Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS201938.roa
File:                     AS201938.roa (raw, json)
Hash identifier:          EUKNJbSK+8LpLCwd9/s/IdjLdI5bzalbWu2eJVYq11o=
Subject key identifier:   01:AC:D3:82:22:EE:DB:CA:5A:2D:29:DF:B5:28:83:A9:0F:5B:9B:C1
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       791A5548E35180BD1EF09979B60A86E5C61E0E20
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS201938.roa
Signing time:             Sat 08 Apr 2023 03:25:34 +0000
ROA not before:           Sat 08 Apr 2023 03:20:34 +0000
ROA not after:            Sat 06 Apr 2024 03:25:34 +0000
asID:                     201938
IP address blocks:        2a12:dd47:8167::/48 maxlen: 48
                          2a12:dd47:8e50::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:1a:55:48:e3:51:80:bd:1e:f0:99:79:b6:0a:86:e5:c6:1e:0e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:34 2023 GMT
            Not After : Apr  6 03:25:34 2024 GMT
        Subject: CN=01ACD38222EEDBCA5A2D29DFB52883A90F5B9BC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:db:fa:7c:be:a3:82:f6:fe:8a:2d:bb:b6:c5:
                    e3:42:76:a8:ac:5f:cb:7e:3c:65:6c:27:01:b1:a5:
                    b3:12:b1:a2:0d:5c:43:26:84:72:90:f1:2a:8e:51:
                    52:23:82:2e:d0:a7:9b:fd:39:e5:4b:08:84:a9:45:
                    51:ac:8e:90:b3:fb:98:c0:d5:2b:70:8b:21:24:0f:
                    cc:c2:30:ed:d9:43:de:d5:f8:a5:82:18:9c:b2:e4:
                    8c:aa:0e:b4:6f:6d:8c:62:ff:60:c9:98:41:e2:23:
                    58:51:e8:c0:46:ff:a1:c5:58:38:c9:3d:b2:e4:02:
                    59:39:5b:13:53:90:3d:2e:10:11:4b:1d:fc:43:1b:
                    68:61:c1:22:c5:bd:ab:62:0e:b5:04:df:c7:21:db:
                    68:65:0a:86:eb:bf:6a:65:61:9b:15:5e:60:75:39:
                    1e:29:c6:a1:bb:db:bd:df:ba:59:c6:be:b0:fb:31:
                    96:ed:25:2b:a2:c9:0f:6e:cd:43:78:ba:eb:ed:a5:
                    17:ca:41:e4:ce:39:92:a2:4a:0d:f6:9a:fb:80:05:
                    45:c0:e0:a0:e1:e7:4f:e0:2b:41:b9:2d:98:86:dd:
                    e6:25:fe:08:a0:a8:8c:45:ac:8c:c4:42:97:db:f0:
                    2e:15:0a:c7:ee:eb:79:ba:ba:70:e2:96:e4:92:ce:
                    95:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:AC:D3:82:22:EE:DB:CA:5A:2D:29:DF:B5:28:83:A9:0F:5B:9B:C1
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS201938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8167::/48
                  2a12:dd47:8e50::/44

    Signature Algorithm: sha256WithRSAEncryption
