Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS204005.roa
File:                     AS204005.roa (raw, json)
Hash identifier:          h7UXZtVA9T8izoJZKg4esqV1ToRQs1JlUPk9/WBqBQY=
Subject key identifier:   D3:18:33:AF:8B:E3:73:70:62:2A:3E:2A:14:CF:14:9C:BD:A6:57:D1
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       28943B18AF3F198C5296148ED1D355D4DDA4DCFB
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS204005.roa
Signing time:             Sat 08 Apr 2023 03:25:43 +0000
ROA not before:           Sat 08 Apr 2023 03:20:43 +0000
ROA not after:            Sat 06 Apr 2024 03:25:43 +0000
asID:                     204005
IP address blocks:        2a12:dd47:8130::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:94:3b:18:af:3f:19:8c:52:96:14:8e:d1:d3:55:d4:dd:a4:dc:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:43 2023 GMT
            Not After : Apr  6 03:25:43 2024 GMT
        Subject: CN=D31833AF8BE37370622A3E2A14CF149CBDA657D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ec:4b:9d:26:61:85:07:d6:ea:70:d4:eb:02:
                    b5:59:8e:03:d1:9f:37:c9:7e:0a:07:a0:09:dc:38:
                    7b:62:2e:9c:90:4a:e6:f8:99:b9:e2:a5:77:af:4f:
                    54:70:45:3d:28:e2:40:2b:f5:69:a7:d5:c3:f0:80:
                    ba:b1:41:f1:e6:ad:fd:9e:bb:cb:ce:1b:ae:11:e0:
                    90:c3:d5:c6:ae:3e:6e:f0:45:21:58:72:8c:82:de:
                    3d:af:13:47:a7:44:1b:0a:9f:7f:55:c0:19:08:c8:
                    fd:f7:b4:8a:c3:ad:07:7f:0c:ff:6a:40:ab:9b:03:
                    ba:ae:64:1d:98:2a:a2:a4:99:8f:26:d6:3a:e8:91:
                    a3:ac:f2:ef:1b:6d:07:4d:bb:d7:c1:5c:dc:f5:eb:
                    c4:42:23:98:93:7f:bd:1a:9e:a3:61:41:53:43:27:
                    7b:29:69:81:af:d6:fa:16:62:53:b9:29:0b:38:31:
                    f5:f1:8a:21:ac:dc:44:c2:38:63:42:49:f1:e6:8a:
                    0b:82:b0:26:e1:0a:ea:69:1a:4a:16:7d:1c:53:82:
                    b3:5a:c4:f9:d5:4a:93:5d:f4:0f:7b:e3:9b:79:ea:
                    4e:45:11:d6:4e:61:52:4d:5e:ec:76:18:d4:b3:e8:
                    75:9f:aa:98:1b:91:75:df:07:fc:d8:b5:a2:85:67:
                    17:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:18:33:AF:8B:E3:73:70:62:2A:3E:2A:14:CF:14:9C:BD:A6:57:D1
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS204005.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8130::/44

    Signature Algorithm: sha256WithRSAEncryption
         54:a5:f9:f7:d8:7c:f1:72:06:8a:32:c3:99:73:c4:ea:bc:cd:
