Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS200950.roa
File:                     AS200950.roa (raw, json)
Hash identifier:          UjHhuhUuenlLJT5YH6NQ0XhtFedAKjiyrNP6DJtNSC4=
Subject key identifier:   9F:52:6B:38:DE:D1:25:13:8B:D5:39:B1:53:82:02:1C:6F:38:E9:09
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       69472821CDB4DA7C60A1531ABE5606D66A9A27CD
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS200950.roa
Signing time:             Sat 08 Apr 2023 03:25:32 +0000
ROA not before:           Sat 08 Apr 2023 03:20:32 +0000
ROA not after:            Sat 06 Apr 2024 03:25:32 +0000
asID:                     200950
IP address blocks:        2a12:dd47:8e90::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:47:28:21:cd:b4:da:7c:60:a1:53:1a:be:56:06:d6:6a:9a:27:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:32 2023 GMT
            Not After : Apr  6 03:25:32 2024 GMT
        Subject: CN=9F526B38DED125138BD539B15382021C6F38E909
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:51:48:c3:a1:57:29:ae:6d:e5:ff:78:2c:a0:
                    ff:0f:42:b4:07:82:46:9b:a4:9e:35:e1:ef:81:82:
                    a8:f0:9f:4d:31:2c:43:6a:78:65:43:cc:f5:75:b5:
                    9d:70:57:10:c8:4f:0f:db:41:b0:e4:9a:c9:d6:b2:
                    4b:6e:c3:f7:96:48:b2:f0:f1:5e:8c:dc:da:de:91:
                    b4:0a:2b:22:5d:b3:9e:16:8a:be:cc:87:f9:38:73:
                    1c:32:55:ff:de:c7:5f:c5:50:cd:89:95:90:8e:9e:
                    4f:49:7f:90:e5:c7:77:9c:0a:50:c4:8c:34:d0:66:
                    30:e5:72:39:56:ba:84:49:19:59:a1:46:4e:b8:5a:
                    64:9e:3c:64:07:60:94:a9:75:83:fa:cc:08:99:35:
                    88:d3:d5:ec:5e:9f:06:bd:93:a3:dd:8f:45:f3:3b:
                    5d:db:f5:2a:f9:fa:b5:89:95:0a:d8:31:96:52:10:
                    11:a1:81:c9:5d:bf:ff:b3:72:42:ca:1a:ed:ed:16:
                    df:c9:86:62:3c:c6:98:ff:bc:44:94:a3:ea:2d:80:
                    fe:d7:68:07:68:20:27:1e:85:06:04:76:df:19:f5:
                    20:bf:84:ef:74:27:41:e7:a0:c6:96:e6:e3:74:5a:
                    61:e4:00:68:91:ff:78:fb:af:9f:03:6c:23:65:df:
                    10:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:52:6B:38:DE:D1:25:13:8B:D5:39:B1:53:82:02:1C:6F:38:E9:09
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS200950.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8e90::/44

    Signature Algorithm: sha256WithRSAEncryption
         46:af:f0:f9:51:12:24:47:21:61:9b:fd:cd:5e:36:ba:59:23:
         25:66:94:e9:22:d3:9a:63:10:95:da:00:38:87:1e:75:40:72:
         7c:8d:c1:4c:f1:a7:f5:cf:bd:d1:3e:3b:0c:dc:82:34:c1:e0:
         dd:17:5a:0a:55:52:16:47:74:1a:56:9f:cb:06:ab:d2:55:b8:
         57:c0:bf:27:d0:fe:39:1f:c2:d2:91:fe:80:96:cb:c1:f4:03:
         02:81:ec:40:ab:a8:5e:63:97:ee:a3:52:31:a6:b8:c1:21:b0:
         74:75:f5:19:03:05:40:61:53:7c:67:06:a8:7c:6f:5f:f2:21:
         78:cb:ce:36:6d:49:e7:59:a1:8e:41:d3:c9:d2:00:dc:90:5f:
         37:6a:89:5b:19:a4:5b:95:d5:5b:53:da:99:99:61:af:53:e7:
         2e:b7:9d:f2:fd:ae:fc:e7:41:9f:f4:9b:d4:9d:c7:c2:fd:dd:
         b5:55:66:7c:b1:0e:0a:2e:02:67:ae:e6:1c:cb:07:98:5c:ba:
         7e:7e:fe:a4:34:45:5d:13:2a:79:46:80:5b:3b:94:b6:06:a4:
         7e:af:1e:42:38:07:90:5c:e2:b3:ff:78:08:e5:32:c4:c9:7c:
         d1:4e:e1:cd:45:6c:5d:8e:1a:cb:30:7e:26:cd:62:20:d9:4f:
         f1:ca:f0:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----