Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS204676.roa
File:                     AS204676.roa (raw, json)
Hash identifier:          DnnzJMJKI2Bp/JjqkqWt/vHz1Zf0Kl17wFN7QkRZWhk=
Subject key identifier:   FC:00:8D:39:84:78:D4:24:BB:38:ED:11:21:87:15:78:35:22:A3:59
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       2A6496CAFECFD48C6F9057359D6331385AA38200
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS204676.roa
Signing time:             Sat 08 Apr 2023 03:25:31 +0000
ROA not before:           Sat 08 Apr 2023 03:20:31 +0000
ROA not after:            Sat 06 Apr 2024 03:25:31 +0000
asID:                     204676
IP address blocks:        2a12:dd46:8000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:64:96:ca:fe:cf:d4:8c:6f:90:57:35:9d:63:31:38:5a:a3:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:31 2023 GMT
            Not After : Apr  6 03:25:31 2024 GMT
        Subject: CN=FC008D398478D424BB38ED11218715783522A359
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:36:74:a3:fa:9c:70:c9:31:5d:ff:1f:33:f5:
                    4e:e6:be:5d:f4:c5:9f:23:bc:45:f4:17:d5:ec:57:
                    ae:de:9a:2b:2e:2d:ed:21:08:01:e5:c3:ee:af:16:
                    78:fe:43:14:17:79:68:f9:0a:b4:84:79:90:22:e6:
                    a2:80:dc:b0:c1:a4:70:f8:d4:4a:ef:4e:d6:44:66:
                    d0:56:6b:83:13:01:9b:30:d8:8d:c6:30:db:77:fa:
                    0e:53:e3:e9:05:52:b5:4c:f5:e4:51:6f:21:4b:59:
                    7c:ad:ec:f7:e5:a6:be:b5:09:d9:87:d3:b9:bf:71:
                    7a:5d:1e:4f:45:f8:9b:b1:94:90:71:1f:7d:62:cb:
                    97:ce:bd:53:bf:6c:bf:9f:3d:c4:2a:39:33:cc:78:
                    5b:c4:c1:af:0d:93:70:16:48:89:80:db:c9:eb:47:
                    62:82:27:82:eb:f6:82:cb:89:81:2f:4d:7c:a2:dd:
                    64:4a:63:29:67:c4:87:f1:12:16:d2:49:58:7f:ca:
                    d8:4c:02:5c:e4:b7:6b:54:ab:7a:59:33:b1:28:d3:
                    db:d0:dc:ff:88:f6:f0:57:12:a8:62:59:78:5b:5d:
                    9a:a9:f6:58:da:64:71:dd:80:e3:a3:45:ab:10:f0:
                    a1:e3:20:1f:3a:5b:12:8a:7b:c7:e7:e1:55:06:55:
                    ac:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:00:8D:39:84:78:D4:24:BB:38:ED:11:21:87:15:78:35:22:A3:59
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS204676.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd46:8000::/48

    Signature Algorithm: sha256WithRSAEncryption
         40:8b:fe:8b:fc:0a:07:96:0e:5a:c2:37:50:ea:e1:5a:a5:09:
         d2:4b:1e:9c:a3:49:02:e9:9e:98:b9:ea:33:98:37:c0:8b:e6:
         66:02:1c:5e:42:ae:01:87:13:82:7e:04:53:c8:a9:9f:dc:27:
         c1:0c:88:de:86:53:c3:6a:00:6c:b5:54:b5:eb:10:84:82:4b:
         91:50:d5:6e:60:0f:e7:d4:d4:3e:7b:2d:95:58:db:aa:07:5e:
         7d:dd:88:9f:dd:62:1b:6e:f5:fe:02:bd:c8:ec:6f:8d:66:1c:
         92:b4:bc:6e:f9:d7:c6:5f:a4:4f:3f:8d:4a:17:e2:f3:e4:ef:
         8d:b5:ad:82:2c:66:bf:06:56:1e:58:0e:ed:f1:a1:fd:ad:ab:
         22:ec:1a:08:df:c3:1e:c2:76:3e:6e:de:c0:33:c5:14:b1:5d:
         f4:81:ac:d0:23:12:6c:c0:c1:6b:05:0b:12:33:43:23:e7:a6:
         09:16:4c:a5:4e:e3:60:8c:22:51:5e:6f:cb:0c:36:88:2b:92:
         85:d1:71:01:a2:be:dc:22:ef:22:0e:0a:87:2b:9f:6c:b1:b0:
         47:4b:30:28:d1:40:4c:ac:64:34:cb:32:50:92:fa:75:3d:70:
         ee:e8:d9:a9:d0:8a:a2:8d:c7:dc:c7:58:e5:1f:d4:ac:7a:d0:
         50:26:9d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----