Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS202118.roa
File:                     AS202118.roa (raw, json)
Hash identifier:          yp8HVEyh/fOD3J1IrNQz4pa0nZsMx6frTyR2ir63ePs=
Subject key identifier:   FB:F3:47:DA:58:A5:B5:90:5C:FB:B8:99:28:8A:5B:DC:69:DE:C4:A8
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       620C4A9E925C146F996500F534C3E27BFB65DD38
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS202118.roa
Signing time:             Sat 08 Apr 2023 03:25:30 +0000
ROA not before:           Sat 08 Apr 2023 03:20:30 +0000
ROA not after:            Sat 06 Apr 2024 03:25:30 +0000
asID:                     202118
IP address blocks:        2a12:dd47:8350::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:0c:4a:9e:92:5c:14:6f:99:65:00:f5:34:c3:e2:7b:fb:65:dd:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:30 2023 GMT
            Not After : Apr  6 03:25:30 2024 GMT
        Subject: CN=FBF347DA58A5B5905CFBB899288A5BDC69DEC4A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:49:b9:b3:b4:54:74:6d:ae:3f:62:9e:5a:9e:
                    01:1f:4d:c3:ae:c2:44:4c:fa:9d:2a:da:a9:91:b7:
                    71:d6:3b:aa:e1:e0:10:f8:2d:89:a0:8c:ba:67:3c:
                    13:58:7a:52:9c:30:b6:8a:56:45:43:8e:40:bb:cd:
                    ad:ee:aa:29:82:d2:0f:b3:18:63:de:75:c8:18:10:
                    c0:81:31:0e:60:e6:24:ad:d6:c7:3b:04:c4:f9:9a:
                    20:e2:94:2b:de:77:ca:ec:94:05:db:18:3d:83:4e:
                    4f:68:02:67:d8:9f:64:12:f9:73:b2:b2:f7:a1:c9:
                    0c:05:10:f0:81:39:1a:32:72:5a:1d:bc:5d:02:4c:
                    c4:16:32:e7:40:83:90:51:bd:58:a8:41:d8:49:83:
                    f7:94:5a:57:9c:3b:85:11:b1:29:72:fc:41:68:55:
                    ef:d6:28:02:e9:3b:59:21:02:04:d0:da:de:98:d0:
                    5b:1a:46:7f:ae:61:a2:f5:27:27:9a:df:fa:a8:fc:
                    61:21:23:23:a8:04:c5:3b:ab:b1:59:ad:67:d3:78:
                    b1:dd:9c:6d:dc:45:fe:0c:db:67:5d:1d:df:b4:be:
                    70:04:4e:24:8c:a1:9e:b6:4d:c0:6a:a8:ee:78:61:
                    ba:6a:76:10:89:39:a3:20:f1:44:d1:84:7d:6b:90:
                    e6:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:F3:47:DA:58:A5:B5:90:5C:FB:B8:99:28:8A:5B:DC:69:DE:C4:A8
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS202118.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8350::/44

    Signature Algorithm: sha256WithRSAEncryption
         9d:94:0f:fc:8c:c4:b2:84:c5:8e:48:c4:62:68:47:7f:7d:f2:
