Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS199656.roa
File:                     AS199656.roa (raw, json)
Hash identifier:          epl8FdeXjh59NGVFbmx/COutytm89bcz/k4H+74MPpk=
Subject key identifier:   9D:69:92:D7:15:0A:C7:63:97:55:79:F8:77:F8:7F:0F:8D:89:6B:28
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       6E6660C3D8B487E6E53ED783459A029D86DF4F36
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS199656.roa
Signing time:             Sat 08 Apr 2023 03:25:29 +0000
ROA not before:           Sat 08 Apr 2023 03:20:29 +0000
ROA not after:            Sat 06 Apr 2024 03:25:29 +0000
asID:                     199656
IP address blocks:        2a12:dd47:8ed0::/44 maxlen: 48
                          2a12:dd47:f700::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:66:60:c3:d8:b4:87:e6:e5:3e:d7:83:45:9a:02:9d:86:df:4f:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:29 2023 GMT
            Not After : Apr  6 03:25:29 2024 GMT
        Subject: CN=9D6992D7150AC763975579F877F87F0F8D896B28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:0e:fb:19:38:82:07:88:10:6f:78:0c:fe:3c:
                    77:79:37:7e:85:d8:15:1f:70:08:cc:63:5a:ad:9a:
                    b4:53:45:26:75:ba:2a:9c:33:89:61:a2:06:f6:48:
                    cb:57:c5:11:93:ed:1e:9d:0a:a2:36:30:f0:ac:a6:
                    0d:85:88:93:a6:76:fd:6a:e5:fe:e4:a7:5f:91:a5:
                    b8:1f:1f:f0:57:0a:8c:5a:78:27:21:84:ed:e7:55:
                    f9:8f:0a:14:b4:09:77:06:ca:bf:95:9b:db:a5:f6:
                    1e:86:58:49:7f:34:e2:47:6e:49:a8:80:16:67:ba:
                    d7:8f:d6:2a:54:30:2c:5c:b6:dd:48:82:bf:34:d4:
                    87:0b:68:17:9d:35:64:1d:3b:48:47:95:98:da:fb:
                    5c:e4:1e:4a:49:86:ee:9d:f7:ea:8d:91:55:77:c1:
                    af:83:c3:14:ad:5c:b7:7c:15:c0:44:c9:3b:c7:55:
                    3c:b5:0e:4e:65:b3:b2:35:bf:dd:a4:5e:f0:05:ed:
                    5c:6c:21:38:28:17:0a:b2:14:86:a0:c5:a0:a9:1c:
                    c6:5a:18:46:08:2c:20:c0:de:67:ab:98:0b:66:66:
                    12:3c:9e:5c:04:31:3b:fd:60:75:e7:93:1a:f4:c9:
                    2c:7c:22:89:24:d4:86:e7:a5:3a:d5:46:3d:69:0d:
                    6f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:69:92:D7:15:0A:C7:63:97:55:79:F8:77:F8:7F:0F:8D:89:6B:28
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS199656.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8ed0::/44
                  2a12:dd47:f700::/40

    Signature Algorithm: sha256WithRSAEncryption
