Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS207731.roa
File:                     AS207731.roa (raw, json)
Hash identifier:          s5xvOL85rUpt03PDiEGpYa2rtG++QvSScjITslKgX0E=
Subject key identifier:   BF:9E:9B:56:04:FA:2F:3A:61:55:8E:FF:7D:F1:C1:BA:17:DA:06:20
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       39E705AA6040E9C30FF3AF8C27E7C0CE36C074D8
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS207731.roa
Signing time:             Sat 08 Apr 2023 03:25:46 +0000
ROA not before:           Sat 08 Apr 2023 03:20:46 +0000
ROA not after:            Sat 06 Apr 2024 03:25:46 +0000
asID:                     207731
IP address blocks:        2a12:dd47:816c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:e7:05:aa:60:40:e9:c3:0f:f3:af:8c:27:e7:c0:ce:36:c0:74:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:46 2023 GMT
            Not After : Apr  6 03:25:46 2024 GMT
        Subject: CN=BF9E9B5604FA2F3A61558EFF7DF1C1BA17DA0620
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:2e:c0:7b:8d:5b:fc:33:ce:ec:b1:d8:c1:c5:
                    e8:ee:4a:49:f6:b5:8e:24:b5:0f:5b:3e:66:0b:f2:
                    d5:3b:0b:d8:ff:72:b9:57:b7:55:ef:66:91:1c:26:
                    79:de:2a:58:cc:9c:6b:b3:88:38:d1:b2:ee:14:92:
                    54:e3:95:86:9d:a9:fc:cf:34:75:84:1f:a1:1e:e2:
                    c3:0a:0c:e0:7e:e4:b5:01:64:da:d0:ad:e5:81:5d:
                    fa:89:f9:d9:7d:cd:10:93:b3:9e:52:09:9d:6b:54:
                    b0:d1:c0:9d:72:d6:94:3f:84:4e:7d:93:67:f5:a6:
                    b1:a4:84:7e:2a:28:5c:39:47:df:d1:90:45:c7:c6:
                    61:bf:ae:19:4f:89:0a:af:aa:07:6c:7b:40:ef:50:
                    d0:ef:05:ae:75:b2:9c:09:1c:7e:75:17:a5:6d:da:
                    89:71:7f:d5:22:b1:4b:5c:74:f8:be:05:45:45:38:
                    51:c3:89:7e:5a:46:69:3d:d7:bb:09:fd:82:f4:79:
                    90:d8:c7:84:7b:e3:0b:b4:11:f5:8e:d0:1b:1d:7e:
                    c9:9f:8d:bd:cb:88:73:85:ed:61:fd:28:b4:e3:da:
                    d7:05:d9:16:3f:3b:8a:07:a3:6b:ec:89:ae:b2:5c:
                    8f:b6:4b:63:12:58:9c:6c:11:cc:4f:7b:95:2b:3a:
                    fa:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:9E:9B:56:04:FA:2F:3A:61:55:8E:FF:7D:F1:C1:BA:17:DA:06:20
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS207731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:816c::/48

    Signature Algorithm: sha256WithRSAEncryption
         1b:c7:83:98:4a:da:ef:1e:c5:ee:a4:95:77:08:c6:39:c0:2a:
         29:53:99:25:29:a3:a2:dc:93:27:2d:06:ac:e5:6c:d0:5a:e5:
         41:b9:09:03:4c:63:65:3a:b3:40:9d:9a:98:d4:2e:ae:c3:43:
         32:e8:18:f0:37:38:b0:ce:81:61:50:24:73:a4:83:03:1a:95:
         8d:0e:51:40:c4:a1:6d:40:25:16:fa:d7:b5:8d:2c:34:af:88:
         5c:e3:c3:10:87:de:8c:f1:8b:9e:dc:5a:5e:f0:0a:8b:5b:5f:
         24:bb:97:ec:ae:e3:a3:1c:ee:02:02:a5:1b:4c:b0:9b:40:ee:
         1d:b6:73:29:ad:fd:82:b1:e6:e7:57:c7:48:35:0d:11:a5:8a:
         82:7c:36:18:10:f2:b0:c9:00:1d:22:4a:35:4c:85:69:11:a2:
         ef:09:26:4b:c6:98:a4:d8:47:80:71:17:2c:bc:96:24:04:48:
         d3:57:e7:74:26:63:cf:cd:16:4c:25:c0:6a:b6:8c:cf:da:58:
         d6:23:7a:0e:f4:e1:43:3a:93:93:03:d9:78:e5:86:eb:e1:43:
         89:b3:0f:9d:f3:eb:e3:10:90:f3:e0:38:e6:0b:9a:5c:0c:69:
         d4:fd:f3:4c:3b:f3:d5:a5:87:1f:6c:b5:46:ca:a8:91:31:9c:
         a6:60:57:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----