Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS199693.roa
File:                     AS199693.roa (raw, json)
Hash identifier:          hi7WdIiM80MckVOayy6gAgffoyMQCEYJE2SPDhF5SIA=
Subject key identifier:   B0:F2:66:29:07:A6:AC:A6:F2:54:FB:91:FC:82:B4:EF:48:88:94:CC
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       5F30838D66F6B006C073C3DB8F7A7C2F67EB37D4
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS199693.roa
Signing time:             Sat 08 Apr 2023 03:25:30 +0000
ROA not before:           Sat 08 Apr 2023 03:20:30 +0000
ROA not after:            Sat 06 Apr 2024 03:25:30 +0000
asID:                     199693
IP address blocks:        2a12:dd47:da00::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:30:83:8d:66:f6:b0:06:c0:73:c3:db:8f:7a:7c:2f:67:eb:37:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:30 2023 GMT
            Not After : Apr  6 03:25:30 2024 GMT
        Subject: CN=B0F2662907A6ACA6F254FB91FC82B4EF488894CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a4:26:c8:c5:b9:56:82:33:ee:fd:b0:ed:d6:
                    e8:aa:ee:25:35:30:e1:7e:ac:76:35:35:7b:e7:e7:
                    99:be:0b:53:ca:75:f0:e7:3f:6e:ff:33:54:24:2b:
                    d4:71:e8:cf:8a:14:1a:0b:7f:65:7f:fc:6a:04:af:
                    d3:c6:49:99:b2:7c:27:8a:51:ce:d8:a7:82:ab:dd:
                    32:03:89:d1:48:7f:ad:69:26:53:c8:7a:2b:5b:64:
                    5b:b2:f6:d8:0a:7b:f0:53:b5:4e:ce:a5:74:cb:4f:
                    56:2f:b5:d2:82:05:a0:d5:01:81:06:67:45:1d:25:
                    eb:84:5e:0a:56:08:c5:b8:1a:a0:7c:8e:5e:b2:32:
                    bb:eb:93:c5:a7:68:94:c0:3a:f7:eb:db:bd:f4:39:
                    e7:1c:66:44:d0:2a:64:c1:38:0d:35:1d:a0:78:f2:
                    32:ad:3c:e4:09:a8:7c:78:4e:a9:69:14:7f:54:87:
                    a0:a9:9f:09:e8:f0:cd:1b:ef:61:d8:9f:17:d4:a4:
                    12:31:ad:39:8d:da:e7:3f:b6:9c:19:bc:1f:fd:1c:
                    cb:15:c3:e5:4e:d1:7a:65:04:db:d5:18:95:bc:e6:
                    84:7f:68:a2:8e:ec:b6:87:9d:eb:fa:62:86:29:36:
                    ac:c6:49:d3:22:97:b9:fc:62:ab:00:bd:b9:4d:02:
                    9b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:F2:66:29:07:A6:AC:A6:F2:54:FB:91:FC:82:B4:EF:48:88:94:CC
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS199693.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:da00::/40

    Signature Algorithm: sha256WithRSAEncryption
         a8:87:9c:df:ee:19:fd:f6:81:87:ad:0d:e1:7b:fb:2b:e7:40:
         6f:e7:21:3e:d3:ed:5e:55:90:eb:47:4a:a9:81:6a:01:01:f2:
         38:07:72:d6:71:75:f8:c9:87:4e:80:99:4f:a3:6c:da:95:24:
         00:48:dd:95:da:ae:3d:c0:94:14:a1:b3:25:b6:c5:93:9f:48:
         73:f4:e7:d0:7a:2d:dd:b1:b6:93:64:a7:f1:48:70:ae:61:a0:
         36:ea:61:9e:05:74:6c:e0:27:54:2b:a3:93:6a:8a:7b:fe:64:
         61:56:94:ed:38:6a:56:06:41:4c:3a:0b:7d:01:1b:5c:92:a5:
         8e:2b:7d:36:a6:92:95:36:db:47:0c:ae:6b:40:f5:50:6a:de:
         5d:c1:ab:94:6a:d5:19:fe:59:7f:16:e4:db:ac:25:2f:d2:48:
         5c:ba:37:c4:94:63:8f:9e:ee:03:c1:a5:b3:8e:97:fc:d7:5c:
         d8:37:d4:52:2d:8a:f2:e5:48:c0:19:0e:40:07:99:92:fd:a2:
         0d:52:38:8d:60:77:27:ab:c4:fe:46:af:bd:fd:1c:4d:52:c5:
         c0:02:ad:e6:59:24:42:3f:a1:e4:80:ab:98:18:41:f3:8b:17:
         48:71:20:60:01:ea:d0:9a:12:c0:4c:a4:e2:e6:8b:52:5a:56:
         67:d7:8c:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----