Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS57957.roa
File:                     AS57957.roa (raw, json)
Hash identifier:          DuQjCOTGrJgbj1AwdC11gwYvgvZx1XDhqqn5JAnvhsI=
Subject key identifier:   F7:47:69:5F:09:70:98:76:74:7B:29:BD:76:89:8A:44:6C:B0:5E:8E
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       690AC2FF3959B93A66001A446DBE08722121E553
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS57957.roa
Signing time:             Sat 08 Apr 2023 03:25:24 +0000
ROA not before:           Sat 08 Apr 2023 03:20:24 +0000
ROA not after:            Sat 06 Apr 2024 03:25:24 +0000
asID:                     57957
IP address blocks:        2a12:dd47:804a::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:0a:c2:ff:39:59:b9:3a:66:00:1a:44:6d:be:08:72:21:21:e5:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:24 2023 GMT
            Not After : Apr  6 03:25:24 2024 GMT
        Subject: CN=F747695F09709876747B29BD76898A446CB05E8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:68:5a:9f:9b:86:87:74:ca:1a:ba:cf:51:5f:
                    56:2f:76:f8:23:ab:50:24:eb:7c:db:54:c6:63:0d:
                    e8:aa:a8:f4:44:8c:f6:ef:63:3b:d1:3c:4e:d3:c5:
                    03:a7:a9:34:f4:22:ef:ed:ce:95:bf:70:e8:86:27:
                    3f:5d:b2:1e:3a:88:98:1a:03:b2:25:ea:6f:ad:0f:
                    a7:94:12:c6:a9:ed:ae:09:a1:1c:16:0a:b2:1a:ec:
                    82:f6:22:4e:13:4c:37:b4:a3:24:b5:2e:2a:1e:21:
                    6e:4c:7f:df:f4:a9:dc:10:b2:20:81:75:25:7a:e1:
                    06:68:c5:e0:7f:8a:62:f1:74:f5:17:ec:ff:86:13:
                    01:ec:8c:3e:6e:bc:85:5c:ba:6e:cf:1e:ae:0b:9b:
                    50:45:73:c2:e6:dd:cb:71:73:76:e3:69:1f:76:b9:
                    f4:e4:3b:5d:b5:fe:7c:ef:e3:09:9c:78:fa:08:51:
                    4a:03:df:71:1f:e3:90:78:dd:05:8b:71:a2:67:0b:
                    b1:d6:80:f3:49:6b:3b:f3:c7:2a:74:94:a8:be:89:
                    1f:6a:19:b9:39:ea:e8:6c:e7:fa:74:87:53:7d:6a:
                    e2:7a:c0:df:5a:65:88:e0:3c:64:0b:17:75:bf:72:
                    38:c9:cb:a7:14:6a:75:8e:2a:eb:3c:61:ac:e2:a3:
                    f3:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:47:69:5F:09:70:98:76:74:7B:29:BD:76:89:8A:44:6C:B0:5E:8E
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS57957.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:804a::/48

    Signature Algorithm: sha256WithRSAEncryption
         47:fa:b9:9f:87:59:b1:c1:20:e7:78:0e:c5:79:cd:ce:3d:30:
         96:07:75:b0:f8:2c:70:33:1a:22:fa:3b:b0:07:e8:1c:9e:7a:
         56:3b:50:4d:44:46:b2:97:84:b7:24:ff:5c:03:fc:cd:2d:a9:
         a6:c4:a5:49:40:a6:2f:6a:4e:1d:8b:ca:7d:c1:d5:1e:16:41:
         ae:6c:cf:70:ca:69:26:96:8c:95:a1:ff:99:73:16:2b:a9:63:
         e1:14:8b:8e:d6:d6:2b:ba:1a:db:d7:e5:26:f8:7d:5a:99:78:
         fd:1c:aa:37:ba:01:da:78:93:5d:5d:2d:b2:e5:cb:87:51:8a:
         db:01:73:77:fe:d4:1c:cf:49:3e:cb:9d:7c:7f:78:2a:e6:c8:
         02:46:07:93:d3:95:ac:d7:40:60:3c:3d:5d:15:c7:89:86:eb:
         1d:00:90:25:08:c6:bd:dc:be:8e:98:f9:72:a7:81:26:94:22:
         83:aa:c5:7b:50:ee:ee:12:6c:b3:aa:3f:c1:b6:5b:66:b4:81:
         3f:d7:ab:26:d1:f4:6d:58:cc:d1:ef:1e:bd:8a:85:ff:af:77:
         d8:28:21:54:0c:c7:f3:c9:fb:cd:de:28:fc:c8:8a:0e:e6:c0:
         59:84:6b:b0:2e:dd:9e:42:ad:8e:bf:0c:23:45:1b:9d:5c:54:
         48:cc:a7:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----