Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS199299.roa
File:                     AS199299.roa (raw, json)
Hash identifier:          1xDfFXSQJ8ea4t8vILOITkyIqWHVKSoPD52COyNANqU=
Subject key identifier:   B1:9C:CE:1F:4F:0E:67:56:64:87:7E:AC:4B:D1:08:11:BE:E6:28:F6
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       3A991514F65395D85880F03176B7ECB81A2D4CDC
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS199299.roa
Signing time:             Sat 08 Apr 2023 03:25:42 +0000
ROA not before:           Sat 08 Apr 2023 03:20:42 +0000
ROA not after:            Sat 06 Apr 2024 03:25:42 +0000
asID:                     199299
IP address blocks:        2a12:dd47:f500::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:99:15:14:f6:53:95:d8:58:80:f0:31:76:b7:ec:b8:1a:2d:4c:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:42 2023 GMT
            Not After : Apr  6 03:25:42 2024 GMT
        Subject: CN=B19CCE1F4F0E675664877EAC4BD10811BEE628F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:37:f3:a9:5c:25:61:34:11:33:dd:3f:66:67:
                    09:5c:d7:1d:3e:23:89:66:a0:71:37:67:56:1a:e9:
                    23:23:00:f7:9d:1d:bf:fc:1e:79:c2:32:f2:2d:d9:
                    f0:53:d2:82:4f:93:f0:e3:9a:85:da:9f:5d:55:01:
                    c8:da:24:0c:a2:78:d5:57:6f:2e:aa:ca:4a:b3:68:
                    11:36:71:bb:92:f3:8a:bf:8c:17:24:6b:65:ce:da:
                    a3:4e:0b:48:42:61:1a:4f:7f:3d:b4:4f:33:17:9c:
                    25:ca:f4:6e:ee:11:6f:8c:4a:99:d5:79:85:48:cf:
                    8a:ee:10:7b:e7:7a:ba:64:61:ba:c9:46:bd:6d:fd:
                    3f:8e:2c:8b:1c:7f:40:68:30:0b:a9:20:a6:09:32:
                    5c:de:eb:08:4b:fc:b0:6f:7e:b9:99:38:d1:2a:45:
                    00:40:47:9c:bc:d3:fe:15:ec:82:d5:94:ea:ad:60:
                    01:1f:cb:13:24:83:74:f1:df:32:e4:e8:ac:7e:43:
                    70:60:ab:5b:50:61:83:b4:ba:f2:b8:a0:7c:7b:77:
                    c2:8e:9e:89:aa:68:a0:29:99:0c:9b:5e:b2:b8:92:
                    74:da:b9:4f:ec:61:90:81:48:c5:3c:e4:14:02:00:
                    e2:c0:89:ec:f0:3c:24:77:f6:f7:f0:d7:0c:d7:33:
                    73:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:9C:CE:1F:4F:0E:67:56:64:87:7E:AC:4B:D1:08:11:BE:E6:28:F6
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS199299.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:f500::/40

    Signature Algorithm: sha256WithRSAEncryption
         86:cd:40:f3:fa:bf:b2:b2:75:9c:07:db:4d:30:bc:ee:12:af:
