Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS201751.roa
File:                     AS201751.roa (raw, json)
Hash identifier:          X9c3GL5Klh0D+TAcKfvq4Yv/o2wTCkoN/GgIzTbWCO0=
Subject key identifier:   DF:96:B6:A6:AC:7E:47:A0:D2:BC:8C:98:4F:AC:1E:ED:10:DB:40:A6
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       52D636D2CE5197665953083D6166B09731C567BB
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS201751.roa
Signing time:             Sat 08 Apr 2023 03:25:22 +0000
ROA not before:           Sat 08 Apr 2023 03:20:22 +0000
ROA not after:            Sat 06 Apr 2024 03:25:22 +0000
asID:                     201751
IP address blocks:        2a12:dd47:83a0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:d6:36:d2:ce:51:97:66:59:53:08:3d:61:66:b0:97:31:c5:67:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:22 2023 GMT
            Not After : Apr  6 03:25:22 2024 GMT
        Subject: CN=DF96B6A6AC7E47A0D2BC8C984FAC1EED10DB40A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:e2:34:8e:c7:b9:b0:51:9e:9d:b3:df:90:aa:
                    c9:65:18:5b:53:40:39:38:a3:8f:37:d4:63:2e:63:
                    0a:52:8d:47:aa:79:cc:b7:40:9d:16:9c:80:1a:92:
                    af:49:0e:c4:88:ab:f5:cc:b5:6c:bb:73:cd:c0:b0:
                    7b:fa:b0:25:23:50:61:66:b9:6c:09:46:86:5a:9b:
                    e9:c7:8c:14:54:7c:4e:d0:fa:a9:18:5c:6c:06:9e:
                    01:6a:5f:80:71:cf:d6:4d:cf:28:17:39:8c:c3:86:
                    12:4e:c7:48:52:bc:47:3f:42:e7:2e:fa:01:4d:f4:
                    a0:fc:ec:85:30:69:ba:ea:44:b8:14:a0:c5:0a:09:
                    25:94:6b:c7:ee:63:dd:1c:73:e2:6b:b8:af:22:15:
                    f4:ce:7e:fd:47:e8:5b:25:cc:9e:3f:21:e0:84:d0:
                    ce:a7:24:96:0c:69:86:a7:e3:5d:8c:dc:71:3d:82:
                    8c:8a:c4:79:c7:5c:64:e6:6e:b5:e2:66:74:29:c5:
                    57:25:b3:8d:31:d4:2c:c9:45:18:55:b2:0c:7c:56:
                    9e:9a:19:15:77:60:7a:28:50:03:12:92:a7:a8:aa:
                    2b:6a:06:4f:91:ce:e2:8f:93:66:9d:88:5a:b1:56:
                    95:06:f8:20:67:18:28:a1:f6:c3:3f:dd:d0:11:74:
                    34:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:96:B6:A6:AC:7E:47:A0:D2:BC:8C:98:4F:AC:1E:ED:10:DB:40:A6
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS201751.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:83a0::/44

    Signature Algorithm: sha256WithRSAEncryption
         09:3e:b9:d7:2a:a6:42:5a:9f:af:93:32:bd:bd:76:c8:35:4e:
         e7:e1:68:64:ba:7e:fe:4e:b8:d8:eb:12:68:3e:e8:81:6c:31:
         d2:50:1c:a5:cf:d1:1e:c3:39:63:d4:19:31:5c:e4:66:eb:55:
         f2:ab:93:a6:f8:dd:f3:bd:3f:9d:97:4a:b9:64:a9:68:73:b8:
         df:49:94:33:a0:b6:a8:98:ee:30:a4:7f:22:3a:c7:c9:67:a7:
         83:4c:88:2d:6a:f7:e8:fd:4a:80:cc:68:f7:da:17:e7:68:3b:
         c9:1f:35:1f:e6:e2:b1:e1:2c:aa:ac:a8:ab:e0:b3:89:c0:d9:
         18:d4:4f:9a:80:44:a0:1a:d0:df:d2:d3:be:3b:5f:fe:08:5c:
         0b:68:14:23:54:1b:2a:e2:bc:9a:4b:18:b2:0e:e7:6f:4e:71:
         09:4f:c8:8f:a6:4b:39:34:e1:69:4c:2c:bd:89:b3:67:8a:ea:
         5f:20:36:da:f1:58:a6:06:bb:71:ed:69:08:47:08:63:63:57:
         4b:06:55:9d:8e:52:c8:91:88:0b:4f:a2:ec:4f:1e:22:53:44:
         bd:92:87:45:65:4b:6a:5b:54:a9:af:c9:80:b5:62:b4:6a:8a:
         40:10:2f:3a:9f:75:2f:9e:bc:46:cc:99:30:5e:aa:f9:ed:0f:
         fd:cb:8b:1b
-----BEGIN CERTIFICATE-----
MIIEjzCCA3egAwIBAgIUUtY20s5Rl2ZZUwg9YWawlzHFZ7swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjU3ZGNiYTlmYzdiMGVmMWYzY2M4MGExYWVlMjJjMDAx
OThlNzY3YTAeFw0yMzA0MDgwMzIwMjJaFw0yNDA0MDYwMzI1MjJaMDMxMTAvBgNV
BAMTKERGOTZCNkE2QUM3RTQ3QTBEMkJDOEM5ODRGQUMxRUVEMTBEQjQwQTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDp4jSOx7mwUZ6ds9+QqsllGFtT
QDk4o4831GMuYwpSjUeqecy3QJ0WnIAakq9JDsSIq/XMtWy7c83AsHv6sCUjUGFm
uWwJRoZam+nHjBRUfE7Q+qkYXGwGngFqX4Bxz9ZNzygXOYzDhhJOx0hSvEc/Qucu
+gFN9KD87IUwabrqRLgUoMUKCSWUa8fuY90cc+JruK8iFfTOfv1H6FslzJ4/IeCE
0M6nJJYMaYan412M3HE9goyKxHnHXGTmbrXiZnQpxVcls40x1CzJRRhVsgx8Vp6a
GRV3YHooUAMSkqeoqitqBk+RzuKPk2adiFqxVpUG+CBnGCih9sM/3dARdDSjAgMB
AAGjggGZMIIBlTAdBgNVHQ4EFgQU35a2pqx+R6DSvIyYT6we7RDbQKYwHwYDVR0j
BBgwFoAUtX3Lqfx7DvHzzIChruIsABmOdnowDgYDVR0PAQH/BAQDAgeAMFkGA1Ud
HwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5jby9yZXBvL0hZU1AvNi9CNTdEQ0JB
OUZDN0IwRUYxRjNDQzgwQTFBRUUyMkMwMDE5OEU3NjdBLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvdFgzTHFmeDdEdkh6eklDaHJ1SXNBQm1PZG5vLmNlcjBEBggr
BgEFBQcBCwQ4MDYwNAYIKwYBBQUHMAuGKHJzeW5jOi8vcnBraS5jby9yZXBvL0hZ
U1AvNi9BUzIwMTc1MS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoS3UeDoDANBgkqhkiG9w0BAQsFAAOC
AQEACT651yqmQlqfr5Myvb12yDVO5+FoZLp+/k642OsSaD7ogWwx0lAcpc/RHsM5
Y9QZMVzkZutV8quTpvjd870/nZdKuWSpaHO430mUM6C2qJjuMKR/IjrHyWeng0yI
LWr36P1KgMxo99oX52g7yR81H+biseEsqqyoq+CzicDZGNRPmoBEoBrQ39LTvjtf
/ghcC2gUI1QbKuK8mksYsg7nb05xCU/Ij6ZLOTThaUwsvYmzZ4rqXyA22vFYpga7
ce1pCEcIY2NXSwZVnY5SyJGIC0+i7E8eIlNEvZKHRWVLaltUqa/JgLVitGqKQBAv
Op91L568RsyZMF6q+e0P/cuLGw==
-----END CERTIFICATE-----