         84:e5:c9:f2:7d:da:e7:81:a1:00:f2:de:2c:85:03:48:17:35:
         b3:d5:10:c9:e3:1c:95:8d:14:98:61:d5:14:80:29:62:e3:f2:
         a0:cc:90:68:bf:b6:b5:38:f0:cd:d5:bf:03:35:bb:af:ad:eb:
         7d:b2:3c:ce:a7:71:01:0a:11:d8:38:c5:b5:f7:a6:93:94:de:
         15:3f:89:2e:14:b4:04:90:90:d9:48:7c:71:92:26:4e:6c:07:
         66:d3:fb:56:33:de:c0:dd:b2:d1:e1:0a:40:11:b5:ac:97:44:
         b5:f7:fb:86:46:f4:54:d4:57:fc:f4:45:97:26:55:98:a8:19:
         2a:81:66:53:78:1a:c4:7f:65:76:18:0b:bc:25:3c:62:27:e2:
         76:c7:a8:79:12:34:41:53:3f:96:ec:5a:98:46:41:7b:f4:4f:
         58:5b:67:48:e6:44:d5:9d:94:17:70:63:cb:7e:ed:33:fc:11:
         9c:e9:71:ed:97:2d:53:ba:3c:bc:a7:2e:d5:a6:1d:07:fd:44:
         92:50:3c:c3:49:22:7d:54:6f:7a:bd:c3:c6:4e:4e:4f:d0:64:
         8b:e3:0f:c4:1e:3e:53:d4:f4:03:62:99:ab:1e:a0:72:8c:6c:
         a8:50:a3:37
-----BEGIN CERTIFICATE-----
MIIEjzCCA3egAwIBAgIUKJQ7GK8/GYxSlhSO0dNV1N2k3PswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjU3ZGNiYTlmYzdiMGVmMWYzY2M4MGExYWVlMjJjMDAx
OThlNzY3YTAeFw0yMzA0MDgwMzIwNDNaFw0yNDA0MDYwMzI1NDNaMDMxMTAvBgNV
BAMTKEQzMTgzM0FGOEJFMzczNzA2MjJBM0UyQTE0Q0YxNDlDQkRBNjU3RDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr7EudJmGFB9bqcNTrArVZjgPR
nzfJfgoHoAncOHtiLpyQSub4mbnipXevT1RwRT0o4kAr9Wmn1cPwgLqxQfHmrf2e
u8vOG64R4JDD1cauPm7wRSFYcoyC3j2vE0enRBsKn39VwBkIyP33tIrDrQd/DP9q
QKubA7quZB2YKqKkmY8m1jrokaOs8u8bbQdNu9fBXNz168RCI5iTf70anqNhQVND
J3spaYGv1voWYlO5KQs4MfXxiiGs3ETCOGNCSfHmiguCsCbhCuppGkoWfRxTgrNa
xPnVSpNd9A9745t56k5FEdZOYVJNXux2GNSz6HWfqpgbkXXfB/zYtaKFZxdZAgMB
AAGjggGZMIIBlTAdBgNVHQ4EFgQU0xgzr4vjc3BiKj4qFM8UnL2mV9EwHwYDVR0j
BBgwFoAUtX3Lqfx7DvHzzIChruIsABmOdnowDgYDVR0PAQH/BAQDAgeAMFkGA1Ud
HwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5jby9yZXBvL0hZU1AvNi9CNTdEQ0JB
OUZDN0IwRUYxRjNDQzgwQTFBRUUyMkMwMDE5OEU3NjdBLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvdFgzTHFmeDdEdkh6eklDaHJ1SXNBQm1PZG5vLmNlcjBEBggr
BgEFBQcBCwQ4MDYwNAYIKwYBBQUHMAuGKHJzeW5jOi8vcnBraS5jby9yZXBvL0hZ
U1AvNi9BUzIwNDAwNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoS3UeBMDANBgkqhkiG9w0BAQsFAAOC
AQEAVKX599h88XIGijLDmXPE6rzNhOXJ8n3a54GhAPLeLIUDSBc1s9UQyeMclY0U
mGHVFIApYuPyoMyQaL+2tTjwzdW/AzW7r63rfbI8zqdxAQoR2DjFtfemk5TeFT+J
LhS0BJCQ2Uh8cZImTmwHZtP7VjPewN2y0eEKQBG1rJdEtff7hkb0VNRX/PRFlyZV
mKgZKoFmU3gaxH9ldhgLvCU8YifidseoeRI0QVM/luxamEZBe/RPWFtnSOZE1Z2U
F3Bjy37tM/wRnOlx7ZctU7o8vKcu1aYdB/1EklA8w0kifVRver3Dxk5OT9Bki+MP
xB4+U9T0A2KZqx6gcoxsqFCjNw==
-----END CERTIFICATE-----