Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS201765.roa
File:                     AS201765.roa (raw, json)
Hash identifier:          dm7BxTgxqAe03xzuWEOecOvMM6TEOf5mubzeA/JVmAA=
Subject key identifier:   5C:EE:14:D3:8E:5C:92:13:ED:59:42:13:2B:81:95:F6:28:04:C4:56
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       7DBAFD8570697C4CAE5D377602401F41B48DBAB8
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS201765.roa
Signing time:             Sat 08 Apr 2023 03:25:23 +0000
ROA not before:           Sat 08 Apr 2023 03:20:23 +0000
ROA not after:            Sat 06 Apr 2024 03:25:23 +0000
asID:                     201765
IP address blocks:        2a12:dd47:8360::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:ba:fd:85:70:69:7c:4c:ae:5d:37:76:02:40:1f:41:b4:8d:ba:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:23 2023 GMT
            Not After : Apr  6 03:25:23 2024 GMT
        Subject: CN=5CEE14D38E5C9213ED5942132B8195F62804C456
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:80:cb:ac:1f:ca:f8:47:35:66:21:e5:52:65:
                    fa:7f:52:fa:58:ca:56:fc:0b:f9:ea:a3:a6:83:96:
                    62:e1:86:bb:6f:c4:94:a4:6d:b4:9f:a5:df:19:f0:
                    72:49:e9:6a:f5:ab:bf:95:0e:eb:38:51:13:44:08:
                    cb:98:c8:fe:8e:d6:c9:53:3b:18:3a:d6:8b:81:b2:
                    d9:10:f8:ee:43:b8:e0:f1:46:88:88:70:1a:b4:b2:
                    64:7a:2c:aa:ad:cb:c7:9d:a7:92:14:24:ae:ca:29:
                    11:6c:59:e5:6a:20:b9:f9:2b:3d:ed:db:d7:93:dd:
                    c1:b1:ea:4f:69:d6:d6:6c:4b:64:ff:5a:bb:d3:e4:
                    de:df:26:5d:59:e2:a3:39:00:c8:d3:84:a9:43:f9:
                    a1:80:7b:e3:ea:32:db:9c:cd:ea:fb:ad:57:59:f3:
                    4e:5c:93:80:8b:f1:e5:76:66:30:c7:04:3b:c8:68:
                    82:9a:d8:cd:ef:c7:d7:d2:15:9a:d0:23:cc:c8:5d:
                    6e:f3:8d:66:02:68:fa:60:fe:4b:3d:5b:f5:88:13:
                    e6:9e:95:e0:bd:71:f0:e1:c4:17:bf:7b:59:23:00:
                    7b:26:41:94:01:d6:cd:16:b1:15:bc:cd:97:54:b1:
                    09:b2:45:b0:92:7c:56:64:95:27:1d:32:91:1c:9b:
                    8d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:EE:14:D3:8E:5C:92:13:ED:59:42:13:2B:81:95:F6:28:04:C4:56
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS201765.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8360::/44

    Signature Algorithm: sha256WithRSAEncryption
         29:20:af:07:ee:bc:e8:b8:d5:12:cc:15:52:88:ff:aa:10:df:
