Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS199683.roa
File:                     AS199683.roa (raw, json)
Hash identifier:          uSoIWyKjS10u6IgRLJ9dFOi8jeJKPGm5slWxkvSzRh8=
Subject key identifier:   11:E0:C9:1D:CF:2A:C7:25:3B:1F:6D:18:38:5D:D4:13:F5:92:D8:FF
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       5251A9D1CAC37558619A8109E8BFF2470C1B8B74
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS199683.roa
Signing time:             Sat 08 Apr 2023 03:25:44 +0000
ROA not before:           Sat 08 Apr 2023 03:20:44 +0000
ROA not after:            Sat 06 Apr 2024 03:25:44 +0000
asID:                     199683
IP address blocks:        2a12:dd47:8ef0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:51:a9:d1:ca:c3:75:58:61:9a:81:09:e8:bf:f2:47:0c:1b:8b:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:44 2023 GMT
            Not After : Apr  6 03:25:44 2024 GMT
        Subject: CN=11E0C91DCF2AC7253B1F6D18385DD413F592D8FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a9:d5:bb:59:de:53:59:e0:45:75:e5:b0:6e:
                    d2:fb:ba:2b:61:89:20:9e:9e:b6:1a:28:8b:d0:44:
                    61:4a:4b:b3:99:55:bd:a9:20:14:fd:74:72:b9:ce:
                    9f:8a:17:9f:16:f1:36:ff:93:af:5c:f6:88:98:8d:
                    7d:72:d7:cf:a9:6e:cd:d0:dc:c7:ba:fa:82:38:b8:
                    63:8a:cf:fe:30:2f:83:2d:bc:ee:15:6a:34:e3:55:
                    9b:a6:9c:b6:d3:88:1d:d6:e2:2d:f1:3a:37:04:7a:
                    15:29:a5:02:e1:a3:fb:75:a3:a4:aa:9a:99:1d:e8:
                    e9:2e:9c:a3:e4:16:cb:0d:1c:55:ff:d1:d0:5f:0d:
                    0b:24:14:2d:7a:01:25:44:69:e0:51:d2:de:f4:eb:
                    95:c7:f9:12:43:3a:d6:20:1a:26:19:03:14:97:4d:
                    34:46:d9:06:93:59:b2:c2:00:4b:6c:36:81:00:02:
                    13:ae:f6:1b:12:1d:46:b5:a5:57:d3:4c:b0:16:71:
                    82:24:0b:aa:58:40:12:c6:09:7d:8b:66:5c:f6:ad:
                    76:07:cf:a0:7a:2b:97:28:6d:c7:4c:55:41:1c:0b:
                    57:5e:8c:56:df:0d:fa:df:49:e1:74:0e:61:13:ef:
                    70:61:02:71:67:2d:5d:50:f1:b3:44:6a:76:57:ea:
                    57:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:E0:C9:1D:CF:2A:C7:25:3B:1F:6D:18:38:5D:D4:13:F5:92:D8:FF
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS199683.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8ef0::/44

    Signature Algorithm: sha256WithRSAEncryption
         3d:18:d9:9b:29:e0:1a:11:03:72:96:fc:69:02:57:37:5a:c1:
         a4:fe:da:89:30:7c:35:f5:48:52:0f:e7:5f:10:95:21:23:33:
         df:46:ce:a6:ba:9a:02:d7:f2:99:9d:a1:d6:8e:cf:d3:33:59:
         11:ed:b0:f6:1b:b2:64:65:e5:4d:bb:e5:98:e7:f7:e7:72:1a:
         68:f2:70:c5:e0:52:a5:11:c8:fc:91:f7:e2:57:46:40:28:f4:
         d2:f5:38:bc:6a:5c:5a:31:6a:a9:b9:25:8a:eb:52:24:7b:b3:
         6d:6d:6e:38:c6:75:5e:35:d5:1f:6c:a6:cb:48:28:71:45:b2:
         e4:b7:f0:6c:b0:9f:ef:84:78:02:86:ac:4f:5b:b9:8a:0c:ff:
         65:56:83:05:e1:65:0b:12:ad:a8:39:01:ae:0f:f4:25:6d:90:
         71:82:87:dd:80:b4:2e:22:bb:24:38:ed:e7:8d:07:47:7b:3d:
         74:80:6d:4e:7e:87:64:87:0a:5b:d9:15:7e:d4:7e:4d:80:f0:
         50:d2:2f:ea:08:82:25:1e:fe:7d:20:bb:03:90:24:5d:97:0e:
         0e:a9:09:21:80:4f:e5:12:30:03:7a:d8:44:92:e6:ed:15:18:
         ef:d2:00:f0:63:b9:b8:ca:65:3c:1a:c3:7e:0b:cf:19:7d:4c:
         04:2d:64:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----