         1e:56:9e:e4:f1:a4:ad:36:4f:a5:1c:c0:e8:35:68:82:17:3c:
         43:89:5a:48:47:b4:0d:d6:c4:3a:3e:fa:e5:2b:1e:8d:cd:05:
         b5:96:39:71:40:31:2e:cc:13:d6:58:5c:22:cd:ed:79:32:e7:
         f4:4a:2a:fd:c4:21:86:5b:51:55:23:80:07:6e:3b:38:82:b8:
         9a:78:5e:62:97:20:d1:8c:41:8f:2f:3d:f0:59:19:79:af:d6:
         ed:69:18:09:bd:5e:d3:bb:50:eb:2c:22:a3:c8:a2:23:2b:a4:
         92:c7:65:8d:2c:de:f4:31:f9:29:4a:ba:a8:e3:51:6f:e3:8b:
         79:aa:0e:55:f3:ee:b2:90:06:7d:61:39:37:cb:92:ae:3a:c8:
         06:79:19:1e:15:32:94:ed:23:96:26:2c:23:a8:ba:7c:af:27:
         16:2e:b6:84:07:cf:9d:c2:78:5a:25:4c:81:a9:1e:0a:f9:c4:
         4b:c3:e7:56:12:92:ab:76:16:cf:b5:6e:9e:91:75:52:e6:2a:
         28:a2:65:59:20:ab:07:2e:17:10:4b:f8:3b:21:6c:3d:25:fe:
         98:9b:da:c8:5f:e7:5c:98:88:f0:95:9b:b2:05:62:96:1d:d0:
         c5:bc:29:eb
-----BEGIN CERTIFICATE-----
MIIEjzCCA3egAwIBAgIUYgxKnpJcFG+ZZQD1NMPie/tl3TgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjU3ZGNiYTlmYzdiMGVmMWYzY2M4MGExYWVlMjJjMDAx
OThlNzY3YTAeFw0yMzA0MDgwMzIwMzBaFw0yNDA0MDYwMzI1MzBaMDMxMTAvBgNV
BAMTKEZCRjM0N0RBNThBNUI1OTA1Q0ZCQjg5OTI4OEE1QkRDNjlERUM0QTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUSbmztFR0ba4/Yp5angEfTcOu
wkRM+p0q2qmRt3HWO6rh4BD4LYmgjLpnPBNYelKcMLaKVkVDjkC7za3uqimC0g+z
GGPedcgYEMCBMQ5g5iSt1sc7BMT5miDilCved8rslAXbGD2DTk9oAmfYn2QS+XOy
svehyQwFEPCBORoyclodvF0CTMQWMudAg5BRvVioQdhJg/eUWlecO4URsSly/EFo
Ve/WKALpO1khAgTQ2t6Y0FsaRn+uYaL1Jyea3/qo/GEhIyOoBMU7q7FZrWfTeLHd
nG3cRf4M22ddHd+0vnAETiSMoZ62TcBqqO54YbpqdhCJOaMg8UTRhH1rkOZvAgMB
AAGjggGZMIIBlTAdBgNVHQ4EFgQU+/NH2liltZBc+7iZKIpb3GnexKgwHwYDVR0j
BBgwFoAUtX3Lqfx7DvHzzIChruIsABmOdnowDgYDVR0PAQH/BAQDAgeAMFkGA1Ud
HwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5jby9yZXBvL0hZU1AvNi9CNTdEQ0JB
OUZDN0IwRUYxRjNDQzgwQTFBRUUyMkMwMDE5OEU3NjdBLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvdFgzTHFmeDdEdkh6eklDaHJ1SXNBQm1PZG5vLmNlcjBEBggr
BgEFBQcBCwQ4MDYwNAYIKwYBBQUHMAuGKHJzeW5jOi8vcnBraS5jby9yZXBvL0hZ
U1AvNi9BUzIwMjExOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoS3UeDUDANBgkqhkiG9w0BAQsFAAOC
AQEAnZQP/IzEsoTFjkjEYmhHf33yHlae5PGkrTZPpRzA6DVoghc8Q4laSEe0DdbE
Oj765Ssejc0FtZY5cUAxLswT1lhcIs3teTLn9Eoq/cQhhltRVSOAB247OIK4mnhe
Ypcg0YxBjy898FkZea/W7WkYCb1e07tQ6ywio8iiIyukksdljSze9DH5KUq6qONR
b+OLeaoOVfPuspAGfWE5N8uSrjrIBnkZHhUylO0jliYsI6i6fK8nFi62hAfPncJ4
WiVMgakeCvnES8PnVhKSq3YWz7VunpF1UuYqKKJlWSCrBy4XEEv4OyFsPSX+mJva
yF/nXJiI8JWbsgVilh3Qxbwp6w==
-----END CERTIFICATE-----