Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS149296.roa
File:                     AS149296.roa (raw, json)
Hash identifier:          L1cyaEpANb5R3M/jxRQZLBHEXseZSexX35/i5rMoReE=
Subject key identifier:   A2:28:E8:F7:40:45:6E:5E:95:55:2B:94:9C:BF:DA:8B:73:35:D4:DC
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       6C0779DBF3CD40F37E819410E8CCDB0501826D84
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS149296.roa
Signing time:             Sat 08 Apr 2023 03:25:31 +0000
ROA not before:           Sat 08 Apr 2023 03:20:31 +0000
ROA not after:            Sat 06 Apr 2024 03:25:31 +0000
asID:                     149296
IP address blocks:        2a12:dd47:82c0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:07:79:db:f3:cd:40:f3:7e:81:94:10:e8:cc:db:05:01:82:6d:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:31 2023 GMT
            Not After : Apr  6 03:25:31 2024 GMT
        Subject: CN=A228E8F740456E5E95552B949CBFDA8B7335D4DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:17:8e:19:39:f7:a3:a9:99:3e:5d:78:7a:a2:
                    8b:30:bc:7e:7f:a5:b9:ad:98:d5:b0:ec:af:7e:6a:
                    92:24:71:4a:05:f6:20:6a:c0:87:5c:40:f4:31:bc:
                    33:cf:32:85:a1:47:d2:81:df:02:ef:bc:36:a3:d5:
                    0a:d3:b4:39:3d:6a:32:31:b4:57:a6:30:19:14:dc:
                    76:4b:cb:2f:2a:cb:42:54:af:26:6c:03:aa:63:69:
                    f7:0f:af:a0:1c:3b:4a:83:4f:5a:12:63:49:07:e0:
                    43:b2:77:5b:b0:30:84:b3:43:8f:c9:6e:b2:ae:da:
                    bd:0c:33:0f:86:03:4f:c6:ac:96:f9:df:7f:c9:8c:
                    82:f2:bd:d8:ea:25:13:56:34:06:51:20:96:d8:19:
                    82:cd:df:5c:40:40:5a:9e:15:a8:a5:82:50:d3:fe:
                    68:68:2f:43:27:80:e3:07:94:d5:52:b8:36:60:16:
                    2d:be:ea:fb:b6:ae:2b:1a:fa:91:34:be:f8:46:fb:
                    f9:50:3f:12:6c:7a:7d:de:8d:4b:51:4c:52:46:a6:
                    96:00:1c:14:d8:df:a4:7d:92:e4:80:c2:af:03:21:
                    8b:4a:b2:7c:94:02:bb:d7:d9:29:a8:21:a0:7e:80:
                    11:17:7e:c1:f9:f7:cd:1c:23:59:95:b7:23:73:7d:
                    97:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:28:E8:F7:40:45:6E:5E:95:55:2B:94:9C:BF:DA:8B:73:35:D4:DC
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS149296.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:82c0::/44

    Signature Algorithm: sha256WithRSAEncryption
         b8:ca:19:ad:ad:a5:1d:1c:13:93:d8:69:08:af:48:85:af:f8:
