Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS204829.roa
File:                     AS204829.roa (raw, json)
Hash identifier:          TNbyvoBqhRvCXzfOVQ1vc7c3rGIazYlgXE+E8+rQeAE=
Subject key identifier:   09:01:D8:B9:6B:6B:74:67:46:D5:01:99:EE:B5:3C:41:79:D6:0A:F5
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       77766AE6F54FC42BA42DFD1E9B65AEF2F595449F
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS204829.roa
Signing time:             Sat 08 Apr 2023 03:25:43 +0000
ROA not before:           Sat 08 Apr 2023 03:20:43 +0000
ROA not after:            Sat 06 Apr 2024 03:25:43 +0000
asID:                     204829
IP address blocks:        2a12:dd47:8100::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:76:6a:e6:f5:4f:c4:2b:a4:2d:fd:1e:9b:65:ae:f2:f5:95:44:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:43 2023 GMT
            Not After : Apr  6 03:25:43 2024 GMT
        Subject: CN=0901D8B96B6B746746D50199EEB53C4179D60AF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:17:2e:1f:18:06:79:4a:3b:22:f2:61:a7:5c:
                    10:d6:eb:4c:ef:87:38:ec:f9:cb:ae:b9:0e:1b:25:
                    f1:02:20:71:ca:80:9a:e8:68:9d:3d:74:f1:a0:de:
                    36:04:dc:0e:2a:c7:bc:31:c7:dd:50:06:33:f7:ad:
                    8e:18:bb:b0:d3:6a:cd:fc:9f:3d:45:94:50:f7:a8:
                    af:9a:71:b2:82:d6:8c:62:85:28:a7:e0:2e:f2:fb:
                    90:1a:a3:76:d4:60:9c:0f:17:19:dd:c5:fb:f9:8d:
                    c8:26:c0:86:40:ad:ab:70:ef:ae:57:38:bb:d1:0c:
                    63:d9:40:dc:d4:3b:96:ca:d0:05:b0:4b:e6:1c:40:
                    2a:85:62:f9:a3:23:6a:5d:59:0f:3b:cf:40:32:fe:
                    2a:8f:c0:6b:8f:e4:93:1f:d5:49:87:27:eb:4c:f2:
                    88:c2:9c:26:f0:68:38:b9:7a:e2:25:ae:a1:f3:8c:
                    c9:e3:a8:b0:04:e8:5e:7b:f2:58:fa:41:90:72:e0:
                    c1:ba:f2:11:41:21:ba:c7:97:88:69:76:71:c8:7f:
                    c3:36:7d:9f:54:b8:d5:c8:e5:2a:09:20:48:bb:a0:
                    07:bb:8c:ea:c5:a8:67:eb:48:f1:dc:80:fb:b4:06:
                    17:b4:f0:57:e5:72:ba:24:91:37:4b:ac:ae:12:e8:
                    95:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:01:D8:B9:6B:6B:74:67:46:D5:01:99:EE:B5:3C:41:79:D6:0A:F5
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS204829.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8100::/44

    Signature Algorithm: sha256WithRSAEncryption
         74:08:47:29:3b:8d:26:fe:23:1e:ba:da:47:21:60:c3:bb:0a:
         ca:91:ec:0d:16:63:f5:21:45:b3:9d:1a:1f:72:6f:9f:a3:96:
         dc:f4:61:92:91:8c:26:97:41:2b:bb:38:10:37:3a:c6:c1:76:
         bf:7d:d7:5b:97:03:fa:e5:76:99:75:52:2a:7e:92:28:e9:1d:
         f9:29:8e:1f:7b:ae:89:70:83:b6:6b:68:57:6f:2d:55:e1:4d:
         af:57:e4:2c:46:01:81:21:05:39:ca:61:0e:51:c5:ff:82:68:
         98:b9:62:64:f7:76:94:7a:85:6a:07:63:e0:fa:df:22:73:4b:
         e7:1f:fc:cf:22:b0:ef:57:55:2d:83:b7:39:0b:fd:71:d5:04:
         61:dc:b6:ec:30:2c:23:1b:7d:88:e3:68:c4:72:cc:00:b3:9c:
         73:8d:16:48:0f:2d:ee:33:3e:ad:f8:ec:d8:41:03:bc:82:99:
         b6:0d:60:ec:f6:56:31:91:65:27:40:0c:dc:87:b5:b9:31:8f:
         c4:3b:60:8b:d3:44:33:b9:a7:fa:bb:5d:16:b0:c4:cc:8c:4d:
         9f:79:cb:e4:41:c7:31:b8:77:01:5d:59:6a:8b:57:e2:89:4e:
         f6:c2:99:ec:73:76:b4:77:93:52:a0:41:52:12:4e:ba:dc:59:
         1d:a4:13:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----