         af:bc:84:48:13:13:3c:3d:b9:06:ae:30:9e:b3:c8:3d:9d:d4:
         34:2c:c1:07:e1:79:3f:f2:cc:03:27:c7:13:7b:60:fa:0b:26:
         9e:ae:ec:9d:67:b6:7b:59:db:5c:a3:04:8b:d6:42:f5:d9:08:
         ce:72:e5:73:df:ae:60:97:be:3a:0f:ed:96:d7:bf:d2:1f:18:
         91:e6:64:32:87:99:3f:f8:a6:a5:84:22:f8:cf:96:26:24:e2:
         e2:fb:2c:e9:b3:14:33:48:62:01:39:ae:95:94:ad:41:3e:ae:
         c1:b1:ae:2e:03:4f:ab:b7:1e:8c:8f:55:1d:7c:77:24:54:d0:
         1d:4d:d6:73:66:b8:67:db:df:f8:c3:b8:38:01:32:4f:71:d3:
         3c:3a:75:4c:bb:af:1c:da:7f:59:85:d1:b8:86:b4:36:4c:75:
         e8:03:f7:ee:e3:a6:02:41:c2:4d:e4:c9:51:9a:5c:34:ab:78:
         1f:e5:10:bb:96:c1:45:71:2c:52:b7:37:8f:3c:4f:49:94:12:
         69:7b:ad:85:e6:1e:dc:50:02:4d:5e:15:18:7f:d1:7d:15:f4:
         d6:2e:cc:d1:ef:b6:48:8a:f6:db:5a:6d:ac:bb:5f:fa:d6:8d:
         7e:c7:4d:49
-----BEGIN CERTIFICATE-----
MIIEjjCCA3agAwIBAgIUOpkVFPZTldhYgPAxdrfsuBotTNwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjU3ZGNiYTlmYzdiMGVmMWYzY2M4MGExYWVlMjJjMDAx
OThlNzY3YTAeFw0yMzA0MDgwMzIwNDJaFw0yNDA0MDYwMzI1NDJaMDMxMTAvBgNV
BAMTKEIxOUNDRTFGNEYwRTY3NTY2NDg3N0VBQzRCRDEwODExQkVFNjI4RjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqN/OpXCVhNBEz3T9mZwlc1x0+
I4lmoHE3Z1Ya6SMjAPedHb/8HnnCMvIt2fBT0oJPk/DjmoXan11VAcjaJAyieNVX
by6qykqzaBE2cbuS84q/jBcka2XO2qNOC0hCYRpPfz20TzMXnCXK9G7uEW+MSpnV
eYVIz4ruEHvnerpkYbrJRr1t/T+OLIscf0BoMAupIKYJMlze6whL/LBvfrmZONEq
RQBAR5y80/4V7ILVlOqtYAEfyxMkg3Tx3zLk6Kx+Q3Bgq1tQYYO0uvK4oHx7d8KO
nomqaKApmQybXrK4knTauU/sYZCBSMU85BQCAOLAiezwPCR39vfw1wzXM3MXAgMB
AAGjggGYMIIBlDAdBgNVHQ4EFgQUsZzOH08OZ1Zkh36sS9EIEb7mKPYwHwYDVR0j
BBgwFoAUtX3Lqfx7DvHzzIChruIsABmOdnowDgYDVR0PAQH/BAQDAgeAMFkGA1Ud
HwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5jby9yZXBvL0hZU1AvNi9CNTdEQ0JB
OUZDN0IwRUYxRjNDQzgwQTFBRUUyMkMwMDE5OEU3NjdBLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvdFgzTHFmeDdEdkh6eklDaHJ1SXNBQm1PZG5vLmNlcjBEBggr
BgEFBQcBCwQ4MDYwNAYIKwYBBQUHMAuGKHJzeW5jOi8vcnBraS5jby9yZXBvL0hZ
U1AvNi9BUzE5OTI5OS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr
BgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoS3Uf1MA0GCSqGSIb3DQEBCwUAA4IB
AQCGzUDz+r+ysnWcB9tNMLzuEq+vvIRIExM8PbkGrjCes8g9ndQ0LMEH4Xk/8swD
J8cTe2D6CyaeruydZ7Z7WdtcowSL1kL12QjOcuVz365gl746D+2W17/SHxiR5mQy
h5k/+KalhCL4z5YmJOLi+yzpsxQzSGIBOa6VlK1BPq7Bsa4uA0+rtx6Mj1UdfHck
VNAdTdZzZrhn29/4w7g4ATJPcdM8OnVMu68c2n9ZhdG4hrQ2THXoA/fu46YCQcJN
5MlRmlw0q3gf5RC7lsFFcSxStzePPE9JlBJpe62F5h7cUAJNXhUYf9F9FfTWLszR
77ZIivbbWm2su1/61o1+x01J
-----END CERTIFICATE-----