Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS201865.roa
File:                     AS201865.roa (raw, json)
Hash identifier:          HtRk/im99yFhDQsKuhj5BTGZ9M29E4fdChR6iuzcTJc=
Subject key identifier:   59:89:B6:2D:A2:85:33:9D:91:C2:D1:8D:00:9B:D8:F4:61:D4:FE:11
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       40B85E8537C0209A7DFC16CCC79A51A18A71032E
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS201865.roa
Signing time:             Sat 08 Apr 2023 03:25:26 +0000
ROA not before:           Sat 08 Apr 2023 03:20:26 +0000
ROA not after:            Sat 06 Apr 2024 03:25:26 +0000
asID:                     201865
IP address blocks:        2a12:dd47:8168::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:b8:5e:85:37:c0:20:9a:7d:fc:16:cc:c7:9a:51:a1:8a:71:03:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:26 2023 GMT
            Not After : Apr  6 03:25:26 2024 GMT
        Subject: CN=5989B62DA285339D91C2D18D009BD8F461D4FE11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c7:36:df:12:d6:da:0f:09:59:41:4c:a5:52:
                    ae:50:63:04:34:06:4d:b3:6c:5d:d2:80:5a:a5:e0:
                    83:1b:c1:ee:40:8b:81:2e:07:86:76:c3:78:61:32:
                    c0:0a:33:e4:bf:96:62:03:87:67:c0:c5:0d:a9:6f:
                    a6:fe:dc:ab:47:96:95:f4:52:46:08:ab:3f:7d:6c:
                    43:a2:2b:49:d4:99:b6:98:61:ec:78:9d:ed:35:e6:
                    60:b7:32:a9:52:77:a4:1a:75:2d:23:8a:f4:f6:fe:
                    b9:15:b4:09:55:8e:66:dc:44:ea:1c:1d:73:2c:42:
                    4b:77:62:46:e3:e6:47:2c:10:51:43:97:ad:84:7a:
                    95:87:e7:c1:90:13:73:0e:d1:6a:81:50:1a:63:6b:
                    ef:a5:71:bd:0a:b3:fb:23:be:52:3b:fb:5a:22:9d:
                    98:cb:c2:d5:c4:77:92:f0:ae:9c:12:4c:09:3a:90:
                    40:a0:61:d8:47:93:b0:93:aa:bd:53:53:7b:0a:d7:
                    ae:5d:b8:44:86:54:be:61:01:f2:2c:7a:f2:70:73:
                    61:78:95:02:09:6f:1d:55:74:b8:39:da:a3:d5:7f:
                    1e:c5:81:6b:ce:58:5c:63:a1:57:dc:a6:0d:c2:c3:
                    cf:70:0e:2a:d3:e8:42:76:b0:f4:22:b2:97:92:3c:
                    ee:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:89:B6:2D:A2:85:33:9D:91:C2:D1:8D:00:9B:D8:F4:61:D4:FE:11
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS201865.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8168::/48

    Signature Algorithm: sha256WithRSAEncryption
         12:86:0f:a9:d9:7d:0f:af:f4:4b:26:c4:34:94:7d:e8:aa:c6:
         d3:0e:67:e4:8f:24:6f:ac:8c:39:11:63:47:4d:79:a5:a7:cb:
         55:db:af:e1:bf:b3:25:2c:b7:7f:55:53:9a:e5:0a:61:a5:7e:
         a1:b5:50:ec:27:d8:bb:aa:c0:1f:a6:a1:b8:03:c4:70:82:8e:
         94:be:eb:85:cd:ab:fe:41:c1:91:e4:64:42:d6:9d:25:5c:6a:
         4e:3c:d3:f1:66:92:30:f7:55:80:3f:62:c4:74:6d:60:87:7a:
         ca:31:d2:7a:80:89:c1:03:e3:63:de:be:1f:20:ca:1d:43:2e:
         6f:96:ef:b8:13:2f:62:c6:76:75:0a:ee:76:eb:92:c1:fa:81:
         db:0d:0e:14:63:02:91:6f:7b:b9:49:20:80:6d:00:92:ea:b4:
         63:11:1a:84:67:38:96:c9:53:c4:2e:9e:b6:0a:92:8c:db:2b:
         45:84:ec:67:bd:af:fe:83:10:4b:c9:99:62:bb:d9:96:4a:59:
         8e:d6:c7:96:21:b0:75:0f:0a:38:bb:cf:a0:65:69:b3:e7:e0:
         66:ba:49:79:80:e4:3c:21:76:1d:76:a1:2b:61:bf:30:a4:42:
         ab:aa:a8:94:2a:28:6b:37:a2:72:8e:8d:a8:44:83:e8:aa:4d:
         99:7d:bb:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----