Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS204518.roa
File:                     AS204518.roa (raw, json)
Hash identifier:          V12oncYox8y9dPmB7EFA2ENV6bL2vEwqQxv/NX5VbF8=
Subject key identifier:   BC:CF:4B:04:D4:9D:59:26:26:90:97:87:DE:BD:B3:9E:D1:06:93:48
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       40DF533EAE9172766767EF72A9ABCB6134932AA4
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS204518.roa
Signing time:             Sat 08 Apr 2023 03:25:46 +0000
ROA not before:           Sat 08 Apr 2023 03:20:46 +0000
ROA not after:            Sat 06 Apr 2024 03:25:46 +0000
asID:                     204518
IP address blocks:        2a12:dd47:8080::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:df:53:3e:ae:91:72:76:67:67:ef:72:a9:ab:cb:61:34:93:2a:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:46 2023 GMT
            Not After : Apr  6 03:25:46 2024 GMT
        Subject: CN=BCCF4B04D49D592626909787DEBDB39ED1069348
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e5:da:26:d4:06:3d:3f:3f:e6:63:af:ec:2e:
                    a5:c9:e7:63:78:94:fb:5c:1b:82:ea:77:3c:8e:5e:
                    4d:91:e1:f5:63:46:ed:c2:54:4b:48:07:8c:8b:88:
                    41:c2:7a:5c:a9:24:0e:f9:06:9c:67:46:90:65:66:
                    61:6e:7d:f3:b3:3e:72:0e:cc:09:a1:81:f4:31:d2:
                    7d:5f:b9:8b:3d:b1:3f:56:3d:15:f2:28:ad:2f:24:
                    1e:9a:cf:9d:64:55:04:d0:ca:d6:23:99:ee:95:43:
                    72:4e:95:6b:b4:51:69:41:01:82:50:6a:cf:c5:5c:
                    18:6c:7e:5d:10:85:49:db:92:3f:1e:3c:60:66:f1:
                    da:00:36:9b:bd:ab:e6:14:40:fe:9e:88:f8:9f:2f:
                    b2:37:df:e2:df:3d:c7:49:7e:b9:27:87:20:18:28:
                    b0:fc:72:89:07:99:43:74:e2:cb:20:ad:b5:bf:db:
                    69:e3:49:fe:80:e4:81:12:9a:7a:2b:fa:2c:c1:f8:
                    75:ef:14:38:2a:b7:96:a6:3f:75:50:8a:ca:4d:a0:
                    48:68:98:3d:1a:94:b3:72:b2:f4:8e:ce:10:6e:75:
                    7c:29:b7:34:56:de:1f:43:f1:a1:00:58:b8:3b:65:
                    6b:c7:4d:f2:48:f6:aa:f5:6b:82:16:71:89:f7:65:
                    30:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:CF:4B:04:D4:9D:59:26:26:90:97:87:DE:BD:B3:9E:D1:06:93:48
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS204518.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8080::/44

    Signature Algorithm: sha256WithRSAEncryption
         33:1b:0e:9b:cc:b8:b2:88:3f:6b:71:f0:66:b4:68:c7:0b:ee:
