Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS59730.roa
File:                     AS59730.roa (raw, json)
Hash identifier:          puT1SSkbSw3JpBaBBlT/mC7QGvZFLkUaYSQTfdk53gs=
Subject key identifier:   21:D9:63:89:8D:6A:42:52:9E:95:69:00:AE:40:A7:04:9C:13:25:91
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       40DA86B0C7359998482E2C9ABEACEB43D69EA37F
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS59730.roa
Signing time:             Sat 08 Apr 2023 03:25:23 +0000
ROA not before:           Sat 08 Apr 2023 03:20:23 +0000
ROA not after:            Sat 06 Apr 2024 03:25:23 +0000
asID:                     59730
IP address blocks:        2a12:dd47:82b0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:da:86:b0:c7:35:99:98:48:2e:2c:9a:be:ac:eb:43:d6:9e:a3:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:23 2023 GMT
            Not After : Apr  6 03:25:23 2024 GMT
        Subject: CN=21D963898D6A42529E956900AE40A7049C132591
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:34:41:3d:3f:ab:b0:50:73:89:90:79:17:7a:
                    e0:d6:e7:e8:00:b2:4c:6e:92:71:e1:cd:ae:26:0d:
                    e3:ea:96:88:a5:9b:37:21:db:ef:95:a4:32:9f:53:
                    f5:42:31:d1:c0:e4:17:85:e2:74:08:73:1f:f3:45:
                    a6:39:a7:e6:f4:78:48:7f:f0:a6:f7:2c:8f:eb:5f:
                    60:a9:0e:df:19:47:27:65:65:0d:3a:ed:60:f4:9d:
                    fd:a5:7a:e4:09:a9:54:fd:a0:41:26:01:0a:8c:f9:
                    35:c4:fe:e4:7f:dc:64:a3:3f:df:e2:ff:54:0d:f6:
                    c3:e5:82:ab:6b:ef:b2:ec:0e:3d:9a:b2:f0:27:5b:
                    98:e9:f1:05:bc:98:f1:e9:f5:6c:af:3e:6d:13:e5:
                    24:64:34:ee:60:28:48:8e:08:c7:e7:a4:6a:66:5d:
                    8f:c3:d9:8a:c3:cc:34:7f:83:e4:a7:f0:a6:ea:19:
                    8e:e1:0b:07:e0:65:06:a4:f2:0a:ba:98:6d:9d:cd:
                    21:c3:c1:68:8e:d7:73:b0:5d:21:96:8b:5f:23:c6:
                    9a:f6:ac:ee:07:db:63:56:30:ce:e8:fa:96:4b:fe:
                    08:45:10:72:2e:cf:1a:11:41:74:66:76:51:5c:29:
                    28:5e:15:3e:33:3f:3e:ac:86:d6:23:7a:a8:4e:9a:
                    97:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:D9:63:89:8D:6A:42:52:9E:95:69:00:AE:40:A7:04:9C:13:25:91
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS59730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:82b0::/44

    Signature Algorithm: sha256WithRSAEncryption
         ae:a2:59:38:16:62:bf:5c:71:61:d1:3e:08:36:cb:10:19:57:
         76:4c:2a:37:ce:54:ef:e6:4e:dd:fd:d7:6f:03:6d:5f:38:94:
         74:67:c4:70:68:c7:11:09:6e:9c:cf:98:e9:ff:89:2a:d5:52:
         eb:4c:34:71:29:db:ea:70:e1:9c:3f:f8:1f:64:7e:8f:21:ac:
         34:a3:46:1f:01:d1:5c:19:7c:7a:1e:51:20:ab:68:32:42:6a:
         b3:4b:ce:3c:a0:11:7b:40:95:27:0d:b0:ac:03:ec:90:08:f0:
         f5:12:60:5d:8e:19:da:24:02:74:ed:b6:ea:50:f3:8a:92:d4:
         0c:6d:77:49:4a:05:fb:4d:cb:a5:b4:b4:45:e2:99:19:a1:10:
         28:c3:91:13:69:a4:d3:b5:9b:e3:cc:fb:91:81:fb:1d:f2:73:
         63:62:06:b8:9e:44:aa:fb:b7:f6:c7:0d:af:60:c8:b8:4f:6d:
         b6:02:79:07:27:60:16:07:49:35:66:82:a6:1f:33:03:1c:f1:
         2f:11:9e:d8:5c:21:0a:91:1f:07:f9:68:de:f9:c4:9e:e6:c6:
         67:95:09:03:eb:59:f4:5a:2f:b9:f9:be:0d:04:5c:ac:b0:cb:
         db:61:9e:fa:cf:5e:a1:7d:e0:ee:30:4f:40:d5:ae:77:73:1e:
         d4:1e:38:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----