Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS202218.roa
File:                     AS202218.roa (raw, json)
Hash identifier:          7Ylqvj0xRI/SBbwa6ducKNQhOHDi+Euta/K/u1qM/bQ=
Subject key identifier:   02:12:01:76:EE:8E:D4:23:8B:5F:6D:03:B2:A0:6C:E6:02:52:57:FE
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       455BE2F449758C9CFF5A2FF76AA7CF249AA428ED
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS202218.roa
Signing time:             Sat 08 Apr 2023 03:25:30 +0000
ROA not before:           Sat 08 Apr 2023 03:20:30 +0000
ROA not after:            Sat 06 Apr 2024 03:25:30 +0000
asID:                     202218
IP address blocks:        2a12:dd47:807b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:5b:e2:f4:49:75:8c:9c:ff:5a:2f:f7:6a:a7:cf:24:9a:a4:28:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:30 2023 GMT
            Not After : Apr  6 03:25:30 2024 GMT
        Subject: CN=02120176EE8ED4238B5F6D03B2A06CE6025257FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a5:1b:27:32:58:22:e3:5f:4c:06:17:bd:af:
                    b9:4b:33:e7:0b:e8:83:fa:e1:11:e8:97:f0:f6:4e:
                    5c:d8:e4:80:f2:ac:c3:20:df:35:0d:4a:43:88:52:
                    13:20:e6:92:1f:c1:d0:33:3f:cb:5a:3c:45:fe:19:
                    3f:2f:7d:60:cc:f1:28:ec:7b:47:1f:32:2d:f6:dc:
                    3b:8c:78:ff:90:a5:10:2e:86:67:11:c4:c1:ba:65:
                    b6:c5:39:4e:45:32:4a:15:bc:b3:33:55:e2:15:25:
                    f2:cb:7d:88:95:0d:d9:dc:da:cb:a8:c4:44:30:4a:
                    e8:22:8c:89:45:20:31:0e:3c:ed:a4:0a:3b:0c:05:
                    bf:18:4e:e5:6c:d9:be:dd:0d:d4:81:bf:49:39:f0:
                    7d:c7:73:cf:d1:f5:40:59:b5:d6:3d:0b:a6:0b:f1:
                    a1:d2:f1:6a:d9:3d:d9:96:e3:58:15:04:86:d8:e4:
                    7a:73:2e:f7:09:4e:d3:d7:fd:45:ac:71:db:a2:24:
                    9c:65:a1:40:2b:12:5a:d6:41:12:d3:66:a1:6f:1e:
                    f5:92:a3:fc:d4:73:5c:6f:7a:9d:2b:c9:fb:f7:6b:
                    77:0c:7a:91:f2:fa:fc:27:39:4f:53:66:1e:e3:e7:
                    d9:cb:5e:73:32:e7:83:95:29:d1:50:fc:75:b7:74:
                    cd:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:12:01:76:EE:8E:D4:23:8B:5F:6D:03:B2:A0:6C:E6:02:52:57:FE
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS202218.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:807b::/48

    Signature Algorithm: sha256WithRSAEncryption
         3c:90:c4:25:c0:a4:db:3f:83:c7:32:b8:13:38:ae:b2:06:fa:
         f9:f4:dc:7f:fa:77:d2:50:dc:b7:90:8d:a5:bb:9d:82:85:55:
         12:75:03:18:7b:03:22:b9:83:f6:2c:16:35:a3:7f:0f:a4:46:
         4c:79:c6:86:73:37:4e:18:f7:bd:56:6e:12:79:29:a5:f9:24:
         82:d3:b5:7a:23:13:ef:d3:72:8c:e2:ac:0c:42:6e:1b:e3:67:
         7c:0d:85:cc:0d:a2:6d:a0:e8:f2:24:42:e1:21:0c:f5:bf:27:
         12:e1:ac:07:14:66:fa:0f:0c:94:18:78:73:66:6b:98:f0:06:
         c5:c8:4c:e0:02:a6:9c:8a:e6:97:2b:1e:db:1b:a3:dc:71:f7:
         8e:9e:78:e2:b4:74:75:96:e0:5d:ff:b0:c6:85:cd:b7:3d:08:
         f6:c9:05:42:33:49:4b:a6:b8:e4:30:52:8f:f6:e7:eb:72:e1:
         67:f7:08:d3:f5:6b:4f:0f:bb:26:d9:95:8c:1a:fe:31:e3:bd:
         55:5c:1f:8c:53:f1:4f:10:67:32:53:54:4c:48:f1:4d:19:76:
         6b:c4:d6:c6:60:11:dc:a8:5b:76:b4:1b:33:88:77:19:ef:6f:
         dc:fa:a1:94:d8:09:9a:94:ac:a7:9d:23:3a:a4:06:bf:a8:79:
         77:0a:f9:1e
-----BEGIN CERTIFICATE-----
MIIEjzCCA3egAwIBAgIURVvi9El1jJz/Wi/3aqfPJJqkKO0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjU3ZGNiYTlmYzdiMGVmMWYzY2M4MGExYWVlMjJjMDAx
OThlNzY3YTAeFw0yMzA0MDgwMzIwMzBaFw0yNDA0MDYwMzI1MzBaMDMxMTAvBgNV
BAMTKDAyMTIwMTc2RUU4RUQ0MjM4QjVGNkQwM0IyQTA2Q0U2MDI1MjU3RkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1pRsnMlgi419MBhe9r7lLM+cL
6IP64RHol/D2TlzY5IDyrMMg3zUNSkOIUhMg5pIfwdAzP8taPEX+GT8vfWDM8Sjs
e0cfMi323DuMeP+QpRAuhmcRxMG6ZbbFOU5FMkoVvLMzVeIVJfLLfYiVDdnc2suo
xEQwSugijIlFIDEOPO2kCjsMBb8YTuVs2b7dDdSBv0k58H3Hc8/R9UBZtdY9C6YL
8aHS8WrZPdmW41gVBIbY5HpzLvcJTtPX/UWscduiJJxloUArElrWQRLTZqFvHvWS
o/zUc1xvep0ryfv3a3cMepHy+vwnOU9TZh7j59nLXnMy54OVKdFQ/HW3dM1ZAgMB
AAGjggGZMIIBlTAdBgNVHQ4EFgQUAhIBdu6O1COLX20DsqBs5gJSV/4wHwYDVR0j
BBgwFoAUtX3Lqfx7DvHzzIChruIsABmOdnowDgYDVR0PAQH/BAQDAgeAMFkGA1Ud
HwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5jby9yZXBvL0hZU1AvNi9CNTdEQ0JB
OUZDN0IwRUYxRjNDQzgwQTFBRUUyMkMwMDE5OEU3NjdBLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvdFgzTHFmeDdEdkh6eklDaHJ1SXNBQm1PZG5vLmNlcjBEBggr
BgEFBQcBCwQ4MDYwNAYIKwYBBQUHMAuGKHJzeW5jOi8vcnBraS5jby9yZXBvL0hZ
U1AvNi9BUzIwMjIxOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoS3UeAezANBgkqhkiG9w0BAQsFAAOC
AQEAPJDEJcCk2z+DxzK4Eziusgb6+fTcf/p30lDct5CNpbudgoVVEnUDGHsDIrmD
9iwWNaN/D6RGTHnGhnM3Thj3vVZuEnkppfkkgtO1eiMT79NyjOKsDEJuG+NnfA2F
zA2ibaDo8iRC4SEM9b8nEuGsBxRm+g8MlBh4c2ZrmPAGxchM4AKmnIrmlyse2xuj
3HH3jp544rR0dZbgXf+wxoXNtz0I9skFQjNJS6a45DBSj/bn63LhZ/cI0/VrTw+7
JtmVjBr+MeO9VVwfjFPxTxBnMlNUTEjxTRl2a8TWxmAR3KhbdrQbM4h3Ge9v3Pqh
lNgJmpSsp50jOqQGv6h5dwr5Hg==
-----END CERTIFICATE-----