Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS199304.roa
File:                     AS199304.roa (raw, json)
Hash identifier:          HQJ7vf0JKT4MP7Mgu4O7A+GwiUkwL1g/H16Zft/yb04=
Subject key identifier:   AA:1C:14:55:83:38:CE:A5:FA:2F:75:51:C8:36:BC:26:63:A4:DC:7F
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       723DD2AA35DF8CD903D7D38769E24F3D06D2EEAA
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS199304.roa
Signing time:             Sat 08 Apr 2023 03:25:42 +0000
ROA not before:           Sat 08 Apr 2023 03:20:42 +0000
ROA not after:            Sat 06 Apr 2024 03:25:42 +0000
asID:                     199304
IP address blocks:        2a12:dd47:df10::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:3d:d2:aa:35:df:8c:d9:03:d7:d3:87:69:e2:4f:3d:06:d2:ee:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:42 2023 GMT
            Not After : Apr  6 03:25:42 2024 GMT
        Subject: CN=AA1C14558338CEA5FA2F7551C836BC2663A4DC7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:68:8d:45:7c:a9:8c:81:0a:97:b0:0b:31:b4:
                    5b:76:12:57:a3:c6:03:c2:ec:c3:f9:70:44:1c:20:
                    63:46:ff:de:87:73:aa:10:09:87:7e:be:27:fb:11:
                    5e:b7:a9:fa:5d:ab:73:0a:f4:c4:85:9c:d7:ff:c7:
                    80:ab:cf:87:08:5b:3e:23:87:7c:ef:67:5a:2d:07:
                    15:97:17:9c:c7:f5:a0:b4:32:a8:bf:86:35:42:0e:
                    d5:51:4f:4c:8e:5b:34:04:47:a0:00:fd:ae:3a:8a:
                    f7:74:45:9e:b1:7e:fe:86:64:6f:ff:1a:12:41:23:
                    83:0d:c8:bb:b2:7d:9f:76:7f:29:a9:2e:66:00:aa:
                    55:70:83:23:89:35:08:99:96:85:ea:42:da:80:55:
                    3a:70:ff:c7:de:64:49:c7:fa:9f:34:3d:57:9c:2d:
                    5f:a5:ec:dc:8e:f0:f3:8b:a7:de:c8:5f:09:3a:53:
                    cb:58:ba:79:e8:8e:b1:c9:33:97:92:00:63:16:6e:
                    c0:57:8e:29:13:da:76:89:1a:bc:9a:56:2f:37:7d:
                    3e:f1:18:85:4b:9f:99:dd:b4:af:96:b6:1d:8e:f5:
                    1f:aa:03:24:ef:e7:be:b4:67:ee:76:9d:4b:4e:7d:
                    61:b0:f6:05:72:56:e2:de:a9:46:58:f4:90:64:74:
                    7f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:1C:14:55:83:38:CE:A5:FA:2F:75:51:C8:36:BC:26:63:A4:DC:7F
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS199304.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:df10::/44

    Signature Algorithm: sha256WithRSAEncryption
         5e:dc:e6:e8:35:cf:cd:cf:8d:2b:90:8b:60:f3:58:a3:ca:c8:
         35:57:c8:39:d5:19:cc:f4:69:4f:64:2d:b1:26:35:aa:47:e5:
         95:de:67:63:ed:78:7f:b4:7a:d6:ab:e8:32:46:2a:1f:f7:04:
         bf:8d:d2:98:44:ac:1a:ee:9c:40:46:c2:b6:d7:30:51:a7:17:
         7e:a5:eb:b3:31:f2:2b:b6:74:91:8d:d1:3e:fd:10:6a:a6:2e:
         47:ab:54:35:42:06:f0:d9:ea:34:d0:89:9d:4a:63:69:ad:10:
         3d:ec:0b:b3:92:67:8a:4c:91:24:82:64:6e:78:8c:16:b6:ec:
         a2:d9:d1:e0:29:a9:1c:39:47:85:44:b6:26:2a:55:33:ec:9e:
         4a:b6:7f:87:22:69:74:8e:16:ea:80:81:b9:47:5c:dd:11:f3:
         4e:80:0b:28:5b:5f:55:52:59:ff:59:4a:d0:4b:47:64:1f:ac:
         84:27:8f:21:5c:80:20:d3:af:f4:24:0e:61:c8:68:ce:5d:e7:
         a4:44:24:c5:39:cf:52:e9:a0:ca:53:f6:c7:71:a5:75:5e:0d:
         aa:1f:40:c9:07:f1:6d:b4:f6:5e:e8:e2:da:51:fe:8c:92:93:
         b1:75:51:c5:ab:bc:85:7b:e8:ba:74:6f:4e:e1:4b:51:12:13:
         44:f5:1e:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----