         18:fc:4b:2f:a2:24:27:1f:1f:c0:f3:1a:d6:b1:bf:f2:a8:a8:
         de:f7:bb:27:ee:2b:b9:6b:b4:ed:e6:52:e4:fa:12:40:7b:fd:
         e1:a7:d9:86:a2:a2:71:f3:c6:ca:da:5c:bd:96:d0:f2:98:ca:
         78:d7:8f:3b:c0:ea:91:08:a7:f3:8b:c2:a4:46:19:b4:cd:62:
         ab:30:e4:e2:47:19:ad:39:9f:96:37:27:92:af:ef:bb:a5:10:
         d8:f9:38:92:6c:95:68:d1:a0:e4:b8:8d:9b:b9:60:7d:21:3d:
         9a:2a:f0:97:dc:50:54:b8:6e:b3:fe:68:5e:e8:53:f8:fb:9c:
         a3:66:81:14:9b:bb:49:10:9b:54:03:c1:f9:5b:fb:66:a7:8a:
         31:53:a9:5c:b7:67:f7:06:5f:57:03:81:5f:8b:11:91:8e:c8:
         6b:0d:ce:55:21:aa:01:6e:e0:80:05:1b:ff:d2:f9:0a:19:63:
         95:d4:17:ec:bc:fc:05:5c:1e:7f:8f:c1:36:e2:2a:ed:19:c6:
         b4:ec:fb:a6:95:31:86:e9:bf:e8:68:7f:1a:97:c8:70:36:f8:
         5a:3c:9f:34:67:e5:ea:3c:be:e6:d2:3c:7c:97:a5:aa:96:cc:
         c8:cf:66:4e:14:db:79:c9:ec:aa:26:0d:46:d5:3b:7e:c0:40:
         ac:d0:8f:11
-----BEGIN CERTIFICATE-----
MIIEmDCCA4CgAwIBAgIUeRpVSONRgL0e8Jl5tgqG5cYeDiAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjU3ZGNiYTlmYzdiMGVmMWYzY2M4MGExYWVlMjJjMDAx
OThlNzY3YTAeFw0yMzA0MDgwMzIwMzRaFw0yNDA0MDYwMzI1MzRaMDMxMTAvBgNV
BAMTKDAxQUNEMzgyMjJFRURCQ0E1QTJEMjlERkI1Mjg4M0E5MEY1QjlCQzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG2/p8vqOC9v6KLbu2xeNCdqis
X8t+PGVsJwGxpbMSsaINXEMmhHKQ8SqOUVIjgi7Qp5v9OeVLCISpRVGsjpCz+5jA
1StwiyEkD8zCMO3ZQ97V+KWCGJyy5IyqDrRvbYxi/2DJmEHiI1hR6MBG/6HFWDjJ
PbLkAlk5WxNTkD0uEBFLHfxDG2hhwSLFvatiDrUE38ch22hlCobrv2plYZsVXmB1
OR4pxqG7273fulnGvrD7MZbtJSuiyQ9uzUN4uuvtpRfKQeTOOZKiSg32mvuABUXA
4KDh50/gK0G5LZiG3eYl/gigqIxFrIzEQpfb8C4VCsfu63m6unDiluSSzpWjAgMB
AAGjggGiMIIBnjAdBgNVHQ4EFgQUAazTgiLu28paLSnftSiDqQ9bm8EwHwYDVR0j
BBgwFoAUtX3Lqfx7DvHzzIChruIsABmOdnowDgYDVR0PAQH/BAQDAgeAMFkGA1Ud
HwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5jby9yZXBvL0hZU1AvNi9CNTdEQ0JB
OUZDN0IwRUYxRjNDQzgwQTFBRUUyMkMwMDE5OEU3NjdBLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvdFgzTHFmeDdEdkh6eklDaHJ1SXNBQm1PZG5vLmNlcjBEBggr
BgEFBQcBCwQ4MDYwNAYIKwYBBQUHMAuGKHJzeW5jOi8vcnBraS5jby9yZXBvL0hZ
U1AvNi9BUzIwMTkzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjArBggr
BgEFBQcBBwEB/wQcMBowGAQCAAIwEgMHACoS3UeBZwMHBCoS3UeOUDANBgkqhkiG
9w0BAQsFAAOCAQEAGPxLL6IkJx8fwPMa1rG/8qio3ve7J+4ruWu07eZS5PoSQHv9
4afZhqKicfPGytpcvZbQ8pjKeNePO8DqkQin84vCpEYZtM1iqzDk4kcZrTmfljcn
kq/vu6UQ2Pk4kmyVaNGg5LiNm7lgfSE9mirwl9xQVLhus/5oXuhT+Puco2aBFJu7
SRCbVAPB+Vv7ZqeKMVOpXLdn9wZfVwOBX4sRkY7Iaw3OVSGqAW7ggAUb/9L5Chlj
ldQX7Lz8BVwef4/BNuIq7RnGtOz7ppUxhum/6Gh/GpfIcDb4WjyfNGfl6jy+5tI8
fJelqpbMyM9mThTbecnsqiYNRtU7fsBArNCPEQ==
-----END CERTIFICATE-----