Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS200879.roa
File:                     AS200879.roa (raw, json)
Hash identifier:          IQy/0/QAVAeqm/9i/RM+ofwmEUEOG7WbZPyKCqkaTsE=
Subject key identifier:   C7:14:17:34:97:DD:48:18:E4:5A:1B:8E:DB:EF:C3:34:C1:3D:14:1F
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       1E143266B4A76E40825178DE67F29D3985A76E9E
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS200879.roa
Signing time:             Sat 08 Apr 2023 03:25:34 +0000
ROA not before:           Sat 08 Apr 2023 03:20:34 +0000
ROA not after:            Sat 06 Apr 2024 03:25:34 +0000
asID:                     200879
IP address blocks:        2a12:dd47:df00::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:14:32:66:b4:a7:6e:40:82:51:78:de:67:f2:9d:39:85:a7:6e:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:34 2023 GMT
            Not After : Apr  6 03:25:34 2024 GMT
        Subject: CN=C714173497DD4818E45A1B8EDBEFC334C13D141F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e6:2d:cb:66:b5:93:48:f7:33:da:cf:7a:eb:
                    32:a9:0e:6d:86:d1:4c:9f:cf:5e:ee:10:a4:a8:4c:
                    a4:4e:64:21:f7:2b:43:43:08:c0:55:7a:66:18:62:
                    57:b9:fe:4c:ac:36:ac:b8:72:77:20:12:4a:05:8d:
                    f3:b3:46:ce:6d:8c:2b:d9:4b:95:fe:a3:d8:21:f2:
                    9d:36:82:e7:66:00:35:97:66:07:81:be:32:ed:2d:
                    e8:de:73:c7:aa:91:dd:20:d2:e2:59:44:2a:d4:92:
                    b4:01:35:20:df:c4:c5:03:fe:c3:06:c7:79:07:4e:
                    49:88:b2:e4:fd:01:9a:cb:9c:98:4e:a9:26:74:91:
                    5a:67:89:01:b9:d5:bc:8e:9f:c0:9d:10:b9:65:fd:
                    50:19:cf:3c:32:ac:d9:12:6a:8d:5f:0d:f3:46:5d:
                    7c:78:96:f8:e2:b2:66:3a:b5:21:d2:8d:05:48:c5:
                    6c:cc:52:6d:df:3f:82:d9:9a:57:36:03:10:8c:04:
                    06:bb:ab:ef:a4:99:4f:5c:63:90:be:8e:14:90:6f:
                    ec:94:f3:03:5e:34:28:3b:c4:bf:e9:61:ed:43:51:
                    77:94:98:34:d9:fe:93:c5:cf:5f:5e:40:04:b9:3f:
                    78:20:88:41:74:72:9e:f7:b9:a8:56:9f:88:9c:24:
                    23:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:14:17:34:97:DD:48:18:E4:5A:1B:8E:DB:EF:C3:34:C1:3D:14:1F
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS200879.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:df00::/44

    Signature Algorithm: sha256WithRSAEncryption
         6a:e3:fa:19:84:52:aa:2e:3e:de:c3:94:3d:e7:36:4a:5f:e5:
