Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS201763.roa
File:                     AS201763.roa (raw, json)
Hash identifier:          1I82AHs6HCnfvz4/oALneCb627Wo42yT33SOhfeA54c=
Subject key identifier:   14:AA:23:58:F2:38:75:6C:55:9E:A4:13:3F:1A:FF:C7:63:F4:89:3C
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       0DC2E2AF58B637322D5F3D01F5E2AC24A65ADA87
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS201763.roa
Signing time:             Sat 08 Apr 2023 03:25:24 +0000
ROA not before:           Sat 08 Apr 2023 03:20:24 +0000
ROA not after:            Sat 06 Apr 2024 03:25:24 +0000
asID:                     201763
IP address blocks:        2a12:dd47:816d::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:c2:e2:af:58:b6:37:32:2d:5f:3d:01:f5:e2:ac:24:a6:5a:da:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:24 2023 GMT
            Not After : Apr  6 03:25:24 2024 GMT
        Subject: CN=14AA2358F238756C559EA4133F1AFFC763F4893C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:db:ff:ad:4a:01:2f:1c:1a:6e:a8:eb:9a:ec:
                    6a:f4:97:34:53:6b:a2:a6:cb:08:3a:a5:fe:6e:13:
                    18:f2:ba:99:c3:98:a4:80:e4:4e:a3:ef:47:c6:9c:
                    63:65:f0:b7:da:bd:6f:55:b2:46:fc:30:26:47:de:
                    de:5c:7f:b4:8a:55:39:fb:ef:ec:74:39:ee:72:ed:
                    2a:05:e4:7e:ad:50:f2:1e:a2:01:4a:0e:48:23:f6:
                    0b:01:9c:94:72:f8:b3:4f:75:78:db:e5:e1:71:f2:
                    02:8d:ca:3a:64:a3:e3:56:6b:ea:a6:dc:fa:d3:2c:
                    08:ab:74:2a:b8:ca:62:d6:5e:6d:79:1d:5a:a7:87:
                    00:02:e0:73:e8:a7:3e:1c:cd:1c:80:98:5c:9c:cf:
                    27:13:db:82:bf:54:a1:59:74:02:a1:31:50:99:ac:
                    88:30:d0:00:8d:e5:62:10:c8:d7:78:99:e3:f0:ff:
                    8b:25:8b:2b:4b:69:68:0f:39:95:85:7f:19:52:ff:
                    23:e2:4f:b7:bb:9c:a1:57:61:85:c5:34:c9:98:c9:
                    dc:87:15:dc:67:60:29:66:0b:b5:13:a1:6f:d1:df:
                    45:a2:94:59:da:79:82:2d:ad:26:da:88:8a:7c:98:
                    b8:09:f2:14:e9:0e:0f:68:d2:eb:78:7d:6b:41:da:
                    0a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:AA:23:58:F2:38:75:6C:55:9E:A4:13:3F:1A:FF:C7:63:F4:89:3C
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS201763.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:816d::/48

    Signature Algorithm: sha256WithRSAEncryption
         94:59:ef:ce:65:51:a9:02:7c:fa:62:79:9b:44:0f:ab:79:07:
         4d:7d:6b:01:f7:bd:2b:fa:08:40:22:39:b9:a2:34:fb:80:72:
         f8:21:1c:64:ee:e6:31:62:57:36:94:6a:bc:0b:4a:9e:e7:f0:
         89:9d:d8:08:7b:56:9e:30:65:2f:0d:9d:f6:d0:85:6d:95:19:
         ce:99:47:f8:59:c9:45:73:33:0e:0a:cc:29:fd:2b:52:69:42:
         d8:93:54:2b:34:6c:0d:38:7c:03:ff:2b:c3:cc:25:58:01:c5:
         4c:78:3d:37:36:b9:4d:88:7b:c5:5e:4c:7e:0b:df:2c:96:69:
         53:04:1b:1c:28:86:f7:cf:d4:ca:55:f9:d6:91:71:1a:f8:36:
         af:63:73:3c:ef:c4:76:b0:6e:a6:c6:24:a0:fd:10:61:ed:a0:
         99:2e:7d:2b:3a:74:fe:04:a6:9a:38:c6:fc:fc:50:22:61:cd:
         75:fa:33:37:bd:f0:aa:6e:f8:92:96:81:e0:8b:6e:a8:bc:75:
         45:b6:fc:76:37:6e:b5:8f:2c:ec:e6:a9:49:0e:f1:ba:67:8c:
         bf:1f:5b:4d:39:0d:5c:af:9c:e8:6b:28:2c:ca:f4:0a:70:ee:
         30:c8:6c:f7:96:ac:be:86:e0:72:d1:c1:99:a6:38:ab:d3:6b:
         56:6b:5c:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----