Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS205421.roa
File:                     AS205421.roa (raw, json)
Hash identifier:          gHZCbAVOf7GHdxgGgfeh9ojcgIpYCKggvRQFKqa1xuw=
Subject key identifier:   25:BA:55:18:97:68:CB:22:B7:D7:27:D1:23:4E:8A:64:4C:FC:92:AF
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       436E0447A6B14055E2AE83F243A3F91215A2021B
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS205421.roa
Signing time:             Sat 08 Apr 2023 03:25:22 +0000
ROA not before:           Sat 08 Apr 2023 03:20:22 +0000
ROA not after:            Sat 06 Apr 2024 03:25:22 +0000
asID:                     205421
IP address blocks:        2a12:dd47:8220::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:6e:04:47:a6:b1:40:55:e2:ae:83:f2:43:a3:f9:12:15:a2:02:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:22 2023 GMT
            Not After : Apr  6 03:25:22 2024 GMT
        Subject: CN=25BA55189768CB22B7D727D1234E8A644CFC92AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a5:ed:dd:7b:5a:cb:83:b4:2e:04:12:e2:56:
                    04:5b:99:2f:2b:b7:58:40:95:07:df:65:24:00:ce:
                    2a:e7:73:14:5f:00:4a:73:ed:47:66:74:aa:69:98:
                    b3:70:9c:99:e5:12:81:c1:24:10:b0:83:10:ba:29:
                    f4:f2:5a:48:a4:7d:ff:01:93:61:7f:ff:df:77:b7:
                    21:27:de:bf:aa:3a:e1:73:34:4b:dc:1f:93:74:88:
                    a7:b8:b6:10:16:d2:8f:a7:2b:8f:10:4d:55:7f:53:
                    78:cc:50:19:1b:2b:d8:37:96:db:e7:5d:f5:ce:6b:
                    ca:3b:7d:da:16:1c:f8:4b:a1:c6:d1:55:fe:44:16:
                    06:d1:79:9e:62:fd:34:15:e8:20:b9:40:19:8a:d3:
                    8c:6a:af:5c:9a:de:82:d8:dc:0a:7b:a5:25:8a:75:
                    25:e7:82:38:5b:e0:da:1d:83:da:b6:7b:4b:16:39:
                    b9:a2:a8:46:d2:22:1a:53:5b:6e:97:97:eb:2d:d9:
                    67:f3:ae:10:c5:d9:6f:f3:84:bc:57:0e:cd:ff:5e:
                    91:04:6e:dc:57:ba:86:e4:5d:fb:21:82:0b:1b:b3:
                    c9:cf:52:e2:31:66:d0:99:0e:af:af:69:be:b6:db:
                    b5:c5:73:86:86:76:4d:a3:c4:c2:c6:74:44:23:a5:
                    ea:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:BA:55:18:97:68:CB:22:B7:D7:27:D1:23:4E:8A:64:4C:FC:92:AF
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS205421.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8220::/44

    Signature Algorithm: sha256WithRSAEncryption
         b6:c4:6a:c4:39:bf:88:34:4e:21:1f:a1:73:f0:a1:17:14:a1:
         9f:7f:17:9f:53:a6:28:37:f0:8c:91:b1:31:30:43:3f:7f:bc:
         87:72:d7:5a:c6:f6:a4:0f:86:a4:59:d7:78:47:77:67:e4:df:
         5e:00:7b:4c:ad:a6:de:a7:74:84:ca:7b:b5:97:3b:44:a3:93:
         99:66:d1:fa:49:b6:8a:c3:2b:c7:a7:5c:6b:91:58:06:c9:2e:
         2a:cd:06:8d:8c:e5:57:10:72:cd:cf:82:98:53:38:96:0c:86:
         a2:a6:14:5f:ff:3b:02:2c:ed:2f:c3:6a:a6:ee:53:41:4f:01:
         0e:bb:5a:4a:5c:15:25:68:79:9d:0d:0b:5c:2f:05:7b:c8:ab:
         10:02:25:0d:02:09:01:67:44:a9:1f:00:ca:3d:97:1d:1a:6c:
         a2:5a:8c:93:8b:91:37:a8:11:b0:51:55:f3:4c:88:39:8c:28:
         51:fb:52:1a:8f:31:ac:7a:2f:76:a8:0c:ea:fe:78:2c:00:ef:
         ea:cc:bc:68:f5:26:83:e0:42:3d:4d:ca:81:ba:25:3e:72:0f:
         4a:12:0b:48:6c:b3:df:d4:d5:0b:66:a0:d9:03:dd:0f:ea:aa:
         4d:d5:eb:11:ea:eb:2c:bb:ee:f3:59:e7:8c:a0:8f:56:ab:67:
         21:79:31:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----