Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS201801.roa
File:                     AS201801.roa (raw, json)
Hash identifier:          Sci1YM3m4Gd1eueesFFniIIA5qZNE3oAS93zGr6ToFg=
Subject key identifier:   EC:C6:9F:7E:63:E1:96:CD:3A:FC:50:44:CE:EF:41:F4:38:17:7E:D8
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       0C97B896D5E011F8685309643473FF8DF14DCA50
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS201801.roa
Signing time:             Sat 08 Apr 2023 03:25:47 +0000
ROA not before:           Sat 08 Apr 2023 03:20:47 +0000
ROA not after:            Sat 06 Apr 2024 03:25:47 +0000
asID:                     201801
IP address blocks:        2a12:dd47:8370::/44 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:97:b8:96:d5:e0:11:f8:68:53:09:64:34:73:ff:8d:f1:4d:ca:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:47 2023 GMT
            Not After : Apr  6 03:25:47 2024 GMT
        Subject: CN=ECC69F7E63E196CD3AFC5044CEEF41F438177ED8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b3:7c:9f:50:9f:bb:df:cb:6a:5d:9e:55:73:
                    20:44:90:ca:47:d8:94:61:76:1b:14:a2:57:ce:1e:
                    85:fb:c8:c6:1f:da:cc:3f:af:68:82:1a:a9:b3:fe:
                    22:cd:ca:c8:45:d3:ce:74:95:1c:3b:cf:75:d9:18:
                    3e:45:01:ff:87:93:85:9a:46:45:92:e2:11:a1:c6:
                    25:6b:cb:dc:a1:d0:a9:d9:47:27:fd:56:ad:93:ac:
                    6b:fe:71:61:1f:43:8b:75:93:f5:a3:a5:4d:e2:b8:
                    4e:59:d2:7d:7c:dc:82:76:27:23:d5:f0:1f:07:20:
                    25:8c:04:43:a4:ab:12:9b:4e:05:37:4b:43:49:8d:
                    1a:71:2c:c0:8b:7f:ce:88:c2:c5:40:38:ae:b0:0b:
                    15:41:51:e0:d5:58:99:97:b4:d4:22:6b:c4:5f:af:
                    27:17:7d:2d:ff:ed:8f:d5:d8:59:77:b4:41:6f:ac:
                    f6:65:3b:9c:d8:ae:c2:16:fa:e4:03:1a:42:c8:4a:
                    88:8b:27:86:9d:9f:08:a4:34:b9:2c:d3:1c:ab:96:
                    fd:0e:99:dc:91:d9:6a:b3:bb:db:f2:62:57:e1:ee:
                    b9:42:6a:4b:65:b3:d6:77:a1:38:ac:61:86:a6:b2:
                    e5:0c:e8:23:21:dc:78:f8:f3:3f:f0:dc:e9:88:31:
                    03:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:C6:9F:7E:63:E1:96:CD:3A:FC:50:44:CE:EF:41:F4:38:17:7E:D8
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS201801.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8370::/44

    Signature Algorithm: sha256WithRSAEncryption
         90:c8:77:c8:1b:8a:a2:fd:bf:77:33:1e:63:5d:79:cf:c2:f0:
         dc:5e:ac:75:b1:2f:b0:b9:2f:c7:9a:4c:62:ec:17:a0:3a:f8:
         b7:a4:6d:23:6e:58:76:11:10:0f:86:c4:04:92:e5:9e:83:51:
         37:c8:18:36:02:63:6c:d2:65:52:6a:1a:4f:d1:1b:c9:94:44:
         b6:91:a7:e4:5e:26:c8:02:6b:e3:44:60:e3:d1:fe:d0:4a:84:
         b8:5c:af:a1:30:0f:d2:62:0c:e2:14:56:82:09:bf:7d:8e:8f:
         f7:61:fb:ef:8f:62:c6:f8:f3:52:11:36:5b:96:b1:29:1d:ec:
         3e:39:73:f4:0c:36:28:13:98:96:7a:44:7f:d1:bc:c5:24:22:
         b9:b5:a8:b2:9d:6e:f3:ef:f5:84:b9:33:d9:4e:a3:f2:92:aa:
         dc:32:c8:48:f3:08:e3:1f:06:6b:f8:72:8c:20:f5:01:b4:52:
         31:17:f0:a4:cf:5c:f5:1c:41:8e:3d:51:7a:af:fd:4d:fd:ea:
         1c:0b:21:71:45:83:06:82:f9:3b:86:59:cc:db:cf:29:ba:ec:
         9b:a1:5f:76:ea:aa:de:b6:32:38:d1:c1:85:6b:44:be:e9:58:
         8b:53:5a:43:dd:39:7f:ae:1d:37:c9:e4:5b:47:86:86:11:dd:
         95:f7:58:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----