:b1:aa:d4:1e:ee:57:5d:
         22:7d:cb:30:06:61:52:cb:5b:e2:f3:15:7e:e7:14:7f:3f:ba:
         d6:39:3a:c3:bd:7e:3c:d0:1d:0f:76:98:3b:f2:73:30:3f:30:
         c7:26:ab:2b:5f:51:d9:9e:be:32:bd:bc:ee:ac:32:d5:e3:cf:
         df:ca:e0:0c:0b:31:84:e7:34:e7:12:b0:86:ed:84:12:02:5a:
         d1:6f:e1:1a:7f:cd:61:87:5c:3d:07:d3:bf:c5:c2:ae:eb:f9:
         2c:a9:69:cc:3c:28:ac:c7:e9:ba:0b:53:8d:67:db:23:a5:a8:
         b9:02:3b:f9:26:56:85:ad:f9:20:cb:b9:d0:e8:c3:89:4e:9d:
         5c:d4:ec:2c
-----BEGIN CERTIFICATE-----
MIIEjjCCA3agAwIBAgIUFi9lCnRfSwC8MPbsh4ob8Mp3SdEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjU3ZGNiYTlmYzdiMGVmMWYzY2M4MGExYWVlMjJjMDAx
OThlNzY3YTAeFw0yMzA0MDgwMzIwMjlaFw0yNDA0MDYwMzI1MjlaMDMxMTAvBgNV
BAMTKDQ1RTU2QTdERTI5RDRDMzgwRjhDOUQyREI1RDY1RkY5NjI0MTJCMTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiIoeYRFlU/QuAOrerfsPAHIdB
JsClZa7cnnjv+edH6P/kXGvy77uo3t1HiOy6p66k80/uWXTlrfktJrBz3QvvmpTo
o3VJQMbFlv8kHeoflZMWAqUQXSbTJbZkYnyEm3CaxN2bqJSnvUP+9zzPW3eZDwgt
ciJxyCduUyTIoZ4SR6/nh20Qe8OV/df000CurBCKcRSk2IOVizqseKozRA+Q/fv4
lT/s5ECA2EMB3cNrUvPdQfzzW07SnSvLv5577C98t0hdaRZsyHBvQ0AUh/NXWVH0
SKgDzB8pSAbUKU+CwJhFFNcBTDPy+00Q6ve2gTAF2Y9W3aSQURaEDIYbGKTjAgMB
AAGjggGYMIIBlDAdBgNVHQ4EFgQUReVqfeKdTDgPjJ0ttdZf+WJBKxAwHwYDVR0j
BBgwFoAUtX3Lqfx7DvHzzIChruIsABmOdnowDgYDVR0PAQH/BAQDAgeAMFkGA1Ud
HwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5jby9yZXBvL0hZU1AvNi9CNTdEQ0JB
OUZDN0IwRUYxRjNDQzgwQTFBRUUyMkMwMDE5OEU3NjdBLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvdFgzTHFmeDdEdkh6eklDaHJ1SXNBQm1PZG5vLmNlcjBDBggr
BgEFBQcBCwQ3MDUwMwYIKwYBBQUHMAuGJ3JzeW5jOi8vcnBraS5jby9yZXBvL0hZ
U1AvNi9BUzU3NDA2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsG
AQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhLdR4JgMA0GCSqGSIb3DQEBCwUAA4IB
AQC77JQnaIS8AFyoyX4AOJtWHcrMaTt7xJb8iDRgLwSAWpVCXAszAGXKegDNsp7h
1W+2MhmKDdq8wAPv1wHNU0IVRy6v0MtBaAt3WY3SqtvXo3IvmCOitIkTYMFdIZiB
0R9day5h1nf3zYnrU2+YaCbyUJPEUkE+P7Gq1B7uV10ifcswBmFSy1vi8xV+5xR/
P7rWOTrDvX480B0Pdpg78nMwPzDHJqsrX1HZnr4yvbzurDLV48/fyuAMCzGE5zTn
ErCG7YQSAlrRb+Eaf81hh1w9B9O/xcKu6/ksqWnMPCisx+m6C1ONZ9sjpai5Ajv5
JlaFrfkgy7nQ6MOJTp1c1Ows
-----END CERTIFICATE-----