Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS204291.roa
File:                     AS204291.roa (raw, json)
Hash identifier:          4vpxJJ0QITBCj9t3pg+5R3osr4mFttCB1wcE+uDhBos=
Subject key identifier:   62:54:96:D0:EE:5D:50:4D:36:80:C3:71:C1:94:BE:55:B7:3F:E2:3C
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       D20775A8A11544A316AF582C38FF53905D8984
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS204291.roa
Signing time:             Sat 08 Apr 2023 03:25:43 +0000
ROA not before:           Sat 08 Apr 2023 03:20:43 +0000
ROA not after:            Sat 06 Apr 2024 03:25:43 +0000
asID:                     204291
IP address blocks:        2a12:dd47:8002::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            d2:07:75:a8:a1:15:44:a3:16:af:58:2c:38:ff:53:90:5d:89:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:43 2023 GMT
            Not After : Apr  6 03:25:43 2024 GMT
        Subject: CN=625496D0EE5D504D3680C371C194BE55B73FE23C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:62:33:7f:7f:53:51:ba:10:d0:f2:9d:ed:b4:
                    87:d6:5f:27:27:23:a6:62:d1:5c:f5:8e:1a:11:81:
                    31:66:05:8f:8c:ba:df:fd:2c:30:b0:9a:74:70:50:
                    1b:21:73:41:a0:0e:3c:18:f6:e4:20:77:e2:3d:37:
                    d5:9c:be:c8:8d:92:22:4d:f0:52:bf:bd:72:c4:76:
                    a2:a6:d6:25:d4:c1:43:0e:3e:4a:13:5e:a5:00:0d:
                    74:ee:e4:04:06:2b:a4:92:21:e1:38:d8:08:2e:82:
                    c7:de:23:d8:f4:29:08:bc:57:f0:53:a1:e1:0e:ab:
                    aa:08:cc:90:02:24:e6:28:aa:4c:16:a8:64:4a:cc:
                    b2:a5:18:3f:c4:9b:78:75:c7:f4:a6:e3:d7:64:45:
                    fc:39:5c:75:4e:8d:c0:71:c3:14:3f:cb:a3:63:2c:
                    d4:1e:19:03:3c:78:52:4b:b8:f7:68:fa:db:77:78:
                    1f:3b:d3:3b:78:05:a8:7a:13:cf:15:17:6a:c9:d4:
                    83:c5:7d:54:16:9c:cf:ee:1f:51:24:23:37:81:48:
                    34:86:2f:5b:f3:b7:6b:fb:f6:08:02:46:e4:9e:45:
                    5e:72:49:af:54:9a:5c:d4:47:d0:f0:e3:00:83:4f:
                    46:45:63:e7:97:c3:32:5a:96:78:b6:c0:21:c7:1a:
                    c1:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:54:96:D0:EE:5D:50:4D:36:80:C3:71:C1:94:BE:55:B7:3F:E2:3C
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS204291.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8002::/48

    Signature Algorithm: sha256WithRSAEncryption
         2b:d8:4e:79:71:e6:bf:2b:e9:cd:d3:0f:9b:e7:eb:c6:ca:aa:
         9d:46:aa:b2:32:b2:4d:f9:db:d8:c8:d0:ab:4a:7b:85:1e:4a:
         19:9f:be:2d:5b:a4:72:5e:47:b0:3b:50:3f:f0:24:47:ec:52:
         c5:8c:7e:13:3c:40:1b:71:51:57:7b:d2:2e:2c:75:ec:d1:d3:
         af:ca:5f:be:ca:b3:3d:92:95:ab:39:b3:02:79:23:11:4b:6f:
         94:1a:77:d6:45:4b:74:28:5d:ea:2a:df:06:da:94:1e:de:ce:
         59:7a:bb:e5:4c:55:90:bf:19:6b:2d:aa:b3:78:58:7c:2d:46:
         a9:e7:da:1f:ff:61:6f:11:38:29:d9:89:da:dd:0e:c2:f0:b5:
         79:19:7a:83:72:9c:1d:a6:f2:4c:ba:92:c8:ee:5a:b5:4f:bc:
         e6:dd:b3:58:4d:07:68:04:74:11:ba:16:bc:46:e7:cb:27:89:
         ca:cf:04:ca:38:90:63:32:c2:9d:d3:a2:5c:32:d2:be:ab:e0:
         d8:96:3d:45:af:f6:91:03:71:18:ae:95:b9:c8:b9:9e:00:e5:
         37:e6:13:d0:9b:13:2f:a3:4c:c8:7c:dc:21:05:27:b5:d6:a9:
         16:b6:9a:ad:fb:c2:03:37:80:6c:cb:cd:e6:9f:0e:85:c8:0f:
         80:25:ae:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----