Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS202248.roa
File:                     AS202248.roa (raw, json)
Hash identifier:          3V2PC9A/jE3H065rTnDhiQevaIwz+O+TjmbVVt3b4lk=
Subject key identifier:   F2:F6:E2:03:D1:AE:54:88:2F:BC:D1:80:D7:35:8A:A2:42:64:9A:69
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       09148D52BCE1D7D5E19041104552CF9FA94960CD
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS202248.roa
Signing time:             Sat 08 Apr 2023 03:25:37 +0000
ROA not before:           Sat 08 Apr 2023 03:20:37 +0000
ROA not after:            Sat 06 Apr 2024 03:25:37 +0000
asID:                     202248
IP address blocks:        2a12:dd47:8164::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:14:8d:52:bc:e1:d7:d5:e1:90:41:10:45:52:cf:9f:a9:49:60:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:37 2023 GMT
            Not After : Apr  6 03:25:37 2024 GMT
        Subject: CN=F2F6E203D1AE54882FBCD180D7358AA242649A69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:4c:41:14:c1:72:9d:a0:e0:dd:e2:19:cc:92:
                    ba:62:b8:9a:a1:fb:d2:90:93:6c:2c:fd:e7:57:e2:
                    a1:be:14:56:68:07:67:c8:4d:29:c6:71:f8:f6:14:
                    8d:73:06:85:90:b7:80:35:d3:f1:dc:a8:8e:4c:f2:
                    8a:b7:2c:4d:0f:5f:83:4d:68:44:79:17:c3:41:1c:
                    85:b1:ee:69:15:ca:41:3a:c4:19:98:dc:11:2f:bd:
                    31:ee:e4:44:9a:a2:76:18:c9:d3:f1:49:7c:70:fe:
                    36:13:bf:7a:76:1f:56:45:57:4f:14:3d:37:a9:13:
                    a1:25:e7:88:82:6f:2e:c4:d0:aa:92:cd:bc:92:54:
                    4f:2e:b2:d4:ac:70:bc:f4:f4:b2:e4:2e:89:ae:1d:
                    4c:9a:5e:76:22:59:08:62:cb:ad:1a:73:3b:47:fc:
                    ed:57:f2:01:79:15:0b:f4:7d:18:0c:78:3d:73:e6:
                    38:66:dc:b6:2c:71:c1:9e:21:0b:64:84:d6:e4:25:
                    89:c9:e0:df:1e:3c:3c:b3:4f:fc:3c:3a:f5:a0:c3:
                    d8:2e:07:57:b2:f7:f7:bb:ad:22:6c:95:b2:93:97:
                    0f:a8:0c:1b:d8:44:ae:91:4c:5f:fd:57:87:5f:45:
                    58:b5:d4:2e:7f:b2:fc:b9:9a:21:40:d9:8f:d9:95:
                    f8:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:F6:E2:03:D1:AE:54:88:2F:BC:D1:80:D7:35:8A:A2:42:64:9A:69
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS202248.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8164::/48

    Signature Algorithm: sha256WithRSAEncryption
         59:83:fa:8e:5d:f8:fd:f1:b3:bd:07:4a:a1:e1:9b:67:af:99:
         0d:c3:0e:2c:30:65:23:e7:75:9c:a4:30:19:e8:9f:b4:5f:9c:
         95:9b:62:8c:53:af:59:cd:c5:6a:16:8e:71:16:58:c6:08:30:
         d0:a9:4c:b1:e5:aa:1a:88:dd:3c:fe:db:82:20:27:97:5d:16:
         a0:ac:a9:c2:bc:e0:fe:b7:8f:b4:8d:b7:aa:95:a8:0b:3a:48:
         f4:50:f8:ac:6e:df:97:55:3d:b6:3e:83:54:a4:7b:92:ff:39:
         91:24:8b:11:2d:59:b3:5a:46:c6:bd:00:88:b7:97:2b:5d:0f:
         01:14:83:e8:79:53:7c:ca:5c:35:52:48:c6:ad:2e:3f:43:e9:
         fb:51:13:b9:b5:27:4c:a8:3e:8a:90:11:30:60:60:a3:63:12:
         2d:fd:9f:9b:a2:55:8d:4b:9b:e1:96:b7:17:88:49:33:52:dd:
         ba:35:a6:1c:30:56:1a:eb:d7:64:09:a2:58:71:46:a7:a9:5c:
         7c:22:8c:27:3a:5b:d4:56:75:b5:47:c4:b7:fe:31:ca:5d:c2:
         4e:d8:ee:c6:be:07:b9:f2:4b:6b:d2:d9:41:4e:db:42:23:91:
         73:1d:97:72:f1:93:d6:87:13:ab:2e:9c:e4:71:8b:d9:96:0d:
         34:14:90:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----