Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS202996.roa
File:                     AS202996.roa (raw, json)
Hash identifier:          QVTiXZ8EJ4rXWvgNsRHYQgnbbj3uaVr+SpZ958DWp60=
Subject key identifier:   6F:31:74:AE:66:CB:5D:39:D9:9C:E5:40:EA:B4:8C:83:42:D1:25:F1
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       453E4F8A440BE1AC8BA36E408D13A40937BCB925
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS202996.roa
Signing time:             Sat 08 Apr 2023 03:25:45 +0000
ROA not before:           Sat 08 Apr 2023 03:20:45 +0000
ROA not after:            Sat 06 Apr 2024 03:25:45 +0000
asID:                     202996
IP address blocks:        2a12:dd47:8029::/48 maxlen: 48
                          2a12:dd47:8048::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:3e:4f:8a:44:0b:e1:ac:8b:a3:6e:40:8d:13:a4:09:37:bc:b9:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:45 2023 GMT
            Not After : Apr  6 03:25:45 2024 GMT
        Subject: CN=6F3174AE66CB5D39D99CE540EAB48C8342D125F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:38:2c:14:17:19:99:f2:c9:3c:f7:ef:5b:9a:
                    08:e7:0c:c7:2c:82:9e:e7:8c:c5:27:4f:02:f9:2f:
                    4b:6c:4a:52:81:cf:45:bf:da:fa:04:c6:57:d0:e4:
                    4c:03:4f:96:ea:ee:e8:9b:d8:5d:c3:34:82:c2:c9:
                    56:93:79:82:e4:e3:d1:e1:be:ee:0f:f0:73:3b:f1:
                    49:c4:e6:5d:17:32:07:18:7b:d0:ae:13:0d:b2:9d:
                    d1:04:c9:cf:ae:5a:3d:23:20:36:02:09:4e:b0:f4:
                    03:09:47:20:84:fe:f1:12:ad:9e:8b:cd:39:59:77:
                    ce:4e:5d:c1:23:ed:8d:6f:8a:14:59:66:d3:cd:55:
                    65:f7:55:51:ea:b5:20:bc:52:1a:42:5e:57:4a:18:
                    07:80:9d:80:cf:84:79:c2:32:fa:38:71:28:07:0d:
                    e2:ae:4f:c6:74:92:55:45:37:1d:d6:52:fe:90:c4:
                    d4:63:93:4f:b0:e7:ca:18:82:4f:a2:65:55:f8:d0:
                    51:ae:f0:0d:ef:20:c5:cc:24:03:9d:70:43:9d:8b:
                    44:23:65:29:51:86:ee:72:6d:66:bd:e7:f0:3f:db:
                    75:63:ba:a9:a8:f9:84:c7:6c:dd:f8:bf:9d:49:d4:
                    cd:c4:c2:c0:a2:35:8a:10:6f:31:45:a1:fe:43:21:
                    84:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:31:74:AE:66:CB:5D:39:D9:9C:E5:40:EA:B4:8C:83:42:D1:25:F1
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS202996.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8029::/48
                  2a12:dd47:8048::/48

    Signature Algorithm: sha256WithRSAEncryption
         75:46:b7:12:b3:0b:aa:0d:00:96:eb:78:3b:5a:96:23:8b:b7:
         ef:14:2b:f1:60:9c:d8:e3:3c:8c:08:be:5b:5d:27:48:ca:fd:
         81:3a:9e:8a:e1:ed:5e:56:fd:56:27:99:b7:0b:2e:e4:2a:69:
         fb:cc:20:a0:72:f5:33:d5:dd:6b:6a:85:10:cd:42:62:96:fc:
         9c:b7:a5:0e:54:e8:0f:94:9f:3d:a1:b4:7c:f3:ca:fa:e2:48:
         0a:fc:46:40:63:eb:50:b8:0e:ee:ec:29:76:1c:91:d2:26:7e:
         c0:81:32:72:2a:b2:6a:6c:a8:f6:0f:a2:1b:a7:4b:7a:45:1d:
         7f:75:64:fd:b3:67:6d:33:3f:bc:71:a1:f6:74:7d:c1:33:a5:
         5e:47:82:5b:32:07:05:08:fe:5f:02:39:d1:af:2f:65:b6:c9:
         e0:89:b5:96:10:35:34:85:aa:e7:69:0f:dd:79:a9:28:4c:3b:
         2f:a8:86:9c:03:b8:5a:d0:68:d0:f1:a3:c3:0e:b7:6d:ea:68:
         67:6f:28:1e:16:92:17:4e:35:e9:73:4f:67:5d:4e:27:44:df:
         e9:f9:fc:f7:64:21:ee:b4:62:14:a3:be:78:b2:17:87:e7:ec:
         1f:16:59:d4:16:63:fe:64:db:5a:b3:81:54:56:fb:f6:76:eb:
         b7:e8:cb:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----