Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS61257.roa
File:                     AS61257.roa (raw, json)
Hash identifier:          LFrATsfNhwWdgFBiro2/ckNp6DuGdDdi84xp+Jl5ec4=
Subject key identifier:   03:7E:24:9B:D6:26:DD:EA:3D:DD:14:58:D4:29:7F:83:37:D5:E6:B0
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       239E5FF265CB0B411D7B3F209487D75F9B9ACF32
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS61257.roa
Signing time:             Sat 08 Apr 2023 03:25:37 +0000
ROA not before:           Sat 08 Apr 2023 03:20:37 +0000
ROA not after:            Sat 06 Apr 2024 03:25:37 +0000
asID:                     61257
IP address blocks:        2a12:dd47:8300::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:9e:5f:f2:65:cb:0b:41:1d:7b:3f:20:94:87:d7:5f:9b:9a:cf:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:37 2023 GMT
            Not After : Apr  6 03:25:37 2024 GMT
        Subject: CN=037E249BD626DDEA3DDD1458D4297F8337D5E6B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b0:f8:97:8e:e9:30:c3:f0:3a:88:e9:65:71:
                    c6:fe:6b:1d:ce:1b:b1:ea:1b:83:9f:a4:5a:53:d2:
                    8d:70:f5:85:83:44:cf:88:e1:8d:22:1e:f2:fe:32:
                    ea:61:e7:55:db:4f:fd:4c:6b:c2:65:b9:b6:74:07:
                    fc:37:2d:9d:f8:fe:9f:ed:90:94:a8:82:20:8c:28:
                    d2:78:47:b4:8a:e7:59:90:f6:f8:df:f1:e3:3b:19:
                    d4:7b:1d:2e:aa:3c:b9:71:62:86:56:9f:9a:99:ac:
                    01:3a:2f:4b:7f:35:3c:c9:e1:55:73:7f:a7:b4:00:
                    38:59:70:df:b1:34:e0:cb:70:72:37:b4:9d:4d:c8:
                    0a:d9:ae:5f:80:9f:6d:51:19:5d:3a:d0:f0:54:23:
                    0c:86:d5:ef:5b:11:d3:c0:01:be:44:a5:75:de:81:
                    fb:56:38:ec:19:a0:5b:d9:8a:32:be:9a:06:05:46:
                    92:c8:6c:07:49:d5:64:55:83:0d:62:6e:93:d9:eb:
                    af:47:cc:83:0d:5b:59:f5:7a:dc:ce:d2:d1:7e:ac:
                    50:2a:9f:ba:13:cf:04:16:28:db:0e:38:ce:0d:cd:
                    72:d2:65:91:23:0c:7b:ea:f1:63:93:ef:ee:19:72:
                    1a:0c:c2:da:22:8b:f7:36:4c:3f:ca:c2:c5:19:dc:
                    4f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:7E:24:9B:D6:26:DD:EA:3D:DD:14:58:D4:29:7F:83:37:D5:E6:B0
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS61257.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8300::/44

    Signature Algorithm: sha256WithRSAEncryption
         a5:77:1f:34:15:f5:af:ec:fa:59:2a:d8:61:59:4f:dd:af:87:
         d6:0d:5e:6c:73:8b:8e:c3:05:fc:f3:ed:97:f9:ab:7a:d8:b9:
         dc:a5:6b:4f:d1:57:f3:60:7a:c3:29:1d:27:a8:f7:7c:af:68:
         8c:2c:7d:74:5d:16:06:77:e3:1b:09:d1:52:3e:10:49:8c:14:
         55:06:9d:5d:de:a2:c9:65:47:88:c1:e8:61:9f:c4:f9:4d:05:
         30:5a:aa:77:20:e0:c7:27:f5:7d:9f:c1:78:c2:50:44:6f:ac:
         36:7e:4e:02:f8:6c:76:81:3f:3a:6b:f0:20:3d:1b:2a:14:1c:
         aa:48:ed:d6:ce:02:d6:f2:b7:45:2c:60:ea:93:51:c8:1d:14:
         86:56:3f:eb:4a:cd:23:c2:c1:a1:45:98:50:ce:fd:71:08:60:
         cf:c1:56:54:65:fd:71:67:5a:dc:dd:3b:1a:8b:e3:f1:12:85:
         50:80:e4:67:48:5d:97:ac:11:9c:e1:4a:64:c4:7e:25:51:ce:
         86:b1:d7:cb:90:6f:98:39:fa:5b:93:02:62:c1:62:cf:29:99:
         2f:d1:28:c8:5c:05:ba:04:67:e5:ec:91:79:a2:ae:cb:d5:81:
         30:70:f1:10:ba:35:71:e4:e1:fa:f1:64:3d:c1:ed:99:9f:07:
         8d:6a:50:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----