Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS209391.roa
File:                     AS209391.roa (raw, json)
Hash identifier:          6u0DQ3a3daHgt+MKGPlAGtn8IvusJSt7izDTaXlSrgw=
Subject key identifier:   9C:1A:EF:BC:72:A9:D9:C5:11:70:B6:FF:C7:20:81:07:22:4B:66:74
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       0C9230516FC8369AADACBD17E53A19136D0F1D62
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS209391.roa
Signing time:             Sat 08 Apr 2023 03:25:26 +0000
ROA not before:           Sat 08 Apr 2023 03:20:26 +0000
ROA not after:            Sat 06 Apr 2024 03:25:26 +0000
asID:                     209391
IP address blocks:        2a12:dd47:8e40::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:92:30:51:6f:c8:36:9a:ad:ac:bd:17:e5:3a:19:13:6d:0f:1d:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:26 2023 GMT
            Not After : Apr  6 03:25:26 2024 GMT
        Subject: CN=9C1AEFBC72A9D9C51170B6FFC7208107224B6674
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:63:bb:5e:07:95:3d:a4:0d:37:37:6e:50:dd:
                    ca:21:e8:d8:0b:af:ef:99:7c:dc:cd:ee:82:55:dd:
                    bd:b4:96:f0:22:f3:c8:c5:0a:99:c3:75:3f:6d:21:
                    06:25:e5:d4:78:cd:c3:e6:59:79:c0:48:22:47:dc:
                    70:5e:cb:f7:74:34:4e:93:d3:d8:fc:2c:d6:6e:d9:
                    dd:41:62:23:37:50:27:a5:5e:9a:da:9b:31:81:a4:
                    6e:47:00:ac:29:60:ff:81:5e:6f:66:c0:61:f2:bd:
                    f3:16:f3:ab:93:9a:19:04:a1:79:f5:30:21:71:39:
                    b5:dc:13:28:c4:2f:68:fa:fc:7f:3f:8d:9c:b6:68:
                    d5:69:15:a9:62:a3:3b:2d:28:2d:d3:26:09:9c:9e:
                    75:6a:8d:48:97:73:91:f4:ce:04:af:e6:e4:b8:8a:
                    f3:30:02:09:bd:d8:a8:65:88:9c:50:7f:d8:e9:98:
                    68:e2:78:30:9b:b5:19:94:ac:9c:7f:13:ba:fa:bd:
                    5d:76:47:ef:4d:0b:bd:51:be:f2:e8:e0:6b:d5:85:
                    9b:2b:77:66:4f:da:3d:56:18:73:c7:7d:c3:97:4e:
                    74:bb:40:bd:c9:a9:fc:da:f4:c4:4a:6f:17:18:57:
                    b1:6d:4a:21:35:dc:05:99:57:43:3e:cf:45:16:6b:
                    18:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:1A:EF:BC:72:A9:D9:C5:11:70:B6:FF:C7:20:81:07:22:4B:66:74
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS209391.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8e40::/44

    Signature Algorithm: sha256WithRSAEncryption
         a6:fb:21:0e:cb:b5:e6:68:ed:a7:fe:85:7f:f5:e4:fe:7c:f2:
