Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS62485.roa
File:                     AS62485.roa (raw, json)
Hash identifier:          yynB2CIliAmd/Jc4CjU79CBUzxSCnST186lz0QUQqiE=
Subject key identifier:   96:AE:B0:4C:F9:5E:E5:31:65:72:B0:7F:25:D9:FB:10:42:02:AD:2C
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       28CA4964F7F5BDF35B93BD8AD7CAEC7791C1A3C4
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS62485.roa
Signing time:             Sat 08 Apr 2023 03:25:47 +0000
ROA not before:           Sat 08 Apr 2023 03:20:47 +0000
ROA not after:            Sat 06 Apr 2024 03:25:47 +0000
asID:                     62485
IP address blocks:        2a12:dd47:8073::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:ca:49:64:f7:f5:bd:f3:5b:93:bd:8a:d7:ca:ec:77:91:c1:a3:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:47 2023 GMT
            Not After : Apr  6 03:25:47 2024 GMT
        Subject: CN=96AEB04CF95EE5316572B07F25D9FB104202AD2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:68:cd:28:a2:0d:18:27:23:33:2c:34:bc:71:
                    2f:8b:9e:28:c1:45:16:86:6b:6d:ae:7a:80:ea:19:
                    90:be:e1:53:25:e6:d2:88:41:77:f1:23:9f:5a:c7:
                    80:3f:74:22:17:90:7e:3a:ee:5b:d5:a6:77:93:8b:
                    80:d6:44:0f:3f:79:83:b7:87:c7:7d:b5:b3:4b:90:
                    0e:42:fd:93:77:e6:d0:dc:b4:98:da:fb:1a:27:53:
                    b4:86:9a:83:bc:70:cf:0c:63:c6:ce:e6:c3:58:52:
                    cc:16:84:1e:69:3c:86:96:9b:90:7f:00:29:c0:09:
                    66:28:58:39:66:f4:71:e8:e6:e0:08:b5:62:20:17:
                    7b:a2:4d:b3:50:85:02:0e:9a:65:da:f3:12:7f:49:
                    21:b1:64:82:41:33:50:4f:7f:62:6e:5f:2f:a4:85:
                    3b:ef:23:bb:8f:38:18:d8:1c:86:fb:ee:a8:a1:c6:
                    ef:6b:29:1f:eb:75:74:74:b1:af:92:c2:5a:f7:a9:
                    0e:eb:bf:7b:3c:de:24:45:d0:c6:3c:3e:3a:6c:8e:
                    1b:59:0e:de:82:f7:d5:6f:0e:11:74:e1:06:3f:45:
                    72:1e:b1:b0:6f:d9:b4:77:2c:7c:df:9d:d4:62:14:
                    27:d5:72:48:31:76:9e:5d:fb:76:58:13:ed:cb:77:
                    a0:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:AE:B0:4C:F9:5E:E5:31:65:72:B0:7F:25:D9:FB:10:42:02:AD:2C
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS62485.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8073::/48

    Signature Algorithm: sha256WithRSAEncryption
         49:9c:50:89:e2:94:8f:12:98:83:b2:33:6c:dc:f4:cf:79:7d:
         9d:75:5a:13:90:09:c7:85:9b:99:1d:ac:e4:9d:1a:55:b0:e7:
         25:9d:79:ba:48:6e:64:1b:59:ba:e2:54:2c:98:39:7b:72:3a:
         9c:5d:9e:b4:e0:cd:00:53:3e:33:2e:4f:2d:8e:12:c8:39:86:
         43:4d:61:c0:6d:d9:db:94:39:0c:24:b3:ff:1e:ed:31:6b:33:
         fb:ad:d8:7a:5d:d3:63:d9:89:fd:c8:60:81:46:76:7b:48:04:
         39:d4:bc:23:a1:7e:9b:65:ea:6b:97:7e:96:78:7c:8e:0c:dc:
         6f:97:bf:e6:fc:ed:83:f7:5f:95:39:0e:36:86:81:20:64:b3:
         db:76:5b:91:c4:fa:46:0f:da:c2:88:d0:cc:55:e7:30:b3:79:
         b2:d2:a5:e5:61:14:88:c6:65:4b:29:80:25:6f:48:fc:64:74:
         38:39:93:d2:5a:6f:75:42:32:12:ec:b2:81:b4:e1:d5:45:5b:
         1c:84:18:84:8d:f4:75:eb:68:e8:46:27:d2:76:b7:ca:35:78:
         72:22:5e:21:29:35:d5:7c:cd:42:81:bb:a5:94:e4:fc:39:57:
         a3:98:19:49:6f:ca:43:d6:81:76:8e:89:9d:46:15:e4:e0:a2:
         48:40:cc:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----