Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS201257.roa
File:                     AS201257.roa (raw, json)
Hash identifier:          o0dNiezgXItS6PqykRGcxrrHbp5H+L+W3gYkh1Rguuo=
Subject key identifier:   9C:3C:FB:98:F6:3E:E0:EA:8F:68:9B:2C:6A:CB:48:6C:89:4E:BE:70
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       22DC8C570091A78894530270EA9D604B41B2DB0B
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS201257.roa
Signing time:             Sat 08 Apr 2023 03:25:42 +0000
ROA not before:           Sat 08 Apr 2023 03:20:42 +0000
ROA not after:            Sat 06 Apr 2024 03:25:42 +0000
asID:                     201257
IP address blocks:        2a12:dd47:80e2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:dc:8c:57:00:91:a7:88:94:53:02:70:ea:9d:60:4b:41:b2:db:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:42 2023 GMT
            Not After : Apr  6 03:25:42 2024 GMT
        Subject: CN=9C3CFB98F63EE0EA8F689B2C6ACB486C894EBE70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:49:5f:78:97:fa:34:ec:45:f8:4f:76:25:e1:
                    27:54:28:ac:7c:25:67:e2:46:f5:3a:56:7b:70:3d:
                    b6:16:50:bf:22:0f:c2:3c:ce:91:6a:13:b8:4c:60:
                    23:03:d1:af:f9:62:5a:51:ad:e7:8e:dd:b0:e4:48:
                    a4:a4:a9:b4:38:89:9e:cc:b0:45:0f:1c:6c:6e:56:
                    cb:b9:df:46:58:8c:13:4d:b8:bc:f6:d1:d4:20:3d:
                    f3:63:07:e8:8c:ab:1a:79:ff:8a:c2:5e:16:16:ec:
                    79:ba:45:47:bc:cd:4e:fd:2f:be:d2:99:fa:b5:98:
                    d5:1a:9e:23:84:84:6d:32:89:29:ee:e1:e7:7f:c9:
                    b2:d1:c7:5c:33:15:31:47:16:eb:4c:d6:b7:7b:08:
                    07:46:7c:56:4b:c4:70:77:dd:70:c2:cb:84:a4:38:
                    69:db:d5:a9:c7:c1:f0:8a:de:46:a4:05:8a:a2:21:
                    b7:2e:8c:78:b2:78:5c:24:03:fe:e8:a3:79:4e:36:
                    46:91:9b:ea:f1:fa:30:e4:0f:d0:9e:99:a6:c7:3a:
                    6e:08:a0:b1:71:bf:80:56:77:12:b1:0a:80:66:6d:
                    39:c3:a6:5a:3c:ca:54:e6:2b:56:3e:d2:dc:5d:ab:
                    e1:d1:97:5a:0a:96:ee:dc:ad:93:1a:5b:bd:3f:81:
                    35:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:3C:FB:98:F6:3E:E0:EA:8F:68:9B:2C:6A:CB:48:6C:89:4E:BE:70
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS201257.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:80e2::/48

    Signature Algorithm: sha256WithRSAEncryption
         5a:e1:3f:3a:c2:ea:ee:ea:0d:a9:49:e9:c7:f0:88:6e:77:8e:
         f2:b5:4a:6e:77:11:f1:48:00:bf:71:93:bd:a9:18:78:4f:ad:
         f4:51:a2:cd:49:b7:c0:d8:07:93:63:26:45:b4:f6:a2:59:e8:
         36:eb:86:36:3e:0c:21:54:19:ac:b7:4a:9f:47:03:44:42:a7:
         d0:b2:cb:5a:59:1e:ee:cf:4a:d3:fe:d7:d8:af:56:f8:7c:40:
         26:3e:0e:d0:53:ba:44:7b:0f:42:84:fa:39:6a:9b:2b:7a:de:
         5f:b7:5b:dc:28:b1:94:a4:44:ae:59:83:2a:10:d9:0b:b4:6a:
         63:7d:d6:f3:0e:32:47:d2:ad:1f:17:e1:9e:76:98:25:b6:79:
         17:98:a7:b8:74:2a:ab:7f:5d:bf:32:de:38:74:db:fc:f6:fa:
         89:fc:b6:32:a3:11:7c:e7:7f:c1:df:f7:fe:48:cd:db:7c:80:
         d0:d0:1a:b6:e0:ac:a8:eb:c0:a7:ba:30:26:20:cb:12:32:89:
         de:e0:eb:ee:92:e5:7c:e7:bb:1b:42:39:2a:38:7a:b2:16:79:
         d2:cf:23:2e:7a:46:8d:38:54:3b:fe:9a:68:21:be:56:41:a8:
         a7:b3:c7:b0:0e:ab:7c:c9:0e:61:1e:74:0a:96:4e:e9:02:5e:
         78:ad:7b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----