         42:2a:98:c7:c3:e6:02:e0:ff:91:3a:73:1a:64:0f:cd:a5:53:
         b2:2a:78:70:0a:1f:b9:f3:1e:26:75:6d:d5:9a:b1:86:0a:5a:
         81:15:14:80:04:bc:23:1f:17:4f:d8:47:63:72:ad:fc:df:8c:
         9c:e0:53:00:b0:99:fc:36:42:8e:8b:6b:94:79:89:1d:ce:d6:
         4a:29:72:4f:87:3f:61:39:24:71:14:46:f9:00:1c:22:48:0d:
         e2:60:7c:dc:18:6c:65:99:d6:20:f1:9d:53:b0:4d:ad:77:90:
         6f:1e:cf:df:55:bc:47:c7:be:cf:59:15:40:89:ec:e9:63:62:
         ac:52:86:22:c4:ee:48:c5:e1:32:e3:70:db:82:dc:d7:e5:5f:
         35:be:21:d0:3d:f6:1e:b4:57:a2:19:5e:e5:d4:04:23:47:0f:
         cc:d4:50:64:17:f1:ab:84:cf:fb:1d:09:42:25:5e:d8:c4:fe:
         f6:f7:48:7f:a9:6c:4e:fa:19:c1:f2:ac:23:46:8a:1f:08:d7:
         67:ed:58:d9:19:39:1c:e7:9a:7e:f3:8e:1f:c1:6e:34:6c:44:
         f6:50:dd:dd:cc:20:0b:6d:10:0b:41:c5:6d:a0:1b:0b:37:de:
         aa:66:40:87
-----BEGIN CERTIFICATE-----
MIIEjzCCA3egAwIBAgIUDJIwUW/INpqtrL0X5ToZE20PHWIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjU3ZGNiYTlmYzdiMGVmMWYzY2M4MGExYWVlMjJjMDAx
OThlNzY3YTAeFw0yMzA0MDgwMzIwMjZaFw0yNDA0MDYwMzI1MjZaMDMxMTAvBgNV
BAMTKDlDMUFFRkJDNzJBOUQ5QzUxMTcwQjZGRkM3MjA4MTA3MjI0QjY2NzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNY7teB5U9pA03N25Q3coh6NgL
r++ZfNzN7oJV3b20lvAi88jFCpnDdT9tIQYl5dR4zcPmWXnASCJH3HBey/d0NE6T
09j8LNZu2d1BYiM3UCelXpramzGBpG5HAKwpYP+BXm9mwGHyvfMW86uTmhkEoXn1
MCFxObXcEyjEL2j6/H8/jZy2aNVpFaliozstKC3TJgmcnnVqjUiXc5H0zgSv5uS4
ivMwAgm92KhliJxQf9jpmGjieDCbtRmUrJx/E7r6vV12R+9NC71RvvLo4GvVhZsr
d2ZP2j1WGHPHfcOXTnS7QL3Jqfza9MRKbxcYV7FtSiE13AWZV0M+z0UWaxgfAgMB
AAGjggGZMIIBlTAdBgNVHQ4EFgQUnBrvvHKp2cURcLb/xyCBByJLZnQwHwYDVR0j
BBgwFoAUtX3Lqfx7DvHzzIChruIsABmOdnowDgYDVR0PAQH/BAQDAgeAMFkGA1Ud
HwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5jby9yZXBvL0hZU1AvNi9CNTdEQ0JB
OUZDN0IwRUYxRjNDQzgwQTFBRUUyMkMwMDE5OEU3NjdBLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvdFgzTHFmeDdEdkh6eklDaHJ1SXNBQm1PZG5vLmNlcjBEBggr
BgEFBQcBCwQ4MDYwNAYIKwYBBQUHMAuGKHJzeW5jOi8vcnBraS5jby9yZXBvL0hZ
U1AvNi9BUzIwOTM5MS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoS3UeOQDANBgkqhkiG9w0BAQsFAAOC
AQEApvshDsu15mjtp/6Ff/Xk/nzyQiqYx8PmAuD/kTpzGmQPzaVTsip4cAofufMe
JnVt1ZqxhgpagRUUgAS8Ix8XT9hHY3Kt/N+MnOBTALCZ/DZCjotrlHmJHc7WSily
T4c/YTkkcRRG+QAcIkgN4mB83BhsZZnWIPGdU7BNrXeQbx7P31W8R8e+z1kVQIns
6WNirFKGIsTuSMXhMuNw24Lc1+VfNb4h0D32HrRXohle5dQEI0cPzNRQZBfxq4TP
+x0JQiVe2MT+9vdIf6lsTvoZwfKsI0aKHwjXZ+1Y2Rk5HOeafvOOH8FuNGxE9lDd
3cwgC20QC0HFbaAbCzfeqmZAhw==
-----END CERTIFICATE-----