Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS204375.roa
File:                     AS204375.roa (raw, json)
Hash identifier:          JfHL0Iqfh4xuxFaX/DV4NqJqLC/73lTUWRWa7pHGJM0=
Subject key identifier:   45:85:C5:98:19:C1:97:32:D2:F5:C6:65:7A:49:83:98:29:95:D8:9A
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       2BABC884D690F5E544E161C20D645905F4A0E807
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS204375.roa
Signing time:             Sat 08 Apr 2023 03:25:48 +0000
ROA not before:           Sat 08 Apr 2023 03:20:48 +0000
ROA not after:            Sat 06 Apr 2024 03:25:48 +0000
asID:                     204375
IP address blocks:        2a12:dd47:8043::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:ab:c8:84:d6:90:f5:e5:44:e1:61:c2:0d:64:59:05:f4:a0:e8:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:48 2023 GMT
            Not After : Apr  6 03:25:48 2024 GMT
        Subject: CN=4585C59819C19732D2F5C6657A4983982995D89A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:84:3f:66:57:d9:d7:75:f7:9b:0c:01:96:d1:
                    f4:bb:4a:83:89:0d:b1:94:03:34:66:f4:79:f1:69:
                    b2:8e:b9:36:79:ab:00:31:04:ef:5b:63:94:0c:c8:
                    aa:f3:bf:1f:a9:8c:62:be:82:fc:97:d8:ea:96:82:
                    05:85:65:7b:af:0f:bc:9e:e0:95:8a:cb:bb:3b:fa:
                    0d:29:17:ea:b3:58:0e:74:65:11:d6:48:44:25:e5:
                    cb:8d:84:ab:31:07:c6:c8:5b:09:ef:c2:e7:89:ad:
                    ef:e9:d8:87:e9:f1:16:a6:00:08:06:61:22:6f:7a:
                    d5:5a:8a:c4:eb:64:31:d3:8b:85:b1:f0:83:e7:3c:
                    59:ee:1d:89:d3:98:76:a6:fd:69:a2:b7:54:7e:b2:
                    38:7d:f4:14:93:35:62:e9:26:b8:d4:b6:84:97:a3:
                    60:70:a0:af:5c:a5:08:bb:52:00:e8:e3:f4:89:18:
                    85:36:12:8b:5a:91:93:4c:4b:f0:0e:b6:c7:3a:76:
                    70:c7:2b:b7:b4:27:82:3a:b7:0d:19:74:d5:b4:96:
                    ef:ca:9e:96:ff:a4:cc:26:b5:1d:68:b3:65:51:44:
                    76:4c:c2:8d:5f:3d:31:d7:b1:56:22:eb:1e:ff:6f:
                    39:e4:71:9f:ea:3b:50:1a:25:75:c2:b8:5e:30:8d:
                    42:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:85:C5:98:19:C1:97:32:D2:F5:C6:65:7A:49:83:98:29:95:D8:9A
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS204375.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8043::/48

    Signature Algorithm: sha256WithRSAEncryption
         60:ce:2e:1f:6e:97:c5:40:b4:b9:19:f0:ff:da:b1:ef:36:40:
         f3:4f:10:a5:e2:a7:60:d3:91:2c:17:90:03:a7:b9:e4:3b:bc:
         42:f1:25:85:bf:c8:d5:e0:06:7a:7b:7a:24:c0:23:b1:27:d7:
         68:14:94:27:11:7b:f6:23:95:87:32:ac:df:4b:43:3a:88:c4:
         f0:ff:8f:03:82:ef:1c:a5:f3:7b:e8:71:52:45:72:de:6d:47:
         34:39:cf:f4:7a:b0:59:fc:23:bc:ce:30:42:7f:05:2b:f9:45:
         ed:9c:79:54:9b:37:e7:09:52:8e:57:3b:af:d5:4b:fa:f8:f5:
         65:15:e1:0d:aa:79:cf:e4:3c:1a:36:44:5e:59:7f:7a:6e:1d:
         1b:0e:64:a6:5e:f9:d1:e9:eb:44:a7:52:53:eb:c7:2e:9a:39:
         e7:f5:d8:11:13:55:5f:31:c1:92:16:fb:7e:39:fa:84:6b:b7:
         40:54:68:a9:c2:01:22:0e:cb:9f:2c:2f:59:15:20:51:62:a3:
         73:ee:e5:e1:eb:21:58:a5:ba:54:a6:49:7e:50:10:52:3f:b7:
         6d:43:74:e6:67:ba:5b:43:f3:2e:9d:9d:0e:7e:ca:fc:a4:1d:
         ed:c5:5e:58:62:1b:b0:26:11:df:92:0d:7d:ad:55:77:34:ad:
         7a:aa:2e:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----