Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS204769.roa
File:                     AS204769.roa (raw, json)
Hash identifier:          C2IbySOE9AETuVR/4AQYLSEsLHTTL4hMy0NdSB3+ttg=
Subject key identifier:   55:24:AA:60:EC:74:B0:61:FB:05:A1:0F:C3:BC:B0:77:77:12:51:A7
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       637CC44518DA7F66EBD68D647EA1C968611600C8
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS204769.roa
Signing time:             Sat 08 Apr 2023 03:25:27 +0000
ROA not before:           Sat 08 Apr 2023 03:20:27 +0000
ROA not after:            Sat 06 Apr 2024 03:25:27 +0000
asID:                     204769
IP address blocks:        2a12:dd47:82a0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:7c:c4:45:18:da:7f:66:eb:d6:8d:64:7e:a1:c9:68:61:16:00:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:27 2023 GMT
            Not After : Apr  6 03:25:27 2024 GMT
        Subject: CN=5524AA60EC74B061FB05A10FC3BCB077771251A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:66:5e:8a:69:9d:0f:05:24:b5:10:b4:31:c0:
                    ce:f1:66:81:2c:c4:c7:f9:32:09:c9:3c:89:d1:db:
                    34:dc:86:40:6e:dc:8e:15:bb:f0:3d:22:ef:c6:7a:
                    ba:2c:4e:ce:bc:bb:17:e5:6f:92:f0:e2:e4:a6:0e:
                    c1:96:7e:b4:63:2f:df:08:8c:dd:d5:e6:c0:9b:97:
                    71:ac:61:72:f3:28:7d:8a:6a:8b:ee:a7:f2:c7:62:
                    86:20:60:17:92:92:e2:0c:d4:08:2b:62:03:bc:76:
                    8c:cb:3c:7f:59:c2:36:42:3f:e4:8d:b8:14:df:41:
                    3a:9f:e7:49:71:73:5a:4a:39:60:f4:c7:1e:df:7d:
                    49:c7:8a:35:6d:5c:62:a4:4d:77:e3:2c:65:4b:77:
                    ed:b9:5b:fd:2c:b6:aa:cd:fd:e0:e0:23:d9:cf:7f:
                    39:c8:fe:46:74:e8:84:6a:86:e7:06:cd:ad:07:97:
                    3d:b4:0f:b8:43:74:f1:c5:19:c5:91:c8:f7:6d:da:
                    d5:bd:ba:fe:0a:1c:b2:88:ca:c1:26:f7:f4:22:56:
                    39:19:69:67:dc:a9:f4:e9:47:24:fd:10:c7:4b:2d:
                    16:95:b4:70:14:e1:40:2c:4a:d3:93:6e:eb:35:6e:
                    61:f9:db:ba:28:67:88:8d:e8:a8:13:5a:e1:fc:55:
                    40:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:24:AA:60:EC:74:B0:61:FB:05:A1:0F:C3:BC:B0:77:77:12:51:A7
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS204769.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:82a0::/44

    Signature Algorithm: sha256WithRSAEncryption
         97:05:46:dd:d2:9a:0b:ee:54:0c:15:fe:07:72:b5:a3:9e:d0:
         b6:54:87:a5:78:b3:cf:86:ae:82:76:c2:e8:72:20:5f:45:a4:
         52:06:a5:40:9b:e2:33:1e:80:58:35:a4:0f:bb:1d:c2:34:95:
         c4:89:82:9e:61:3c:55:08:8f:26:03:8d:fb:86:72:ad:00:b5:
         e1:96:cd:7c:e9:52:7c:da:12:5b:7c:38:a1:68:ef:95:c0:fc:
         f6:81:e6:c6:5a:91:ca:66:73:27:c4:1a:13:7a:22:7a:a3:88:
         70:e8:29:6c:86:ff:0d:ca:68:2b:68:a6:bc:bb:c6:a8:0c:8a:
         6e:56:a4:fb:a5:6f:5d:48:6b:bc:4d:9f:2c:6e:e3:1d:a2:a0:
         ca:ce:6a:23:c8:8b:03:64:13:a8:76:c5:51:29:99:b6:e7:ce:
         91:e7:2b:08:51:85:d1:2a:b3:36:54:5e:0c:57:c5:52:6f:fd:
         86:f5:32:7c:78:6e:14:18:60:7f:3a:fd:84:d2:89:e2:48:c4:
         da:cc:36:93:b1:59:e1:e9:fd:14:77:09:4f:b6:67:85:21:66:
         3a:2b:a7:c6:77:c8:2f:f5:5d:de:5f:0a:bb:21:2f:f2:bc:18:
         18:ae:47:df:6d:9c:9c:65:1c:a3:62:9d:0b:18:50:b9:dd:9d:
         97:fd:1e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----