Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS204844.roa
File:                     AS204844.roa (raw, json)
Hash identifier:          QHCH9R5PjEBIbSRqdkOUGkBZUY56YS2RDULwWKGFpQo=
Subject key identifier:   93:9D:C3:21:0B:63:55:AE:11:D5:DD:F5:5D:F1:43:42:27:CD:5B:8F
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       3CA1CF43241548A4CC3BECF500062CFF6564EDA5
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS204844.roa
Signing time:             Sat 08 Apr 2023 03:25:42 +0000
ROA not before:           Sat 08 Apr 2023 03:20:42 +0000
ROA not after:            Sat 06 Apr 2024 03:25:42 +0000
asID:                     204844
IP address blocks:        2a12:dd47:8003::/48 maxlen: 48
                          2a12:dd47:8044::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:a1:cf:43:24:15:48:a4:cc:3b:ec:f5:00:06:2c:ff:65:64:ed:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:42 2023 GMT
            Not After : Apr  6 03:25:42 2024 GMT
        Subject: CN=939DC3210B6355AE11D5DDF55DF1434227CD5B8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d4:cb:61:6c:45:d9:0c:9f:98:9b:51:11:d4:
                    6a:eb:3f:63:41:27:9d:a0:57:a8:b4:f5:35:24:15:
                    79:89:1e:1b:31:80:c1:d3:f8:3a:98:fa:27:f3:67:
                    25:06:f9:38:97:a6:8c:d8:f3:d9:bb:bc:67:b0:37:
                    75:4b:dd:a4:eb:33:32:0c:32:37:38:05:f4:e1:04:
                    56:8d:d1:53:d7:4b:a4:2e:4c:95:44:14:2d:4f:83:
                    01:c4:15:e0:b5:25:1f:ff:29:9b:7b:47:22:8f:05:
                    af:42:f7:63:6d:f4:d1:37:f4:cd:d5:cf:b0:f4:17:
                    6c:ac:89:57:fb:37:bc:c2:75:d9:39:22:41:de:a9:
                    cc:aa:98:ce:f5:be:fd:29:10:65:c5:6c:a6:bd:37:
                    2f:ba:3e:32:4c:73:a4:24:04:c1:19:dc:1e:48:82:
                    45:10:4b:de:8c:9b:be:13:30:a1:44:b3:92:69:a0:
                    76:66:f6:1a:6e:72:5b:84:f0:07:16:6f:3e:0a:a4:
                    85:57:60:a5:66:e7:b9:e0:e0:2a:33:33:5f:77:16:
                    be:86:26:cd:42:20:c7:16:6c:11:83:2f:03:45:f5:
                    df:a7:19:bc:50:4b:6d:d0:e1:07:af:ac:8b:32:c3:
                    2f:78:e5:6a:fa:0a:58:2f:e6:e5:44:b4:de:35:af:
                    43:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:9D:C3:21:0B:63:55:AE:11:D5:DD:F5:5D:F1:43:42:27:CD:5B:8F
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS204844.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8003::/48
                  2a12:dd47:8044::/48

    Signature Algorithm: sha256WithRSAEncryption
         47:d3:e8:15:96:80:4c:77:6b:f3:d8:e9:94:51:3f:18:1d:f3:
         78:d1:c9:6e:90:a1:d4:8f:70:63:32:af:26:34:74:13:a3:4e:
         31:e0:28:9a:df:c3:d6:11:3c:68:55:d4:6b:9f:e6:fd:ee:f1:
         5c:35:5b:45:db:9d:82:49:aa:c9:ae:2c:91:dc:c0:36:5d:29:
         de:1f:3b:3f:90:5d:9a:37:ec:ea:92:5d:67:15:f3:10:f5:fc:
         be:ef:65:1f:aa:ce:0a:49:e0:38:65:46:52:fd:75:70:20:32:
         fd:dc:b4:a9:04:76:3c:1e:18:c2:e4:1d:0d:97:c0:80:a4:ea:
         a8:2e:7c:ec:45:9c:2d:a7:c8:5c:5b:c4:8c:bd:dc:05:9d:a8:
         22:84:57:ac:36:a3:82:37:63:51:77:d4:50:67:05:20:5b:d6:
         e0:a4:93:b6:92:cc:e4:0b:60:42:4a:b0:a3:c0:bc:81:b9:40:
         55:82:c0:4d:a4:e7:15:f6:b4:ba:0c:30:32:f1:32:73:27:4e:
         57:56:4e:dd:71:12:05:03:51:24:42:bf:97:e2:26:04:53:4e:
         4a:bd:da:c8:34:d1:79:9a:c4:f5:7d:1a:22:b9:13:f2:a2:80:
         d2:21:52:1e:e5:b3:ef:48:39:68:4e:eb:c4:7b:33:a4:ec:1e:
         25:7e:5a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----