Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS200529.roa
File:                     AS200529.roa (raw, json)
Hash identifier:          IRYe6FTM/ZLnMirjCduIowDWNji6b4XNW9ekAbsApNo=
Subject key identifier:   96:07:FD:C3:E2:F9:62:AF:32:FF:88:09:0B:69:AC:E0:1E:38:51:FC
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       019672F9A541961673B2D121CD381E45BFE84283
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS200529.roa
Signing time:             Sat 08 Apr 2023 03:25:39 +0000
ROA not before:           Sat 08 Apr 2023 03:20:39 +0000
ROA not after:            Sat 06 Apr 2024 03:25:39 +0000
asID:                     200529
IP address blocks:        2a12:dd47:d500::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:72:f9:a5:41:96:16:73:b2:d1:21:cd:38:1e:45:bf:e8:42:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:39 2023 GMT
            Not After : Apr  6 03:25:39 2024 GMT
        Subject: CN=9607FDC3E2F962AF32FF88090B69ACE01E3851FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:22:ac:c3:79:62:17:76:47:8c:b4:2c:2b:c5:
                    a3:75:87:da:55:5e:69:6b:8c:2f:98:0c:a2:a4:f9:
                    e7:32:66:e5:91:4b:b8:5a:96:25:18:06:f7:87:27:
                    ba:36:ea:3f:b0:a1:7d:76:18:e1:c6:b0:07:41:79:
                    cc:da:9f:7d:ed:41:f2:49:25:61:8d:cb:fa:81:91:
                    da:e7:e6:b0:77:09:0c:c6:36:bf:37:b2:d1:cf:86:
                    ee:7d:d6:f1:fa:d6:a4:80:7b:9f:7f:ee:58:63:24:
                    0b:5e:13:88:08:51:87:fd:91:b1:76:f4:e4:f6:cb:
                    c5:f6:10:1a:b9:3e:ea:14:23:6e:a8:b0:a2:4c:06:
                    46:94:e1:8b:ff:b8:0f:5c:d7:f1:6f:5f:19:ec:f3:
                    88:15:98:18:5d:71:3d:cb:d5:5b:ad:c4:3b:9c:ab:
                    4a:d7:ee:9e:d1:cb:d7:f1:78:24:75:08:f1:dc:a6:
                    2d:5a:f7:36:7f:b0:89:8f:29:0f:da:01:ed:5a:f6:
                    6c:57:c6:70:b2:65:94:cb:fc:f5:fc:8e:ba:dd:b7:
                    c7:f9:df:d6:96:ef:91:eb:1b:48:e6:8a:6c:cf:3b:
                    b5:6b:5a:a2:a3:02:06:04:c0:5d:bd:b2:9e:56:6f:
                    39:ef:01:43:1e:7b:d9:3b:a4:32:f2:12:fe:73:d9:
                    ae:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:07:FD:C3:E2:F9:62:AF:32:FF:88:09:0B:69:AC:E0:1E:38:51:FC
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS200529.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:d500::/40

    Signature Algorithm: sha256WithRSAEncryption
         a1:1c:11:f5:a2:8f:ad:16:9c:d1:48:80:d2:f5:4e:9b:7b:d2:
         05:a0:00:bd:07:13:84:b6:63:bc:dc:f6:e3:b3:46:6c:36:b9:
         64:e6:8a:a2:a8:ef:99:6f:03:e7:b1:66:4a:e5:a0:b9:bb:31:
         09:9a:54:cb:c7:cd:a1:17:53:56:ab:92:6b:fc:df:7b:3b:f6:
         e9:44:0f:b0:2d:c3:69:ae:52:9d:41:45:8a:46:9d:a5:94:55:
         c9:bf:06:32:45:9c:1a:e1:8d:07:0b:14:61:97:f3:f3:39:57:
         c2:db:fb:27:30:93:1a:c0:78:cb:c1:8c:1f:3f:44:3a:da:45:
         fd:5b:14:4e:48:89:fb:31:6f:b9:55:a6:75:e6:d7:a0:d1:45:
         d2:a6:30:8b:df:bb:b1:bf:21:2f:e1:d7:28:c2:7a:b2:dc:30:
         79:bf:c7:25:90:13:f3:fe:9b:95:95:92:78:b2:cd:fd:fe:67:
         05:29:15:85:a9:72:d8:5b:1a:97:ed:22:8f:cc:d3:8a:f3:2c:
         5f:70:28:f1:d0:a3:d4:9b:42:2d:c5:e4:b1:50:eb:3c:f2:01:
         06:82:79:3b:dc:6b:fd:b2:ae:92:14:e6:c9:98:a3:24:6e:93:
         d9:89:89:99:56:e9:0d:df:ab:4e:4f:3c:ca:e9:fe:3a:23:64:
         41:c4:16:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----