Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS199676.roa
File:                     AS199676.roa (raw, json)
Hash identifier:          ajIajpk1iv6yifGDq+MjeC+OYxeyKBK7CpxYhhXRZOY=
Subject key identifier:   B6:24:C0:39:BC:E2:3D:85:3C:55:AF:30:92:1D:D1:95:8A:19:1D:39
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       78C3B86C3420F7F19EE3E266C9EF0BA812A8C87A
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS199676.roa
Signing time:             Sat 08 Apr 2023 03:25:35 +0000
ROA not before:           Sat 08 Apr 2023 03:20:35 +0000
ROA not after:            Sat 06 Apr 2024 03:25:35 +0000
asID:                     199676
IP address blocks:        2a12:dd47:80e7::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:c3:b8:6c:34:20:f7:f1:9e:e3:e2:66:c9:ef:0b:a8:12:a8:c8:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:35 2023 GMT
            Not After : Apr  6 03:25:35 2024 GMT
        Subject: CN=B624C039BCE23D853C55AF30921DD1958A191D39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6e:05:8d:8d:a6:a9:e2:94:54:ce:1d:bc:be:
                    32:fc:34:6c:fd:d2:f0:47:0b:71:c5:76:e2:a7:68:
                    4b:de:ff:59:d4:2f:80:44:08:a2:f4:f5:42:db:f7:
                    da:f9:ba:c2:39:ad:c5:5d:18:50:5f:10:e8:b4:75:
                    29:50:02:64:41:d9:96:55:5d:98:43:db:ee:cf:e2:
                    e1:df:d2:88:5e:93:ed:56:78:73:ce:32:47:d4:8a:
                    bd:f0:27:c9:37:82:93:90:e1:17:f1:07:f3:bb:f3:
                    a1:28:e3:d8:43:d1:b2:40:d9:22:30:8d:ba:52:93:
                    b5:b5:90:d3:68:f9:b4:ce:3b:f0:3e:44:a8:24:82:
                    3e:ee:04:1c:e2:ff:aa:96:de:9b:80:53:af:4a:e1:
                    a9:3d:11:1e:0e:94:02:e7:bb:c3:63:7e:77:68:c8:
                    5f:a0:d7:da:6c:62:24:63:75:92:40:a3:ad:cf:da:
                    35:c2:c4:22:e8:36:5d:e7:43:3e:13:9f:8c:46:a0:
                    05:69:76:20:3c:07:9e:aa:a5:da:c6:e5:15:af:1d:
                    b0:f6:c5:17:6f:73:9e:20:57:73:da:96:dc:f0:89:
                    83:c0:f3:cc:77:bf:9b:ad:b7:a9:a3:18:34:67:8e:
                    fc:cf:48:08:3c:0c:22:ec:dc:63:13:6d:84:36:28:
                    4e:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:24:C0:39:BC:E2:3D:85:3C:55:AF:30:92:1D:D1:95:8A:19:1D:39
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS199676.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:80e7::/48

    Signature Algorithm: sha256WithRSAEncryption
         2d:58:71:cc:a6:88:c6:aa:17:fb:d8:a2:f7:cf:24:b7:b0:61:
         ed:b3:5c:bd:5c:9a:0f:a9:f2:96:1a:63:eb:f2:dd:a0:17:bf:
         36:ee:2e:a8:c9:41:56:c6:ad:5a:81:22:9f:25:ea:e5:f4:c7:
         ac:4a:8c:46:b7:70:0f:95:0b:61:4c:52:29:b3:36:5d:4b:09:
         df:46:76:4a:14:76:08:3f:aa:55:5d:ea:52:92:86:df:80:bf:
         ee:c0:e4:dc:28:61:53:32:40:a0:ff:ab:9e:1f:f5:e6:9e:8b:
         94:72:ba:4b:de:03:3e:73:83:26:7b:95:c8:35:c7:42:ba:30:
         76:aa:e5:4b:56:c1:7d:a4:88:e5:9a:c7:24:af:85:b7:a4:12:
         47:0a:b7:01:3d:6c:f3:c4:eb:63:ee:21:cd:9e:d3:8c:ad:52:
         79:cf:36:3e:c2:6b:df:06:52:c0:30:35:e8:5d:ee:a6:59:72:
         62:7d:ad:68:d2:1b:98:72:ca:dd:0c:d8:3a:55:e8:49:27:1b:
         76:24:46:80:93:37:93:76:3f:9d:b4:c3:98:b2:3b:5a:b3:a6:
         49:44:6e:2e:98:fb:65:d1:4f:bb:10:59:65:6b:7d:31:9d:91:
         c8:6d:dc:e6:6b:98:76:73:4b:4f:14:3b:5c:f8:d5:ad:98:75:
         eb:dd:b3:9f
-----BEGIN CERTIFICATE-----
MIIEjzCCA3egAwIBAgIUeMO4bDQg9/Ge4+Jmye8LqBKoyHowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjU3ZGNiYTlmYzdiMGVmMWYzY2M4MGExYWVlMjJjMDAx
OThlNzY3YTAeFw0yMzA0MDgwMzIwMzVaFw0yNDA0MDYwMzI1MzVaMDMxMTAvBgNV
BAMTKEI2MjRDMDM5QkNFMjNEODUzQzU1QUYzMDkyMUREMTk1OEExOTFEMzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHbgWNjaap4pRUzh28vjL8NGz9
0vBHC3HFduKnaEve/1nUL4BECKL09ULb99r5usI5rcVdGFBfEOi0dSlQAmRB2ZZV
XZhD2+7P4uHf0ohek+1WeHPOMkfUir3wJ8k3gpOQ4RfxB/O786Eo49hD0bJA2SIw
jbpSk7W1kNNo+bTOO/A+RKgkgj7uBBzi/6qW3puAU69K4ak9ER4OlALnu8Njfndo
yF+g19psYiRjdZJAo63P2jXCxCLoNl3nQz4Tn4xGoAVpdiA8B56qpdrG5RWvHbD2
xRdvc54gV3PaltzwiYPA88x3v5utt6mjGDRnjvzPSAg8DCLs3GMTbYQ2KE4VAgMB
AAGjggGZMIIBlTAdBgNVHQ4EFgQUtiTAObziPYU8Va8wkh3RlYoZHTkwHwYDVR0j
BBgwFoAUtX3Lqfx7DvHzzIChruIsABmOdnowDgYDVR0PAQH/BAQDAgeAMFkGA1Ud
HwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5jby9yZXBvL0hZU1AvNi9CNTdEQ0JB
OUZDN0IwRUYxRjNDQzgwQTFBRUUyMkMwMDE5OEU3NjdBLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvdFgzTHFmeDdEdkh6eklDaHJ1SXNBQm1PZG5vLmNlcjBEBggr
BgEFBQcBCwQ4MDYwNAYIKwYBBQUHMAuGKHJzeW5jOi8vcnBraS5jby9yZXBvL0hZ
U1AvNi9BUzE5OTY3Ni5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoS3UeA5zANBgkqhkiG9w0BAQsFAAOC
AQEALVhxzKaIxqoX+9ii988kt7Bh7bNcvVyaD6nylhpj6/LdoBe/Nu4uqMlBVsat
WoEinyXq5fTHrEqMRrdwD5ULYUxSKbM2XUsJ30Z2ShR2CD+qVV3qUpKG34C/7sDk
3ChhUzJAoP+rnh/15p6LlHK6S94DPnODJnuVyDXHQrowdqrlS1bBfaSI5ZrHJK+F
t6QSRwq3AT1s88TrY+4hzZ7TjK1Sec82PsJr3wZSwDA16F3upllyYn2taNIbmHLK
3QzYOlXoSScbdiRGgJM3k3Y/nbTDmLI7WrOmSURuLpj7ZdFPuxBZZWt9MZ2RyG3c
5muYdnNLTxQ7XPjVrZh1692znw==
-----END CERTIFICATE-----