         d2:3c:8f:f9:7c:01:63:46:2f:71:3e:a0:9d:c9:86:bb:01:1c:
         7c:13:9e:75:c7:b7:27:8c:5e:51:8b:6a:a1:bf:ec:f2:34:63:
         db:b8:2b:d7:88:c3:c2:6b:8e:6b:16:20:91:0e:c7:2d:b1:3e:
         c7:3d:bd:21:bc:b4:2a:98:60:8b:bc:26:4a:f2:33:98:fc:3e:
         1a:7a:5e:3c:25:0f:00:9a:4f:4b:7d:9b:3e:d0:3b:fe:52:d2:
         ea:d3:12:df:a5:88:ee:3f:15:f1:ea:aa:2e:19:69:85:e8:2d:
         0d:41:a8:29:04:18:9f:9f:13:f5:22:c2:74:59:8e:b3:ed:01:
         5c:a3:77:e4:40:4d:90:1c:6e:5c:00:1e:55:d0:1f:ee:06:ca:
         54:b7:0b:0c:92:af:6a:c3:54:3b:a5:17:8c:ad:21:78:e0:4b:
         71:90:2b:99:45:7e:33:d5:9e:cb:c2:f8:a0:82:1c:fd:fc:b5:
         70:77:d3:59:c1:ad:ce:0e:8f:0e:64:90:7f:47:31:a5:78:36:
         2e:c7:0b:3b:9a:ce:6c:9e:8d:0b:2d:80:44:56:12:38:d4:09:
         e8:67:a9:6f:54:3c:57:8e:56:e8:1b:92:7b:ea:db:ac:50:4a:
         36:ae:24:91
-----BEGIN CERTIFICATE-----
MIIEjzCCA3egAwIBAgIUHhQyZrSnbkCCUXjeZ/KdOYWnbp4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjU3ZGNiYTlmYzdiMGVmMWYzY2M4MGExYWVlMjJjMDAx
OThlNzY3YTAeFw0yMzA0MDgwMzIwMzRaFw0yNDA0MDYwMzI1MzRaMDMxMTAvBgNV
BAMTKEM3MTQxNzM0OTdERDQ4MThFNDVBMUI4RURCRUZDMzM0QzEzRDE0MUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/5i3LZrWTSPcz2s966zKpDm2G
0Uyfz17uEKSoTKROZCH3K0NDCMBVemYYYle5/kysNqy4cncgEkoFjfOzRs5tjCvZ
S5X+o9gh8p02gudmADWXZgeBvjLtLejec8eqkd0g0uJZRCrUkrQBNSDfxMUD/sMG
x3kHTkmIsuT9AZrLnJhOqSZ0kVpniQG51byOn8CdELll/VAZzzwyrNkSao1fDfNG
XXx4lvjismY6tSHSjQVIxWzMUm3fP4LZmlc2AxCMBAa7q++kmU9cY5C+jhSQb+yU
8wNeNCg7xL/pYe1DUXeUmDTZ/pPFz19eQAS5P3ggiEF0cp73uahWn4icJCMFAgMB
AAGjggGZMIIBlTAdBgNVHQ4EFgQUxxQXNJfdSBjkWhuO2+/DNME9FB8wHwYDVR0j
BBgwFoAUtX3Lqfx7DvHzzIChruIsABmOdnowDgYDVR0PAQH/BAQDAgeAMFkGA1Ud
HwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5jby9yZXBvL0hZU1AvNi9CNTdEQ0JB
OUZDN0IwRUYxRjNDQzgwQTFBRUUyMkMwMDE5OEU3NjdBLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvdFgzTHFmeDdEdkh6eklDaHJ1SXNBQm1PZG5vLmNlcjBEBggr
BgEFBQcBCwQ4MDYwNAYIKwYBBQUHMAuGKHJzeW5jOi8vcnBraS5jby9yZXBvL0hZ
U1AvNi9BUzIwMDg3OS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoS3UffADANBgkqhkiG9w0BAQsFAAOC
AQEAauP6GYRSqi4+3sOUPec2Sl/l0jyP+XwBY0YvcT6gncmGuwEcfBOedce3J4xe
UYtqob/s8jRj27gr14jDwmuOaxYgkQ7HLbE+xz29Iby0Kphgi7wmSvIzmPw+Gnpe
PCUPAJpPS32bPtA7/lLS6tMS36WI7j8V8eqqLhlphegtDUGoKQQYn58T9SLCdFmO
s+0BXKN35EBNkBxuXAAeVdAf7gbKVLcLDJKvasNUO6UXjK0heOBLcZArmUV+M9We
y8L4oIIc/fy1cHfTWcGtzg6PDmSQf0cxpXg2LscLO5rObJ6NCy2ARFYSONQJ6Gep
b1Q8V45W6BuSe+rbrFBKNq4kkQ==
-----END CERTIFICATE-----