         ad:b6:55:61:fc:e7:9a:f6:dd:10:9a:5b:5c:61:cf:e6:cd:de:
         aa:1c:d4:f3:4c:62:75:20:94:07:08:fc:84:e1:ae:97:36:62:
         ac:db:c2:70:72:50:1b:2c:b0:5c:3a:1d:d8:03:c7:ce:c8:0b:
         b3:15:5f:c4:e7:38:07:67:9b:e7:23:ab:91:f7:ab:a5:c5:f2:
         00:c2:bc:f9:b0:05:01:ad:2b:4d:28:3d:3d:d4:bc:39:ba:21:
         61:e8:05:bc:9c:e9:20:77:e7:c8:23:25:0e:47:59:17:d0:08:
         45:20:18:d5:37:16:f4:cd:df:13:4c:e3:65:57:87:32:2b:dc:
         1d:34:03:ff:94:77:92:b6:16:fe:11:aa:cf:45:e3:cf:73:f5:
         78:13:c4:44:77:18:d6:bf:6a:87:71:8f:e7:ca:9a:78:3a:ee:
         15:c9:22:1a:12:19:55:9a:08:0c:7c:1f:61:58:42:95:ad:dc:
         2a:10:83:28:36:64:96:a5:f8:66:64:7d:09:ce:69:93:8b:8c:
         d0:df:41:ac:b3:60:9d:18:7b:44:83:da:cd:fd:ec:03:5c:2a:
         91:4d:f5:33:d8:2a:64:5a:4b:f0:c1:fa:ce:f6:87:bf:bf:21:
         7e:c9:e7:dd
-----BEGIN CERTIFICATE-----
MIIEjzCCA3egAwIBAgIUbAd52/PNQPN+gZQQ6MzbBQGCbYQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjU3ZGNiYTlmYzdiMGVmMWYzY2M4MGExYWVlMjJjMDAx
OThlNzY3YTAeFw0yMzA0MDgwMzIwMzFaFw0yNDA0MDYwMzI1MzFaMDMxMTAvBgNV
BAMTKEEyMjhFOEY3NDA0NTZFNUU5NTU1MkI5NDlDQkZEQThCNzMzNUQ0REMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTF44ZOfejqZk+XXh6ooswvH5/
pbmtmNWw7K9+apIkcUoF9iBqwIdcQPQxvDPPMoWhR9KB3wLvvDaj1QrTtDk9ajIx
tFemMBkU3HZLyy8qy0JUryZsA6pjafcPr6AcO0qDT1oSY0kH4EOyd1uwMISzQ4/J
brKu2r0MMw+GA0/GrJb533/JjILyvdjqJRNWNAZRIJbYGYLN31xAQFqeFailglDT
/mhoL0MngOMHlNVSuDZgFi2+6vu2risa+pE0vvhG+/lQPxJsen3ejUtRTFJGppYA
HBTY36R9kuSAwq8DIYtKsnyUArvX2SmoIaB+gBEXfsH5980cI1mVtyNzfZdfAgMB
AAGjggGZMIIBlTAdBgNVHQ4EFgQUoijo90BFbl6VVSuUnL/ai3M11NwwHwYDVR0j
BBgwFoAUtX3Lqfx7DvHzzIChruIsABmOdnowDgYDVR0PAQH/BAQDAgeAMFkGA1Ud
HwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5jby9yZXBvL0hZU1AvNi9CNTdEQ0JB
OUZDN0IwRUYxRjNDQzgwQTFBRUUyMkMwMDE5OEU3NjdBLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvdFgzTHFmeDdEdkh6eklDaHJ1SXNBQm1PZG5vLmNlcjBEBggr
BgEFBQcBCwQ4MDYwNAYIKwYBBQUHMAuGKHJzeW5jOi8vcnBraS5jby9yZXBvL0hZ
U1AvNi9BUzE0OTI5Ni5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoS3UeCwDANBgkqhkiG9w0BAQsFAAOC
AQEAuMoZra2lHRwTk9hpCK9Iha/4rbZVYfznmvbdEJpbXGHP5s3eqhzU80xidSCU
Bwj8hOGulzZirNvCcHJQGyywXDod2APHzsgLsxVfxOc4B2eb5yOrkferpcXyAMK8
+bAFAa0rTSg9PdS8ObohYegFvJzpIHfnyCMlDkdZF9AIRSAY1TcW9M3fE0zjZVeH
MivcHTQD/5R3krYW/hGqz0Xjz3P1eBPERHcY1r9qh3GP58qaeDruFckiGhIZVZoI
DHwfYVhCla3cKhCDKDZklqX4ZmR9Cc5pk4uM0N9BrLNgnRh7RIPazf3sA1wqkU31
M9gqZFpL8MH6zvaHv78hfsnn3Q==
-----END CERTIFICATE-----