         04:ab:dc:45:c3:8b:f2:de:a6:f3:23:90:32:ee:92:65:46:3e:
         67:9b:c5:95:5e:b5:64:ec:6e:30:82:f2:da:fb:41:52:d9:8a:
         5a:2c:de:50:b3:64:26:99:d0:fb:59:4a:ba:74:c1:4e:07:0d:
         52:ee:cf:ce:f8:39:2d:e6:4f:43:54:40:a1:da:41:7d:b0:15:
         0d:eb:f7:19:3a:18:3e:70:48:d3:5a:c8:71:5c:07:4f:28:9d:
         4b:f1:25:f7:4c:1d:a0:19:67:cb:ba:ce:3c:60:ef:47:29:5e:
         58:b7:4b:f3:85:2c:5a:28:21:37:a0:1d:90:58:bc:07:c1:8d:
         e0:a7:32:48:0d:3c:d6:0c:7d:d8:31:76:72:80:13:54:c4:2c:
         19:ac:67:02:bb:3c:1b:c7:ef:8a:6f:b3:cb:04:79:81:77:4f:
         ec:62:e6:28:b9:b2:96:1e:0a:83:0e:0a:e4:68:e3:c0:b3:69:
         6f:62:21:ab:17:78:1d:87:3e:ab:1d:ff:06:fc:9f:30:c1:2c:
         bb:d5:a4:5c:ec:e1:1f:b1:c2:fe:4a:c0:b9:c8:de:84:89:b2:
         26:b9:57:d0:15:cc:71:55:57:dc:d9:43:93:06:68:51:2a:36:
         3c:c3:9f:bd
-----BEGIN CERTIFICATE-----
MIIEjzCCA3egAwIBAgIUQN9TPq6RcnZnZ+9yqavLYTSTKqQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjU3ZGNiYTlmYzdiMGVmMWYzY2M4MGExYWVlMjJjMDAx
OThlNzY3YTAeFw0yMzA0MDgwMzIwNDZaFw0yNDA0MDYwMzI1NDZaMDMxMTAvBgNV
BAMTKEJDQ0Y0QjA0RDQ5RDU5MjYyNjkwOTc4N0RFQkRCMzlFRDEwNjkzNDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC85dom1AY9Pz/mY6/sLqXJ52N4
lPtcG4LqdzyOXk2R4fVjRu3CVEtIB4yLiEHCelypJA75BpxnRpBlZmFuffOzPnIO
zAmhgfQx0n1fuYs9sT9WPRXyKK0vJB6az51kVQTQytYjme6VQ3JOlWu0UWlBAYJQ
as/FXBhsfl0QhUnbkj8ePGBm8doANpu9q+YUQP6eiPifL7I33+LfPcdJfrknhyAY
KLD8cokHmUN04ssgrbW/22njSf6A5IESmnor+izB+HXvFDgqt5amP3VQispNoEho
mD0alLNysvSOzhBudXwptzRW3h9D8aEAWLg7ZWvHTfJI9qr1a4IWcYn3ZTD9AgMB
AAGjggGZMIIBlTAdBgNVHQ4EFgQUvM9LBNSdWSYmkJeH3r2zntEGk0gwHwYDVR0j
BBgwFoAUtX3Lqfx7DvHzzIChruIsABmOdnowDgYDVR0PAQH/BAQDAgeAMFkGA1Ud
HwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5jby9yZXBvL0hZU1AvNi9CNTdEQ0JB
OUZDN0IwRUYxRjNDQzgwQTFBRUUyMkMwMDE5OEU3NjdBLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvdFgzTHFmeDdEdkh6eklDaHJ1SXNBQm1PZG5vLmNlcjBEBggr
BgEFBQcBCwQ4MDYwNAYIKwYBBQUHMAuGKHJzeW5jOi8vcnBraS5jby9yZXBvL0hZ
U1AvNi9BUzIwNDUxOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoS3UeAgDANBgkqhkiG9w0BAQsFAAOC
AQEAMxsOm8y4sog/a3HwZrRoxwvuBKvcRcOL8t6m8yOQMu6SZUY+Z5vFlV61ZOxu
MILy2vtBUtmKWizeULNkJpnQ+1lKunTBTgcNUu7Pzvg5LeZPQ1RAodpBfbAVDev3
GToYPnBI01rIcVwHTyidS/El90wdoBlny7rOPGDvRyleWLdL84UsWighN6AdkFi8
B8GN4KcySA081gx92DF2coATVMQsGaxnArs8G8fvim+zywR5gXdP7GLmKLmylh4K
gw4K5GjjwLNpb2Ihqxd4HYc+qx3/BvyfMMEsu9WkXOzhH7HC/krAucjehImyJrlX
0BXMcVVX3NlDkwZoUSo2PMOfvQ==
-----END CERTIFICATE-----