Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS200506.roa
File:                     AS200506.roa (raw, json)
Hash identifier:          KWAsw7xcsFNYHRFAaXu6ZFwPoIJSmYncovwDZWv6FN0=
Subject key identifier:   34:FD:1D:BE:50:A2:DF:AB:77:A3:5C:D7:E9:34:FC:3C:AF:9F:2E:17
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       226C09E13B2EDB509FDF5735BAC31A0DA06AB7A7
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS200506.roa
Signing time:             Sat 08 Apr 2023 03:25:25 +0000
ROA not before:           Sat 08 Apr 2023 03:20:25 +0000
ROA not after:            Sat 06 Apr 2024 03:25:25 +0000
asID:                     200506
IP address blocks:        2a12:dd47:d400::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:6c:09:e1:3b:2e:db:50:9f:df:57:35:ba:c3:1a:0d:a0:6a:b7:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:25 2023 GMT
            Not After : Apr  6 03:25:25 2024 GMT
        Subject: CN=34FD1DBE50A2DFAB77A35CD7E934FC3CAF9F2E17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:44:e0:93:43:25:ea:6a:f0:e2:9e:c1:55:ac:
                    a3:74:87:3b:dc:cb:1c:b7:7b:06:92:91:35:f3:08:
                    dd:60:f5:67:a7:6d:f0:a9:a9:c6:e8:36:b5:38:53:
                    c1:25:7f:39:5a:bf:9e:93:91:54:17:3d:41:51:8f:
                    68:cd:92:4d:ba:62:a7:fa:50:1f:89:6a:42:4b:67:
                    8c:73:fa:ff:a3:1d:de:5b:12:26:bc:4a:71:9b:3d:
                    94:5a:7d:58:e4:d1:7e:3b:c3:97:16:72:d1:48:85:
                    f7:cd:0b:19:26:ab:ef:4c:28:35:90:32:96:3a:53:
                    cc:6c:42:e9:9d:14:b4:dd:89:df:a0:e8:63:02:bf:
                    e9:4c:8f:5e:88:f0:6a:1e:ea:eb:ba:19:17:e4:14:
                    89:30:6d:dc:e7:a0:1d:3d:c8:a4:07:9c:c2:4f:da:
                    64:1b:c1:9e:cf:d4:90:aa:f5:00:96:35:32:6a:59:
                    5e:fb:5a:7d:17:c6:e2:8b:13:e6:4e:23:b3:40:19:
                    fc:af:79:59:20:cb:f4:5c:a4:6e:94:4f:73:e0:07:
                    8c:36:bb:e6:b1:b2:1c:42:66:7d:83:7c:0d:15:8a:
                    27:11:0b:fe:c1:29:5a:37:e7:06:06:8f:96:43:34:
                    f7:de:89:01:8f:7d:3c:1c:bc:8a:1d:81:63:b0:a1:
                    13:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:FD:1D:BE:50:A2:DF:AB:77:A3:5C:D7:E9:34:FC:3C:AF:9F:2E:17
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS200506.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:d400::/40

    Signature Algorithm: sha256WithRSAEncryption
         6b:06:5d:41:64:72:2c:a3:09:18:eb:a1:f6:31:72:0c:13:16:
         35:cf:b4:97:94:b3:3e:4b:ac:e9:dd:42:47:b3:41:e3:3e:20:
         07:76:e7:32:69:d9:38:61:89:c7:42:77:34:8f:9c:0b:fe:34:
         79:4f:88:6f:10:70:87:f3:5f:46:56:a3:a9:c5:24:5b:df:8d:
         dc:b7:c4:81:ca:54:9e:5f:19:46:bb:f8:bb:17:95:5a:7a:27:
         bf:1b:86:b2:39:75:03:a4:03:cc:5e:49:3a:8e:8d:2f:93:95:
         39:af:d6:0f:c2:a0:e2:fa:da:5e:17:60:56:d7:00:81:ae:dd:
         21:77:11:d1:cf:41:7d:e4:8a:71:95:88:4e:40:a9:89:e7:96:
         e0:aa:57:62:31:9c:99:67:e1:de:63:91:db:c7:c0:5c:ab:1f:
         cb:29:a2:06:1a:d4:6a:87:91:a6:05:b5:7c:98:78:c0:f3:44:
         de:09:35:66:46:b0:77:7e:ca:90:fa:aa:e7:bb:56:02:21:e9:
         4b:15:fa:0f:67:8d:2a:2a:f2:dd:43:12:6e:16:a9:4f:3b:ca:
         44:ab:c4:84:68:6a:40:35:00:55:e3:8e:0c:b6:25:0b:c5:16:
         20:fd:48:8e:3f:c1:e0:cb:98:cc:4d:61:ab:b3:5e:95:01:50:
         45:14:8e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----