Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS199962.roa
File:                     AS199962.roa (raw, json)
Hash identifier:          Lx5d34U+TGFtbqmRfblvP1OsfQFOwJLThuEavw0cJ5A=
Subject key identifier:   41:07:DD:23:AB:40:54:B7:53:63:45:CB:CF:2B:C7:3E:EE:89:20:CB
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       566D6774D1C4B946040916FF5A90C961237968A8
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS199962.roa
Signing time:             Sat 08 Apr 2023 03:25:21 +0000
ROA not before:           Sat 08 Apr 2023 03:20:21 +0000
ROA not after:            Sat 06 Apr 2024 03:25:21 +0000
asID:                     199962
IP address blocks:        2a12:dd47:dd00::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:6d:67:74:d1:c4:b9:46:04:09:16:ff:5a:90:c9:61:23:79:68:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:21 2023 GMT
            Not After : Apr  6 03:25:21 2024 GMT
        Subject: CN=4107DD23AB4054B7536345CBCF2BC73EEE8920CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c6:d4:f1:c9:7c:97:e9:10:e7:7f:ee:17:c6:
                    9c:df:08:71:9e:a4:75:78:4e:81:24:0d:2d:2b:3e:
                    84:66:f0:09:3b:a7:3e:9a:58:57:67:d1:03:14:19:
                    af:d3:f5:1a:cb:a3:cc:99:97:ce:f6:0b:99:6f:ed:
                    c8:cf:19:d7:59:1f:f7:e2:76:08:e3:1a:f0:ef:62:
                    96:f4:8f:f9:38:58:5a:24:73:94:42:32:7f:4a:be:
                    e4:4c:80:b3:06:e5:e7:23:fc:5d:7c:67:e1:ac:1c:
                    f7:0f:1f:1e:d7:05:77:b7:ad:6e:47:2b:58:06:a8:
                    c5:b7:15:de:2a:7a:2c:ab:8d:14:e8:bd:0a:42:d4:
                    0f:45:9c:51:2f:39:35:3f:24:56:13:e9:db:b7:35:
                    64:89:fb:e2:cc:a0:2f:7e:6b:38:8c:c5:42:65:f4:
                    4f:77:a2:4e:13:4b:70:eb:95:a6:a9:1f:60:cf:83:
                    3e:e7:ef:85:d8:fc:ba:d9:b1:f6:98:7e:f9:6d:0e:
                    d3:dd:ea:8f:a5:8c:6d:14:f9:f1:2a:d2:d1:ca:1e:
                    4d:de:82:97:39:85:80:a2:25:3a:8c:01:84:b9:0f:
                    ab:b8:6c:e8:b8:1d:5f:e1:3e:1a:0f:ab:11:16:8e:
                    42:14:f6:e0:42:d5:75:c1:29:10:f9:97:bd:07:0d:
                    40:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:07:DD:23:AB:40:54:B7:53:63:45:CB:CF:2B:C7:3E:EE:89:20:CB
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS199962.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:dd00::/40

    Signature Algorithm: sha256WithRSAEncryption
         04:13:cf:ef:5a:16:ca:a6:30:eb:8a:a7:0c:a4:66:2a:4b:76:
         e1:ad:64:84:52:b0:26:0d:1f:e2:0b:ea:0f:a7:71:e0:9c:72:
         bb:a9:86:d2:61:80:9b:71:fe:0e:e6:5d:62:fd:72:36:33:75:
         97:3b:3c:8a:07:54:ac:11:be:33:1e:e1:01:c8:09:21:55:75:
         6c:b0:44:0d:21:e2:a1:aa:7d:da:67:7b:c0:84:3a:b6:b0:7b:
         a4:c6:0c:0a:9f:8f:a6:f1:b0:cb:47:7f:11:d0:18:00:74:d0:
         80:75:98:9f:28:3d:0a:e4:62:e6:de:f7:4f:da:08:8d:01:9e:
         78:3f:f3:cd:42:01:8a:6e:5c:61:db:13:4d:5a:98:45:8f:59:
         e7:70:44:e7:80:01:92:1e:61:6c:fa:f1:17:c3:c5:56:4f:bb:
         6a:00:07:04:ae:46:e1:2a:d8:ad:08:87:4b:25:1d:67:41:84:
         24:3a:e4:39:89:00:20:0f:81:d1:21:58:37:70:a9:6e:e4:e4:
         9e:fe:d4:24:a6:67:c0:55:b4:97:d7:54:6e:63:36:a2:88:9e:
         2e:ff:10:b8:ca:fd:d0:d5:7b:81:b4:47:5b:de:c4:93:56:4f:
         3e:c4:42:f3:97:e3:e5:e9:7c:88:6c:02:65:e4:f2:e6:8a:81:
         04:85:fb:8a
-----BEGIN CERTIFICATE-----
MIIEjjCCA3agAwIBAgIUVm1ndNHEuUYECRb/WpDJYSN5aKgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjU3ZGNiYTlmYzdiMGVmMWYzY2M4MGExYWVlMjJjMDAx
OThlNzY3YTAeFw0yMzA0MDgwMzIwMjFaFw0yNDA0MDYwMzI1MjFaMDMxMTAvBgNV
BAMTKDQxMDdERDIzQUI0MDU0Qjc1MzYzNDVDQkNGMkJDNzNFRUU4OTIwQ0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzxtTxyXyX6RDnf+4XxpzfCHGe
pHV4ToEkDS0rPoRm8Ak7pz6aWFdn0QMUGa/T9RrLo8yZl872C5lv7cjPGddZH/fi
dgjjGvDvYpb0j/k4WFokc5RCMn9KvuRMgLMG5ecj/F18Z+GsHPcPHx7XBXe3rW5H
K1gGqMW3Fd4qeiyrjRTovQpC1A9FnFEvOTU/JFYT6du3NWSJ++LMoC9+aziMxUJl
9E93ok4TS3DrlaapH2DPgz7n74XY/LrZsfaYfvltDtPd6o+ljG0U+fEq0tHKHk3e
gpc5hYCiJTqMAYS5D6u4bOi4HV/hPhoPqxEWjkIU9uBC1XXBKRD5l70HDUB3AgMB
AAGjggGYMIIBlDAdBgNVHQ4EFgQUQQfdI6tAVLdTY0XLzyvHPu6JIMswHwYDVR0j
BBgwFoAUtX3Lqfx7DvHzzIChruIsABmOdnowDgYDVR0PAQH/BAQDAgeAMFkGA1Ud
HwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5jby9yZXBvL0hZU1AvNi9CNTdEQ0JB
OUZDN0IwRUYxRjNDQzgwQTFBRUUyMkMwMDE5OEU3NjdBLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvdFgzTHFmeDdEdkh6eklDaHJ1SXNBQm1PZG5vLmNlcjBEBggr
BgEFBQcBCwQ4MDYwNAYIKwYBBQUHMAuGKHJzeW5jOi8vcnBraS5jby9yZXBvL0hZ
U1AvNi9BUzE5OTk2Mi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr
BgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoS3UfdMA0GCSqGSIb3DQEBCwUAA4IB
AQAEE8/vWhbKpjDriqcMpGYqS3bhrWSEUrAmDR/iC+oPp3HgnHK7qYbSYYCbcf4O
5l1i/XI2M3WXOzyKB1SsEb4zHuEByAkhVXVssEQNIeKhqn3aZ3vAhDq2sHukxgwK
n4+m8bDLR38R0BgAdNCAdZifKD0K5GLm3vdP2giNAZ54P/PNQgGKblxh2xNNWphF
j1nncETngAGSHmFs+vEXw8VWT7tqAAcErkbhKtitCIdLJR1nQYQkOuQ5iQAgD4HR
IVg3cKlu5OSe/tQkpmfAVbSX11RuYzaiiJ4u/xC4yv3Q1XuBtEdb3sSTVk8+xELz
l+Pl6XyIbAJl5PLmioEEhfuK
-----END CERTIFICATE-----