Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS202340.roa
File:                     AS202340.roa (raw, json)
Hash identifier:          +DHUmyz5l8M9CL/3TF1nrkIkxm5by5jG0S1w2/yzMC4=
Subject key identifier:   86:45:13:AC:D0:CA:3B:EB:20:8B:B0:20:FF:80:04:25:50:24:3D:F3
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       25351F91EED210A6AC0EE0D5A094113C4A723E72
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS202340.roa
Signing time:             Sat 08 Apr 2023 03:25:21 +0000
ROA not before:           Sat 08 Apr 2023 03:20:21 +0000
ROA not after:            Sat 06 Apr 2024 03:25:21 +0000
asID:                     202340
IP address blocks:        2a12:dd47:8162::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:35:1f:91:ee:d2:10:a6:ac:0e:e0:d5:a0:94:11:3c:4a:72:3e:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:21 2023 GMT
            Not After : Apr  6 03:25:21 2024 GMT
        Subject: CN=864513ACD0CA3BEB208BB020FF80042550243DF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:bf:d2:cd:5f:ca:b8:f7:9a:9b:bd:cf:c0:6c:
                    3f:b9:20:ca:8b:ff:2d:55:de:68:35:4c:17:e0:28:
                    63:63:08:fb:02:a9:c3:cf:e4:b1:a8:bf:bd:d8:ef:
                    7f:ed:dd:aa:07:6b:c8:14:1e:e9:45:be:d0:2e:6c:
                    c4:a2:b8:10:fa:a7:b9:20:f2:e9:bc:67:4b:42:c2:
                    d4:70:f7:bb:ec:03:9b:02:7e:44:6b:f2:80:fc:72:
                    5d:97:6c:e7:a0:b7:77:a4:7a:c9:d6:63:56:3e:d0:
                    09:50:66:e0:a2:f4:91:cf:38:e2:09:1a:0e:51:1a:
                    ce:be:d6:df:44:e1:74:a1:e4:29:bc:be:31:f6:84:
                    67:21:26:85:36:13:45:4e:e5:98:08:bd:2e:aa:28:
                    e9:98:60:dd:d2:34:7a:11:36:ac:5d:5b:b0:0c:a0:
                    38:27:29:04:1e:a4:33:af:83:1a:7f:2c:53:4e:74:
                    e6:e2:a6:be:ac:cd:e5:69:18:fe:96:28:eb:28:08:
                    af:b0:55:1d:7f:8f:ba:59:02:9b:03:4e:44:ba:e1:
                    ba:c5:16:5f:ef:f3:fe:51:e3:c2:44:46:1d:9f:a4:
                    1f:cd:04:22:17:bf:22:be:ec:80:48:45:29:ae:b3:
                    96:cf:87:d5:eb:fb:a3:5a:2d:ea:42:dc:b6:68:72:
                    52:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:45:13:AC:D0:CA:3B:EB:20:8B:B0:20:FF:80:04:25:50:24:3D:F3
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS202340.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8162::/48

    Signature Algorithm: sha256WithRSAEncryption
         37:9b:6f:be:ce:06:ee:00:45:56:c4:04:70:de:02:0f:fc:d7:
         ec:f3:7a:c2:0c:fc:2e:69:d3:66:20:53:e0:fe:70:d1:65:0d:
         af:3d:0e:17:36:cf:d2:c0:b2:03:8d:a8:e9:6c:4c:29:8a:34:
         28:b6:bf:6b:42:c7:2d:b4:8a:ce:cc:45:2c:0d:89:29:8d:e2:
         eb:c2:aa:c6:4d:02:75:cd:93:57:ba:9d:43:4a:5d:24:ad:20:
         84:e6:58:92:98:7f:7c:cd:8f:d4:97:f4:d0:4e:c3:7c:df:aa:
         65:5a:3e:90:90:0c:ff:eb:9c:f0:ea:97:07:f1:e5:72:fd:fe:
         fe:6e:9e:30:fb:29:bf:d7:d8:92:25:87:c5:0f:05:84:90:f0:
         4e:ab:9a:e3:d8:21:ef:ea:7e:10:86:3f:7a:ad:63:99:50:de:
         12:eb:98:05:61:1f:3f:e9:05:b5:e5:47:89:c6:4b:d3:e6:7f:
         ee:10:92:04:67:48:6d:56:26:fb:f6:f0:52:cf:87:89:ff:16:
         19:f7:8e:1a:ea:ca:e6:8f:ca:4f:02:d9:fb:9c:f9:62:8a:c3:
         de:2e:4f:af:30:5c:0d:58:ad:d1:de:3f:11:77:7a:b7:e0:5d:
         cb:82:3a:cf:36:90:56:61:37:53:24:9c:8a:0d:07:bc:54:8a:
         78:64:ab:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----