Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS200394.roa
File:                     AS200394.roa (raw, json)
Hash identifier:          JZ95qJ8p6l3AhpYFH0fkODtNIuiywfuv24iNaWWFCsI=
Subject key identifier:   D6:E1:04:B5:0B:9E:6F:BF:B5:BF:CA:0F:EE:93:EA:4E:47:53:A0:B6
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       6A915680F6607DFAA3E246A495D2894FB3C5944D
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS200394.roa
Signing time:             Sat 08 Apr 2023 03:25:35 +0000
ROA not before:           Sat 08 Apr 2023 03:20:35 +0000
ROA not after:            Sat 06 Apr 2024 03:25:35 +0000
asID:                     200394
IP address blocks:        2a12:dd47:8eb0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:91:56:80:f6:60:7d:fa:a3:e2:46:a4:95:d2:89:4f:b3:c5:94:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:35 2023 GMT
            Not After : Apr  6 03:25:35 2024 GMT
        Subject: CN=D6E104B50B9E6FBFB5BFCA0FEE93EA4E4753A0B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:2c:de:1d:f6:a6:57:7f:53:34:35:99:78:20:
                    e6:fc:af:80:6d:9e:42:f9:41:21:80:38:eb:4f:70:
                    97:ef:73:40:13:7f:a0:14:47:c3:5e:2a:e9:b7:93:
                    b7:a9:3a:d9:5a:01:bd:ef:d7:46:d4:58:a6:c3:ee:
                    58:97:a7:ed:82:26:54:89:bc:03:02:1e:fd:84:c1:
                    37:0d:f3:ab:42:25:ac:a9:11:b2:71:f1:3c:e2:6e:
                    62:bb:7f:7b:7e:c7:cf:c9:08:89:59:26:c1:f8:a1:
                    3b:9c:7f:75:c9:41:1a:6e:e5:a7:d0:59:41:ba:d3:
                    27:f8:4f:ac:e6:54:54:fc:a7:55:41:ff:77:1d:8f:
                    7b:2a:97:e2:1e:28:fe:b0:aa:a4:70:d2:5d:6e:b6:
                    94:9f:c6:ae:a2:53:72:0c:ff:15:b6:58:8e:02:36:
                    d2:91:7f:c1:20:61:a2:e8:b5:c2:a6:31:93:49:39:
                    b8:0b:27:0a:65:32:77:db:a8:12:f6:b4:d5:08:30:
                    d3:04:31:99:0c:83:ba:e9:d0:13:c1:5f:4a:ac:da:
                    20:bb:c5:17:95:88:00:6f:bc:a6:68:73:7f:af:de:
                    64:c0:9d:41:31:5f:7d:44:68:45:3b:ab:e2:15:dc:
                    c2:ae:4e:d1:7c:ab:54:76:ba:5a:aa:44:ea:e2:8c:
                    c1:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:E1:04:B5:0B:9E:6F:BF:B5:BF:CA:0F:EE:93:EA:4E:47:53:A0:B6
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS200394.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8eb0::/44

    Signature Algorithm: sha256WithRSAEncryption
         12:78:f3:bb:de:80:60:fb:08:1e:7e:9a:46:3d:c5:ed:17:ed:
         6d:7c:01:80:e7:1a:9b:d4:3d:4e:46:82:9e:24:52:a4:ef:6a:
         b3:7f:bc:cc:d6:45:67:d6:48:e3:59:a2:d5:b0:26:52:17:d5:
         7e:0b:93:5d:54:3d:64:6e:3b:37:ff:e1:34:d6:cd:69:bc:c6:
         e9:ab:86:00:b5:7b:f6:eb:70:9a:c2:06:42:a1:0f:b2:54:9c:
         4f:5a:3e:a7:1e:97:fe:a1:5a:86:a8:52:94:55:6e:76:26:ae:
         21:da:1f:0d:2e:71:e5:39:17:4d:21:8b:96:da:85:b1:0c:61:
         0c:ef:f2:6c:49:46:4f:70:98:0f:31:41:4c:87:86:c6:22:bf:
         fe:17:d1:df:42:cf:9b:c0:9d:a8:55:04:d8:3f:a2:28:71:cb:
         4c:a5:f5:a4:b5:35:74:e0:4c:3f:b1:5a:d6:d7:3c:eb:e2:b1:
         f9:a6:a4:5e:54:0e:e8:33:95:e7:5c:a6:8c:8c:cb:10:b6:f5:
         af:85:75:e4:b7:b6:8f:d7:b4:c8:04:47:06:ea:af:0f:ba:f0:
         8b:8c:4b:bf:8f:84:4f:8d:4a:44:b3:24:90:7a:98:fd:5d:f0:
         c8:22:59:35:e6:a9:4a:30:7b:0d:eb:a1:08:49:a9:ff:1f:1f:
         68:d4:3a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----