Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS204876.roa
File:                     AS204876.roa (raw, json)
Hash identifier:          Ecm8NkPEbV7Y85YsvYBRdu071kqbu3Fd8XaoPUg1uUo=
Subject key identifier:   F9:D9:BC:AD:FC:25:55:A1:81:E0:78:DA:67:52:95:D0:B9:20:DA:72
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       4E648B53C5EB85027DCA59819A24A46E0AA79A67
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS204876.roa
Signing time:             Sat 08 Apr 2023 03:25:41 +0000
ROA not before:           Sat 08 Apr 2023 03:20:41 +0000
ROA not after:            Sat 06 Apr 2024 03:25:41 +0000
asID:                     204876
IP address blocks:        2a12:dd47:8008::/45 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:64:8b:53:c5:eb:85:02:7d:ca:59:81:9a:24:a4:6e:0a:a7:9a:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:41 2023 GMT
            Not After : Apr  6 03:25:41 2024 GMT
        Subject: CN=F9D9BCADFC2555A181E078DA675295D0B920DA72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:7b:f7:1d:c7:37:be:f7:3c:db:69:9d:03:0e:
                    6a:41:cf:9e:a9:85:62:b7:43:47:62:29:e2:fa:64:
                    b9:3f:4a:ec:e3:06:98:99:17:0e:7e:a6:6f:29:03:
                    0f:81:0d:68:46:eb:68:74:9e:b6:0c:01:3e:1b:46:
                    48:75:2f:09:3f:8b:80:24:ce:51:d8:f6:cf:96:46:
                    b0:56:ea:88:f5:eb:51:4c:76:4e:59:3c:d9:5c:02:
                    ab:ea:4d:5f:97:d7:27:4e:5a:4f:a8:61:02:86:f3:
                    8a:9a:b6:4e:c8:d6:f4:8a:49:b3:95:cd:c1:09:78:
                    10:27:6f:3e:d7:4a:7e:9b:d7:8f:e2:5f:bd:46:be:
                    28:41:67:5c:ff:a9:e9:5c:50:96:74:3f:7c:85:b7:
                    b5:a7:ba:53:fe:11:2d:ff:e0:3a:59:e4:05:a1:85:
                    3e:06:7a:af:b1:70:cf:7a:35:6d:77:e1:41:24:16:
                    8e:ab:e7:5f:7f:e9:c1:eb:70:c2:f9:d5:e4:ca:26:
                    56:45:09:dc:7d:61:11:45:59:0f:94:c4:61:2b:12:
                    75:5a:c3:d8:95:61:b2:e9:67:69:d7:89:e1:c0:6f:
                    60:e1:23:32:5a:e6:ad:ae:6e:72:d8:dd:cb:49:7e:
                    7e:f9:27:0f:2c:c0:b0:f5:38:b7:72:a4:96:27:c5:
                    8c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:D9:BC:AD:FC:25:55:A1:81:E0:78:DA:67:52:95:D0:B9:20:DA:72
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS204876.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8008::/45

    Signature Algorithm: sha256WithRSAEncryption
         93:e4:cd:3d:09:8d:57:74:d6:1f:b7:d8:6c:13:06:20:ad:aa:
         4c:79:ec:70:fc:b4:2b:d8:a3:57:a0:99:0a:29:81:f9:71:46:
         65:c8:30:a2:e3:79:a0:65:b8:b0:c2:bd:15:4a:3e:49:01:60:
         54:49:86:43:7c:95:5c:e8:fc:f5:4f:75:01:1d:e9:8c:78:87:
         1a:ec:5c:7a:39:c0:a3:67:26:4d:26:26:84:51:a9:b4:d5:7d:
         46:93:f8:d5:da:3c:13:4b:47:51:30:62:90:2b:41:6d:21:4d:
         80:28:6a:a5:e0:ba:64:ea:fe:b7:8e:6e:0d:94:45:59:63:d8:
         e6:13:bd:a8:aa:9f:7a:51:62:57:7e:4d:80:51:26:0e:c4:18:
         14:e3:14:67:71:53:17:9c:87:a5:b4:3c:9d:7e:26:c6:4b:29:
         b1:aa:7d:09:6f:b2:19:d4:04:e8:0a:38:7d:1f:ef:01:1a:65:
         b4:af:fc:e7:df:f8:77:95:2c:da:b0:19:b3:c4:30:16:38:cf:
         cc:79:20:50:fc:41:b6:7d:d0:15:1f:eb:aa:f7:85:19:38:a0:
         7f:d8:58:c0:64:df:77:21:8f:78:ed:47:bc:98:18:b4:06:08:
         a8:2c:e8:36:07:cd:4e:1d:a6:74:97:03:13:23:6e:34:c6:7c:
         16:08:2b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----