Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS201251.roa
File:                     AS201251.roa (raw, json)
Hash identifier:          lL/ImXKjbLSYvtVtWgKczE1ltniGQ+YwzxlMY+1MVtQ=
Subject key identifier:   2E:C1:74:7A:CA:67:44:2B:30:A3:35:A2:FD:64:61:B1:97:78:B3:1C
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       293FD7A1BE1DC1671BEA176A18204CC1046FA239
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS201251.roa
Signing time:             Sat 08 Apr 2023 03:25:30 +0000
ROA not before:           Sat 08 Apr 2023 03:20:30 +0000
ROA not after:            Sat 06 Apr 2024 03:25:30 +0000
asID:                     201251
IP address blocks:        2a12:dd47:8074::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:3f:d7:a1:be:1d:c1:67:1b:ea:17:6a:18:20:4c:c1:04:6f:a2:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:30 2023 GMT
            Not After : Apr  6 03:25:30 2024 GMT
        Subject: CN=2EC1747ACA67442B30A335A2FD6461B19778B31C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:d2:15:66:b1:0e:8a:ad:63:b1:0a:ec:22:10:
                    a1:56:25:5d:8b:28:bd:80:d5:0c:37:39:23:43:f7:
                    88:81:24:41:b6:22:0d:68:d6:1e:09:44:a4:f3:21:
                    0e:e8:71:76:19:5f:a8:4c:b2:20:3d:b3:f9:08:1f:
                    4e:6f:bd:78:21:09:64:c8:7f:d9:7b:bb:8e:b9:f3:
                    01:94:e2:72:f4:01:bf:c8:b3:6c:d6:ef:d6:93:52:
                    a5:51:71:dd:63:bb:33:69:07:96:46:d9:0e:ff:82:
                    65:bc:27:22:6d:b9:a6:29:2d:d9:1d:e4:39:cb:71:
                    4f:35:cc:a7:f2:63:52:1c:5f:96:7f:9d:8d:4b:cc:
                    2c:be:ab:18:95:63:a3:9e:4b:69:1e:e5:fd:3d:f7:
                    6c:76:41:f7:83:dc:3a:53:56:45:ec:3b:2f:68:6e:
                    79:9e:98:a1:bd:a1:65:58:15:e3:98:c1:6e:eb:e9:
                    2e:f4:3e:dd:09:7e:63:a2:45:c4:2c:ff:02:b6:70:
                    e8:84:6c:19:3a:60:03:bd:0c:86:e8:cc:25:c7:98:
                    dd:66:36:52:40:3c:79:53:b2:d2:bd:51:a2:b3:bc:
                    e1:9a:e0:04:bb:b3:f8:ed:61:e0:8c:52:cc:92:c8:
                    1c:ff:cb:88:4a:ad:f4:df:48:55:4e:b3:20:d4:c5:
                    cb:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:C1:74:7A:CA:67:44:2B:30:A3:35:A2:FD:64:61:B1:97:78:B3:1C
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS201251.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8074::/48

    Signature Algorithm: sha256WithRSAEncryption
         52:9b:90:6c:a2:01:7d:08:4f:52:63:63:4d:bd:a0:93:2d:a4:
