Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS202573.roa
File:                     AS202573.roa (raw, json)
Hash identifier:          fYGguOodmf53C5TZGxK+cQr2p5EHSPfHZgow3umbPkY=
Subject key identifier:   9E:85:E6:15:A9:02:BB:87:53:E1:E2:56:58:31:B9:CB:52:CD:F1:88
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       1D096245346033938301D048AF72C30F5EF76476
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS202573.roa
Signing time:             Sat 08 Apr 2023 03:25:26 +0000
ROA not before:           Sat 08 Apr 2023 03:20:26 +0000
ROA not after:            Sat 06 Apr 2024 03:25:26 +0000
asID:                     202573
IP address blocks:        2a12:dd47:f800::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:09:62:45:34:60:33:93:83:01:d0:48:af:72:c3:0f:5e:f7:64:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:26 2023 GMT
            Not After : Apr  6 03:25:26 2024 GMT
        Subject: CN=9E85E615A902BB8753E1E2565831B9CB52CDF188
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:41:a4:5a:80:55:ac:30:34:7e:d0:20:3e:8f:
                    72:a0:37:95:bd:7e:ae:d8:dc:19:6f:20:f7:17:8d:
                    14:2e:61:58:b9:ba:e0:bc:ac:bc:7a:26:88:82:f8:
                    a5:f6:8e:20:e4:90:ed:7c:21:2e:73:6c:43:66:e3:
                    14:0e:42:60:51:91:74:49:64:ba:20:53:eb:fa:68:
                    fc:aa:62:0a:5b:1f:f6:40:25:ab:4d:b1:d6:86:43:
                    5d:e3:86:3c:d3:cf:8e:89:c4:3d:b0:10:0a:d5:68:
                    6a:85:05:82:51:60:90:a7:3b:58:35:53:f9:02:1a:
                    09:0c:4d:b8:d6:74:ae:31:72:f4:cd:3e:66:6e:6a:
                    07:47:e4:c6:c6:74:88:84:1a:c9:5b:86:24:51:be:
                    b6:0d:28:29:d4:52:72:c2:dc:e8:89:1e:81:ce:d6:
                    ed:04:f0:54:60:df:29:6e:44:d6:37:97:a5:45:ff:
                    5f:30:4b:b2:6e:c4:f5:cf:9f:87:53:10:1e:28:25:
                    f2:27:d4:9a:c5:75:1b:97:90:c4:15:83:3f:37:af:
                    9d:59:f1:64:17:17:17:ff:a9:35:28:63:3e:47:35:
                    13:6f:84:0b:77:7f:6b:0e:42:15:11:61:9c:88:df:
                    c1:bc:63:cc:42:93:95:5e:aa:51:ce:1c:96:22:b3:
                    36:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:85:E6:15:A9:02:BB:87:53:E1:E2:56:58:31:B9:CB:52:CD:F1:88
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS202573.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:f800::/40

    Signature Algorithm: sha256WithRSAEncryption
         32:b6:18:37:5f:19:fb:c0:c9:c0:2e:96:1f:97:67:e0:1b:fd:
         06:22:54:ba:13:36:fd:a6:e5:d1:55:81:09:7f:15:c0:fc:e0:
         ff:21:fa:2d:8a:5f:6c:84:7d:dd:f2:1d:9e:b9:0d:87:5f:c1:
         cd:ba:12:d6:0f:88:20:0d:8f:3f:c6:f7:a6:83:9e:08:f3:5b:
         72:ab:a1:d2:f4:0c:3c:77:d6:a4:b2:3f:0a:7e:ae:0e:18:61:
         bc:c8:12:b1:c3:2e:61:77:49:a4:bc:5d:30:1d:f2:a1:02:cf:
         f7:37:fc:46:b6:c7:96:63:3e:7d:e7:10:e3:f8:80:d7:20:76:
         7f:20:a2:8c:d6:c9:18:24:99:ce:23:25:2b:31:2a:6e:f5:74:
         74:c9:4a:e6:7f:f8:4d:44:e2:36:8f:e9:b8:5c:72:9d:4f:9b:
         bf:2e:f1:1f:5e:ce:33:db:ce:b7:b6:7c:5a:02:9a:c5:1e:49:
         35:2c:f3:7b:e6:f1:93:61:59:a1:73:6a:cf:80:91:44:a2:09:
         b2:f3:e3:a3:ff:32:9c:c1:1e:02:da:92:b0:f7:3e:9a:a5:ae:
         34:37:e9:62:fc:6f:f5:6b:34:07:db:b8:1b:b0:2d:b0:8e:40:
         71:0d:12:20:e3:aa:1b:59:c1:bf:37:9f:c1:7f:67:31:20:bb:
         9b:40:0e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----