Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS202256.roa
File:                     AS202256.roa (raw, json)
Hash identifier:          vWZgSLFPjdyy1t6qeGQ/TCQkdYC7UfK3N19zG6SVYx0=
Subject key identifier:   6B:CA:1B:EA:47:3A:4E:25:61:C4:06:7A:35:97:DF:24:5C:A0:83:F4
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       337D3AFA95A3C6D6A1EA31718C301036A5622D2D
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS202256.roa
Signing time:             Sat 08 Apr 2023 03:25:44 +0000
ROA not before:           Sat 08 Apr 2023 03:20:44 +0000
ROA not after:            Sat 06 Apr 2024 03:25:44 +0000
asID:                     202256
IP address blocks:        2a12:dd47:4000::/36 maxlen: 48
                          2a12:dd47:6000::/36 maxlen: 48
                          2a12:dd47:7000::/36 maxlen: 48
                          2a12:dd47:c000::/36 maxlen: 48
                          2a12:dd47:e000::/36 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:7d:3a:fa:95:a3:c6:d6:a1:ea:31:71:8c:30:10:36:a5:62:2d:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:44 2023 GMT
            Not After : Apr  6 03:25:44 2024 GMT
        Subject: CN=6BCA1BEA473A4E2561C4067A3597DF245CA083F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a3:07:82:46:7d:9a:f3:20:d2:bd:32:3f:c6:
                    d4:09:94:85:72:6c:d8:ce:5d:c4:d1:33:2e:e7:a1:
                    bf:c0:62:68:7e:d9:0a:9f:47:a3:02:c1:84:44:0a:
                    56:ce:83:74:00:b2:f6:30:f9:5d:fa:72:eb:43:a0:
                    eb:30:66:24:b0:b3:34:03:cd:3b:d5:6e:4a:05:c5:
                    90:2e:0d:f8:49:53:9d:09:7a:0e:c6:97:7b:e7:06:
                    27:a3:16:29:52:25:ac:1c:ad:37:5c:79:33:1e:9f:
                    d5:00:3d:bc:f1:b4:18:22:92:72:13:03:55:62:e9:
                    75:33:56:9d:ce:d4:d3:a8:bb:24:44:e3:39:43:c7:
                    8a:9f:11:a6:3a:50:77:0f:8c:dd:ce:8d:41:db:2f:
                    7c:9a:9e:23:78:8e:bb:c8:96:5f:0c:93:7e:73:d7:
                    20:fc:8e:cd:82:5c:25:bb:3e:d0:9d:91:47:7f:73:
                    fe:7a:06:2a:b6:f5:c5:61:a0:82:71:0b:8e:15:85:
                    63:b6:4b:7d:ab:77:67:e4:00:34:ff:8b:76:68:28:
                    23:16:07:34:7a:88:89:2c:4c:96:f1:9e:bd:eb:cf:
                    91:d4:b5:db:fc:5d:3e:02:51:0c:67:3b:c5:f0:07:
                    a0:51:5a:06:81:f3:46:be:36:f5:76:4f:dc:a3:1c:
                    96:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:CA:1B:EA:47:3A:4E:25:61:C4:06:7A:35:97:DF:24:5C:A0:83:F4
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS202256.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:4000::/36
                  2a12:dd47:6000::/35
                  2a12:dd47:c000::/36
                  2a12:dd47:e000::/36

    Signature Algorithm: sha256WithRSAEncryption
         3f:23:d9:8a:6c:ad:75:52:ec:46:67:b5:3e:d0:ce:ea:de:17:
         6b:52:d2:f2:5e:b6:63:99:64:c7:4e:f0:a4:5e:84:23:54:da:
         5c:4f:57:04:e2:c9:bd:df:64:13:e3:87:dc:bc:11:08:fa:d6:
         63:ac:48:58:0f:0a:99:4b:c7:93:e4:9b:33:e7:75:04:57:1f:
         cc:25:19:d4:4b:5e:5e:1f:97:20:ba:ad:8f:52:6b:40:e7:c4:
         86:ba:dd:93:cb:c6:9e:28:72:c9:3c:dc:b3:2e:b5:96:f6:cb:
         61:56:2a:c8:1a:7a:c7:1a:89:16:11:db:8d:f6:dc:c9:56:2b:
         66:1e:3f:f9:10:bc:2c:f2:21:76:ac:84:51:0e:1c:24:5d:1a:
         f1:12:65:74:e5:b4:ba:65:0e:96:ec:99:ac:4e:12:b1:2d:be:
         c1:c1:a1:74:39:4e:b1:a2:75:25:30:b8:df:39:69:ce:0a:26:
         7a:1e:f5:6b:56:09:bb:ff:2e:10:20:c4:d4:8f:6c:b4:bc:72:
         ae:33:60:7c:92:d1:8c:b1:a5:70:61:46:e1:a1:b7:74:77:82:
         07:3f:8b:fb:21:22:a1:a4:7b:79:12:d3:d6:75:a7:5d:8c:fe:
         d2:49:f6:60:bb:49:57:af:ee:09:98:7d:90:da:33:1a:c8:d1:
         a8:42:21:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----