         02:89:f1:a2:d7:e7:0d:28:34:a5:42:06:fa:29:9a:7d:ac:b1:
         ab:d3:d3:3f:03:e2:82:c8:c5:36:46:54:e6:1f:dc:ab:40:54:
         7d:9d:ea:7a:b3:f2:a8:d8:51:91:cb:d1:94:ce:6b:8d:a2:a9:
         38:3e:c3:a8:71:0a:b7:5e:5a:5d:3a:3d:ed:f2:ee:cd:7f:2c:
         57:cf:ca:80:11:31:d9:4e:b2:be:ea:fa:eb:d9:1a:5d:dc:cf:
         2c:83:4b:e9:12:fc:c7:07:c6:76:6a:ce:42:16:77:c4:37:ef:
         30:72:59:76:af:f4:33:6d:b1:e0:38:8a:d3:2c:98:c6:e7:89:
         d2:cb:46:15:d8:f9:d3:91:89:3d:5d:5a:b5:0b:0b:21:0c:a5:
         25:28:8c:0f:a4:0b:63:ea:9b:2a:a9:8c:4a:ca:25:d4:04:7e:
         a1:da:14:db:a4:dd:b0:80:d2:73:70:36:7f:83:cb:e3:61:87:
         c7:68:d8:4f:36:1c:24:be:a2:96:2f:c7:c4:c1:90:87:24:22:
         30:b2:82:19:d2:a8:34:07:0a:0a:2e:da:d9:1d:38:f5:55:40:
         a0:ea:a9:10:80:98:8d:69:42:3b:23:9f:47:3c:0e:9b:90:33:
         49:95:fa:32:2d:7b:c0:46:ee:82:49:2d:9f:69:19:ea:28:87:
         e8:af:db:16
-----BEGIN CERTIFICATE-----
MIIElzCCA3+gAwIBAgIUbmZgw9i0h+blPteDRZoCnYbfTzYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjU3ZGNiYTlmYzdiMGVmMWYzY2M4MGExYWVlMjJjMDAx
OThlNzY3YTAeFw0yMzA0MDgwMzIwMjlaFw0yNDA0MDYwMzI1MjlaMDMxMTAvBgNV
BAMTKDlENjk5MkQ3MTUwQUM3NjM5NzU1NzlGODc3Rjg3RjBGOEQ4OTZCMjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbDvsZOIIHiBBveAz+PHd5N36F
2BUfcAjMY1qtmrRTRSZ1uiqcM4lhogb2SMtXxRGT7R6dCqI2MPCspg2FiJOmdv1q
5f7kp1+RpbgfH/BXCoxaeCchhO3nVfmPChS0CXcGyr+Vm9ul9h6GWEl/NOJHbkmo
gBZnuteP1ipUMCxctt1Igr801IcLaBedNWQdO0hHlZja+1zkHkpJhu6d9+qNkVV3
wa+DwxStXLd8FcBEyTvHVTy1Dk5ls7I1v92kXvAF7VxsITgoFwqyFIagxaCpHMZa
GEYILCDA3mermAtmZhI8nlwEMTv9YHXnkxr0ySx8Iokk1IbnpTrVRj1pDW/pAgMB
AAGjggGhMIIBnTAdBgNVHQ4EFgQUnWmS1xUKx2OXVXn4d/h/D42JaygwHwYDVR0j
BBgwFoAUtX3Lqfx7DvHzzIChruIsABmOdnowDgYDVR0PAQH/BAQDAgeAMFkGA1Ud
HwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5jby9yZXBvL0hZU1AvNi9CNTdEQ0JB
OUZDN0IwRUYxRjNDQzgwQTFBRUUyMkMwMDE5OEU3NjdBLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvdFgzTHFmeDdEdkh6eklDaHJ1SXNBQm1PZG5vLmNlcjBEBggr
BgEFBQcBCwQ4MDYwNAYIKwYBBQUHMAuGKHJzeW5jOi8vcnBraS5jby9yZXBvL0hZ
U1AvNi9BUzE5OTY1Ni5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAqBggr
BgEFBQcBBwEB/wQbMBkwFwQCAAIwEQMHBCoS3UeO0AMGACoS3Uf3MA0GCSqGSIb3
DQEBCwUAA4IBAQACifGi1+cNKDSlQgb6KZp9rLGr09M/A+KCyMU2RlTmH9yrQFR9
nep6s/Ko2FGRy9GUzmuNoqk4PsOocQq3XlpdOj3t8u7NfyxXz8qAETHZTrK+6vrr
2Rpd3M8sg0vpEvzHB8Z2as5CFnfEN+8wcll2r/QzbbHgOIrTLJjG54nSy0YV2PnT
kYk9XVq1CwshDKUlKIwPpAtj6psqqYxKyiXUBH6h2hTbpN2wgNJzcDZ/g8vjYYfH
aNhPNhwkvqKWL8fEwZCHJCIwsoIZ0qg0BwoKLtrZHTj1VUCg6qkQgJiNaUI7I59H
PA6bkDNJlfoyLXvARu6CSS2faRnqKIfor9sW
-----END CERTIFICATE-----