Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS200226.roa
File:                     AS200226.roa (raw, json)
Hash identifier:          tEgMm5qIHDTy8Qj8UqlAuSA+uP+k3hZI2+fL68jdZpA=
Subject key identifier:   6A:95:23:A7:73:5A:91:7D:4D:CC:C4:9F:4A:CD:36:A0:2A:13:3D:E5
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       1677B4266213AF6A6EBD3B0C7E41140C2FDB61CF
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS200226.roa
Signing time:             Sat 08 Apr 2023 03:25:22 +0000
ROA not before:           Sat 08 Apr 2023 03:20:22 +0000
ROA not after:            Sat 06 Apr 2024 03:25:22 +0000
asID:                     200226
IP address blocks:        2a12:dd47:5e00::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:77:b4:26:62:13:af:6a:6e:bd:3b:0c:7e:41:14:0c:2f:db:61:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:22 2023 GMT
            Not After : Apr  6 03:25:22 2024 GMT
        Subject: CN=6A9523A7735A917D4DCCC49F4ACD36A02A133DE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1d:e2:a5:ed:41:94:95:4e:ed:d2:9d:e9:b0:
                    23:2a:3c:e0:80:67:1a:f8:f7:14:ec:ab:17:ec:53:
                    09:85:82:90:bb:c1:c6:41:30:e6:b3:70:cf:6b:8f:
                    18:18:31:fa:87:69:45:eb:fe:37:db:0b:df:25:f5:
                    33:e8:cf:c7:29:b2:54:1b:e0:36:01:bf:86:b1:1a:
                    ca:7a:c2:14:0c:51:c2:cd:55:82:84:55:93:c9:b1:
                    fd:0a:0d:3c:15:6b:2c:3d:9e:30:09:39:1f:ea:60:
                    17:ea:03:45:3a:11:67:55:01:f0:e8:5d:b8:13:0a:
                    f1:08:43:b7:58:f5:8a:68:8c:fb:59:20:48:dc:b6:
                    b6:22:fd:66:c0:10:8c:81:7c:92:d8:3a:44:bf:24:
                    50:e7:51:f0:d5:71:d7:dc:12:fb:e4:fb:a4:9d:bd:
                    e1:e0:c9:07:de:2a:c6:63:dd:32:1b:8c:58:88:4c:
                    d1:59:cc:b2:ba:cc:c8:e5:29:6a:f8:31:9c:93:a3:
                    4f:88:68:b6:de:2f:05:dd:67:e9:25:f6:65:33:4d:
                    ce:45:d5:3b:07:71:21:aa:24:e6:f4:4d:6c:f3:ff:
                    4f:72:43:c1:d3:d7:e3:33:0f:dc:30:07:24:58:5b:
                    a9:8e:a2:59:b9:01:96:6f:db:7f:5f:f5:63:fd:bc:
                    79:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:95:23:A7:73:5A:91:7D:4D:CC:C4:9F:4A:CD:36:A0:2A:13:3D:E5
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS200226.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:5e00::/44

    Signature Algorithm: sha256WithRSAEncryption
         60:c8:9f:f5:5e:e3:e1:10:66:2a:ac:0e:9f:d7:2a:e3:11:5d:
         b4:69:6b:9a:66:2a:86:6d:cb:3e:8b:cb:7c:91:eb:d1:c9:2e:
         f3:52:cf:63:e3:4e:0f:36:59:39:a5:8e:a0:7a:4c:58:37:85:
         4a:b6:b1:f5:44:84:a4:f5:28:16:5f:4f:fb:a9:71:a5:89:44:
         c0:e5:43:7a:a6:0a:f6:39:92:88:40:f5:41:66:d2:fa:21:98:
         69:e5:bf:73:a8:d0:93:b7:00:26:20:6b:b6:30:03:d6:c2:18:
         4c:a1:32:45:22:00:84:7b:20:17:8d:de:4e:03:f3:d6:db:82:
         c7:66:41:1d:79:fa:cd:d2:2e:9f:10:7c:8a:cf:ca:40:76:71:
         95:80:6d:5b:73:c8:bc:69:66:28:db:80:07:98:a4:82:08:99:
         d6:f8:f1:53:b1:f4:af:1f:87:34:5f:63:f1:41:7b:4d:d1:96:
         c6:5f:da:51:03:e5:6a:09:cf:cf:88:d0:8a:45:5b:ae:9b:d5:
         d0:53:17:13:42:3e:ea:28:29:51:07:1e:03:04:0f:07:83:47:
         c2:76:d5:4b:15:17:88:2a:17:c9:21:01:c6:92:c7:a4:2b:e9:
         48:9a:01:4e:30:fa:1d:56:c7:a7:ba:c1:47:e1:56:96:49:c8:
         fd:99:27:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----