Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS199582.roa
File:                     AS199582.roa (raw, json)
Hash identifier:          JapRSJMEnO9thpuFZ6KGT+hh6UzyKjUZVGf+DKx3xxE=
Subject key identifier:   9C:BE:D7:AC:5F:B2:DE:0E:49:DD:EA:8D:4F:E9:8D:AE:BF:8F:78:25
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       07C7C37564DD4A4FDC5DA9D4AD76D7B8B2FA1A23
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS199582.roa
Signing time:             Sat 08 Apr 2023 03:25:30 +0000
ROA not before:           Sat 08 Apr 2023 03:20:30 +0000
ROA not after:            Sat 06 Apr 2024 03:25:30 +0000
asID:                     199582
IP address blocks:        2a12:dd47:80e6::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:c7:c3:75:64:dd:4a:4f:dc:5d:a9:d4:ad:76:d7:b8:b2:fa:1a:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:30 2023 GMT
            Not After : Apr  6 03:25:30 2024 GMT
        Subject: CN=9CBED7AC5FB2DE0E49DDEA8D4FE98DAEBF8F7825
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:81:d7:40:9f:4a:31:44:09:83:54:fc:1d:96:
                    8b:ec:30:84:a8:95:ef:ea:c5:00:32:0d:00:51:7e:
                    91:f6:00:c0:84:f1:1a:ec:7a:2e:dd:f7:55:f9:b4:
                    46:2c:1c:fe:93:6d:99:49:3d:6e:07:cd:03:18:49:
                    76:f3:e4:a7:a8:39:26:da:b2:0c:69:01:39:ab:c2:
                    9d:79:d7:dc:5c:cd:9a:34:73:5d:b5:df:87:e4:4e:
                    e9:03:81:d7:ca:fd:cb:41:fb:dd:8d:b7:43:1c:a7:
                    a2:a1:48:87:f2:56:c8:58:c0:30:8a:64:72:50:a1:
                    89:9d:0e:c9:85:3c:04:f4:88:0b:2e:00:23:ee:5e:
                    58:4c:a9:96:77:cc:44:e4:5e:af:b1:14:96:19:fc:
                    b7:0a:84:02:ef:a0:f2:01:bd:6e:66:0f:45:4a:b3:
                    1c:33:7a:23:1d:84:f9:fd:8d:9c:49:b9:d4:c6:dc:
                    b7:8e:86:3d:28:e3:9c:91:4d:cb:83:02:31:06:bf:
                    8d:5a:f5:cc:dd:30:80:32:02:97:bc:c0:bc:55:b4:
                    a3:01:8c:d3:09:e1:a4:c1:c7:14:a9:de:74:fe:fe:
                    fc:b2:a1:3b:34:8b:29:31:3d:c9:be:25:24:74:45:
                    62:1e:23:07:7e:99:e9:33:c4:9e:fb:4a:93:2a:50:
                    7d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:BE:D7:AC:5F:B2:DE:0E:49:DD:EA:8D:4F:E9:8D:AE:BF:8F:78:25
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS199582.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:80e6::/48

    Signature Algorithm: sha256WithRSAEncryption
         27:ff:3c:74:ef:17:8f:7f:5b:1f:f9:9b:aa:30:b1:5b:af:7b:
         d3:cf:cf:a7:15:47:96:36:48:59:97:62:eb:8b:46:6e:3f:c6:
         e2:28:1f:9e:33:db:54:cf:7a:c9:f7:23:02:0b:dc:57:b2:14:
         44:bd:fc:91:10:bd:0b:c3:03:30:36:54:be:1d:ea:8c:9e:2e:
         c5:fd:f9:72:34:27:c2:50:fd:b5:89:06:6f:70:dc:29:b7:f3:
         81:6c:2b:12:00:73:5e:4b:52:46:c8:23:a5:f6:b8:3f:85:f7:
         6f:48:be:94:29:5d:56:60:89:7a:72:38:f6:b7:91:2f:b6:d6:
         39:3c:19:f7:41:53:0c:f5:5c:c2:9b:0e:6a:4d:10:39:19:07:
         3a:c6:79:ae:26:6c:bd:0e:41:a3:93:01:ca:49:2e:9c:43:4a:
         1b:72:b0:c4:c8:bf:dc:9d:aa:b6:e8:9e:ed:1b:0b:25:26:92:
         4e:17:4d:5d:bd:71:d8:1e:38:0c:86:3f:ad:e4:80:da:33:a3:
         18:c9:a8:b5:30:e0:8a:ee:b3:d1:71:0b:c0:da:9e:4b:4f:7a:
         61:33:e9:a5:7c:f5:90:3b:60:bd:12:1f:0f:89:48:74:a1:20:
         36:28:a9:19:35:1e:d3:4f:b9:12:ca:c1:35:38:9c:0f:11:8f:
         e7:b6:57:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----