Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS202685.roa
File:                     AS202685.roa (raw, json)
Hash identifier:          cmk701HMCMnE/Nz14qtexZyxtZuUr+vnmin0TIGrRAk=
Subject key identifier:   D1:95:F9:EA:90:D2:6F:2A:CF:58:9A:BF:C1:F1:C8:B1:08:D1:CD:7F
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       2D3A5070B331EED54E731CA6DBEE240F17A816D1
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS202685.roa
Signing time:             Sat 08 Apr 2023 03:25:21 +0000
ROA not before:           Sat 08 Apr 2023 03:20:21 +0000
ROA not after:            Sat 06 Apr 2024 03:25:21 +0000
asID:                     202685
IP address blocks:        2a12:dd47:8500::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:3a:50:70:b3:31:ee:d5:4e:73:1c:a6:db:ee:24:0f:17:a8:16:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:21 2023 GMT
            Not After : Apr  6 03:25:21 2024 GMT
        Subject: CN=D195F9EA90D26F2ACF589ABFC1F1C8B108D1CD7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:66:ea:de:4d:dd:d6:cb:6c:94:ca:53:a1:ea:
                    84:46:30:8b:0c:35:c3:d2:ef:e7:69:d5:65:6c:a1:
                    d3:2f:62:ee:36:f3:32:49:3d:d0:78:ac:6a:fa:18:
                    59:23:e1:5c:3b:ce:24:df:cf:90:d1:2c:ae:dc:6d:
                    d1:4a:94:0d:8d:50:e6:ec:04:67:3b:a3:65:78:42:
                    58:a4:1a:5d:7c:3f:28:c3:b1:99:26:9c:89:6d:85:
                    61:54:50:55:f6:9a:a8:08:c2:3c:25:09:61:18:16:
                    a8:b0:61:08:d6:b3:9a:38:05:0f:52:7a:92:9b:65:
                    0a:57:f5:1f:6a:e3:60:52:96:43:eb:0a:eb:20:24:
                    79:74:8c:c2:ba:44:99:f2:e7:54:e6:07:b2:9d:ea:
                    29:64:fa:c0:57:7f:f9:98:e8:12:ab:c3:55:c4:c6:
                    4c:1e:8e:b8:ec:67:0c:d7:96:53:76:f6:51:84:58:
                    e8:2f:41:6e:c4:32:d4:da:e1:ec:47:87:0f:aa:fc:
                    db:a5:3c:95:17:53:8c:62:19:92:73:bf:49:fa:d1:
                    91:05:ea:d9:37:b6:31:9e:0c:48:3a:f6:a7:1b:47:
                    59:e2:97:98:f0:cc:c7:8b:08:c9:2f:96:00:22:87:
                    46:0a:c7:10:1c:b4:96:3d:9a:26:d9:fa:ec:18:63:
                    43:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:95:F9:EA:90:D2:6F:2A:CF:58:9A:BF:C1:F1:C8:B1:08:D1:CD:7F
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS202685.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8500::/40

    Signature Algorithm: sha256WithRSAEncryption
         42:77:7a:02:b8:71:19:0c:2e:c2:d8:32:31:2c:48:1c:8e:dc:
         2f:a9:65:b2:33:5b:53:a4:33:49:75:e2:81:e1:d5:3d:d0:8a:
         da:66:98:75:e9:1a:a4:2b:a7:40:f0:59:82:36:57:50:8c:75:
         2c:36:78:8d:0a:ee:1d:3d:82:1c:20:b8:0e:38:59:50:35:89:
         c7:59:00:28:9b:02:a4:c6:dd:31:49:37:29:14:ae:b0:0c:1f:
         65:2f:cf:91:7a:a3:80:5a:73:ea:c3:04:91:18:49:5e:49:82:
         bb:3c:d9:1b:7d:e4:43:e7:41:55:bd:d1:b2:ee:2e:12:b1:57:
         81:62:2c:39:14:e0:0f:55:90:ef:2f:1b:fa:c4:50:8e:7e:c3:
         a3:c4:70:26:88:90:ec:84:4c:b5:f1:eb:76:a7:69:13:ad:93:
         f6:0e:2d:07:9f:88:98:5d:78:c5:69:9b:61:ae:6a:1c:c3:9d:
         76:82:c6:07:ef:3d:6a:0f:70:1c:17:14:4f:ca:70:33:e6:63:
         f9:9a:a0:8f:8c:81:52:0a:84:8b:f1:04:d9:78:c3:86:c2:50:
         b6:f2:d0:b5:e6:85:b2:b2:d5:48:dd:b3:f5:55:05:64:bf:e6:
         40:8b:5e:5d:97:99:f4:ce:42:6f:0c:6b:80:8e:68:ba:3f:cd:
         02:87:07:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----