         4b:cf:4d:37:dd:8c:f7:7c:4e:22:aa:57:7b:8e:c4:a8:19:b5:
         34:c8:aa:9b:42:6d:53:4f:49:8b:2c:af:08:35:57:17:4a:76:
         31:d3:3d:eb:24:c5:ab:9b:2c:94:14:55:d2:99:3b:72:29:29:
         c4:44:15:b5:93:61:b3:5c:b9:1d:91:84:ba:0b:63:a5:7b:9a:
         41:b1:1d:00:0c:0c:7e:3c:4b:5b:ad:40:bf:b4:27:db:1d:85:
         f9:d0:dd:35:27:e2:bc:23:ed:4c:1d:9a:14:2d:4b:ec:96:fb:
         a7:54:f4:d0:4f:ad:47:2e:62:a2:0f:06:68:87:77:cd:dc:06:
         42:65:37:64:65:66:46:f1:47:2d:0d:34:81:6f:ab:ec:a8:b3:
         b1:bc:e9:c0:f4:85:8a:1f:b6:be:14:44:f9:2e:98:fc:94:75:
         63:d6:cc:c6:96:ff:32:2e:b5:59:f9:74:14:6d:39:fb:70:1a:
         01:e3:f1:05:93:ff:8d:b9:bb:cb:ba:62:87:78:08:89:17:ab:
         6e:c8:62:f0:f1:1e:5a:24:7d:3c:34:68:77:33:1f:f7:65:d6:
         18:35:30:62:b0:4d:02:39:e9:0b:e2:d5:b2:87:06:67:77:15:
         f3:cf:ff:92
-----BEGIN CERTIFICATE-----
MIIEjzCCA3egAwIBAgIUfbr9hXBpfEyuXTd2AkAfQbSNurgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjU3ZGNiYTlmYzdiMGVmMWYzY2M4MGExYWVlMjJjMDAx
OThlNzY3YTAeFw0yMzA0MDgwMzIwMjNaFw0yNDA0MDYwMzI1MjNaMDMxMTAvBgNV
BAMTKDVDRUUxNEQzOEU1QzkyMTNFRDU5NDIxMzJCODE5NUY2MjgwNEM0NTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1gMusH8r4RzVmIeVSZfp/UvpY
ylb8C/nqo6aDlmLhhrtvxJSkbbSfpd8Z8HJJ6Wr1q7+VDus4URNECMuYyP6O1slT
Oxg61ouBstkQ+O5DuODxRoiIcBq0smR6LKqty8edp5IUJK7KKRFsWeVqILn5Kz3t
29eT3cGx6k9p1tZsS2T/WrvT5N7fJl1Z4qM5AMjThKlD+aGAe+PqMtuczer7rVdZ
805ck4CL8eV2ZjDHBDvIaIKa2M3vx9fSFZrQI8zIXW7zjWYCaPpg/ks9W/WIE+ae
leC9cfDhxBe/e1kjAHsmQZQB1s0WsRW8zZdUsQmyRbCSfFZklScdMpEcm41lAgMB
AAGjggGZMIIBlTAdBgNVHQ4EFgQUXO4U045ckhPtWUITK4GV9igExFYwHwYDVR0j
BBgwFoAUtX3Lqfx7DvHzzIChruIsABmOdnowDgYDVR0PAQH/BAQDAgeAMFkGA1Ud
HwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5jby9yZXBvL0hZU1AvNi9CNTdEQ0JB
OUZDN0IwRUYxRjNDQzgwQTFBRUUyMkMwMDE5OEU3NjdBLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvdFgzTHFmeDdEdkh6eklDaHJ1SXNBQm1PZG5vLmNlcjBEBggr
BgEFBQcBCwQ4MDYwNAYIKwYBBQUHMAuGKHJzeW5jOi8vcnBraS5jby9yZXBvL0hZ
U1AvNi9BUzIwMTc2NS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoS3UeDYDANBgkqhkiG9w0BAQsFAAOC
AQEAKSCvB+686LjVEswVUoj/qhDfS89NN92M93xOIqpXe47EqBm1NMiqm0JtU09J
iyyvCDVXF0p2MdM96yTFq5sslBRV0pk7cikpxEQVtZNhs1y5HZGEugtjpXuaQbEd
AAwMfjxLW61Av7Qn2x2F+dDdNSfivCPtTB2aFC1L7Jb7p1T00E+tRy5iog8GaId3
zdwGQmU3ZGVmRvFHLQ00gW+r7KizsbzpwPSFih+2vhRE+S6Y/JR1Y9bMxpb/Mi61
Wfl0FG05+3AaAePxBZP/jbm7y7pih3gIiRerbshi8PEeWiR9PDRodzMf92XWGDUw
YrBNAjnpC+LVsocGZ3cV88//kg==
-----END CERTIFICATE-----