         3e:70:37:29:09:95:4c:15:d3:53:82:01:13:fc:07:24:ef:ef:
         ba:08:f6:f9:e3:93:a1:61:3f:11:56:37:77:28:33:2d:65:ff:
         13:82:c9:ad:46:12:34:8b:ed:00:ee:1b:3c:9a:68:eb:bb:17:
         4d:e6:29:1f:2c:c8:ef:7b:e1:ba:ef:89:23:de:93:0d:e3:f8:
         b0:88:5a:08:a0:1d:d7:25:3e:8b:80:f8:d5:42:cc:22:89:e6:
         43:dc:9e:d8:35:f1:5e:0a:cf:14:66:d6:b0:a0:84:eb:72:c5:
         60:31:0b:a8:cb:57:71:0c:8e:00:d3:39:e4:c9:ca:91:fd:1a:
         b8:b7:b0:08:08:ab:c0:14:8f:63:4f:58:0b:64:80:c9:48:d3:
         cc:b6:be:55:8b:ed:a8:28:3e:a8:3f:51:7c:09:59:58:39:67:
         e5:86:4f:af:20:1d:bb:b5:ac:9f:93:ce:22:ff:4c:d9:69:6e:
         3b:6a:f2:1b:28:8a:7b:b2:3d:ca:14:1a:8a:c6:b7:a1:b4:51:
         30:69:18:3d:a8:ac:ba:63:ed:44:0f:8b:2e:19:82:a5:c1:18:
         81:d9:5a:9c:39:51:74:25:fc:a3:8b:af:8c:bf:28:cb:7d:34:
         c2:65:95:f3
-----BEGIN CERTIFICATE-----
MIIEjzCCA3egAwIBAgIUKT/Xob4dwWcb6hdqGCBMwQRvojkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjU3ZGNiYTlmYzdiMGVmMWYzY2M4MGExYWVlMjJjMDAx
OThlNzY3YTAeFw0yMzA0MDgwMzIwMzBaFw0yNDA0MDYwMzI1MzBaMDMxMTAvBgNV
BAMTKDJFQzE3NDdBQ0E2NzQ0MkIzMEEzMzVBMkZENjQ2MUIxOTc3OEIzMUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg0hVmsQ6KrWOxCuwiEKFWJV2L
KL2A1Qw3OSND94iBJEG2Ig1o1h4JRKTzIQ7ocXYZX6hMsiA9s/kIH05vvXghCWTI
f9l7u4658wGU4nL0Ab/Is2zW79aTUqVRcd1juzNpB5ZG2Q7/gmW8JyJtuaYpLdkd
5DnLcU81zKfyY1IcX5Z/nY1LzCy+qxiVY6OeS2ke5f0992x2QfeD3DpTVkXsOy9o
bnmemKG9oWVYFeOYwW7r6S70Pt0JfmOiRcQs/wK2cOiEbBk6YAO9DIbozCXHmN1m
NlJAPHlTstK9UaKzvOGa4AS7s/jtYeCMUsySyBz/y4hKrfTfSFVOsyDUxctfAgMB
AAGjggGZMIIBlTAdBgNVHQ4EFgQULsF0espnRCswozWi/WRhsZd4sxwwHwYDVR0j
BBgwFoAUtX3Lqfx7DvHzzIChruIsABmOdnowDgYDVR0PAQH/BAQDAgeAMFkGA1Ud
HwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5jby9yZXBvL0hZU1AvNi9CNTdEQ0JB
OUZDN0IwRUYxRjNDQzgwQTFBRUUyMkMwMDE5OEU3NjdBLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvdFgzTHFmeDdEdkh6eklDaHJ1SXNBQm1PZG5vLmNlcjBEBggr
BgEFBQcBCwQ4MDYwNAYIKwYBBQUHMAuGKHJzeW5jOi8vcnBraS5jby9yZXBvL0hZ
U1AvNi9BUzIwMTI1MS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoS3UeAdDANBgkqhkiG9w0BAQsFAAOC
AQEAUpuQbKIBfQhPUmNjTb2gky2kPnA3KQmVTBXTU4IBE/wHJO/vugj2+eOToWE/
EVY3dygzLWX/E4LJrUYSNIvtAO4bPJpo67sXTeYpHyzI73vhuu+JI96TDeP4sIha
CKAd1yU+i4D41ULMIonmQ9ye2DXxXgrPFGbWsKCE63LFYDELqMtXcQyOANM55MnK
kf0auLewCAirwBSPY09YC2SAyUjTzLa+VYvtqCg+qD9RfAlZWDln5YZPryAdu7Ws
n5POIv9M2WluO2ryGyiKe7I9yhQaisa3obRRMGkYPaisumPtRA+LLhmCpcEYgdla
nDlRdCX8o4uvjL8oy300wmWV8w==
-----END CERTIFICATE-----