Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS205848.roa
File:                     AS205848.roa (raw, json)
Hash identifier:          N0xuGAXLSsvBHac2odV1S0xCSAVMdjrdRo5p0rdGpxU=
Subject key identifier:   D4:15:C4:4F:4A:A2:A7:EC:08:44:24:FE:C0:E4:CA:D0:A3:18:2B:89
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       257F4B158A57701C7AF60511698E82DA83833D95
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS205848.roa
Signing time:             Sat 08 Apr 2023 03:25:26 +0000
ROA not before:           Sat 08 Apr 2023 03:20:26 +0000
ROA not after:            Sat 06 Apr 2024 03:25:26 +0000
asID:                     205848
IP address blocks:        2a12:dd47:8049::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:7f:4b:15:8a:57:70:1c:7a:f6:05:11:69:8e:82:da:83:83:3d:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:26 2023 GMT
            Not After : Apr  6 03:25:26 2024 GMT
        Subject: CN=D415C44F4AA2A7EC084424FEC0E4CAD0A3182B89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:f1:ba:14:98:a1:89:f9:93:a2:50:be:1f:6d:
                    d4:24:75:13:cc:63:64:01:c3:b6:59:fe:fd:1d:4c:
                    2c:fc:56:09:91:31:83:18:16:32:7a:8f:b3:59:91:
                    58:1b:68:57:2f:56:07:01:71:61:ad:9d:cc:09:3e:
                    27:ee:f4:80:6d:ca:6c:99:42:e1:69:bc:34:05:3c:
                    fb:94:87:28:8b:a6:8f:64:c8:9b:6d:14:13:68:40:
                    98:4b:ec:4a:0a:41:c7:1e:4a:b5:ba:e9:61:cb:60:
                    5a:18:ce:5d:74:cd:a7:18:60:d2:61:e6:70:1b:63:
                    ec:b8:92:0f:5b:ec:8c:c2:09:7e:5a:a1:26:83:d3:
                    6a:df:fb:48:d0:0f:5e:f5:18:69:75:ef:de:45:7f:
                    a4:79:b4:f8:7c:e5:91:cd:22:00:68:fc:ea:ca:80:
                    34:f8:2b:fa:0a:85:36:a2:a0:c6:b0:0b:ef:d2:a0:
                    cd:5b:97:84:3f:5f:04:d9:14:4e:2e:91:bb:95:5a:
                    66:01:10:95:e0:0e:a1:dc:13:5a:f7:44:60:b8:19:
                    26:d6:2b:c8:38:e2:1f:b6:1a:28:2b:6c:f3:fd:6a:
                    31:c1:69:06:2d:1d:9a:c0:f9:a1:a0:4e:2a:e6:de:
                    1a:ab:0c:97:a3:4e:35:bb:39:5c:84:59:28:c6:e7:
                    09:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:15:C4:4F:4A:A2:A7:EC:08:44:24:FE:C0:E4:CA:D0:A3:18:2B:89
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS205848.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8049::/48

    Signature Algorithm: sha256WithRSAEncryption
         ad:bb:da:81:ef:75:cc:fc:5c:20:a6:55:cf:bb:4b:7a:2d:3f:
         58:62:b1:fe:70:42:f3:5f:13:20:85:f1:b1:cd:54:a1:c7:48:
         cd:7e:d5:37:ec:51:6e:b2:4d:c9:d2:54:00:39:4a:52:79:4a:
         43:32:7e:85:22:cc:11:90:85:93:c8:fb:4f:32:8b:ec:94:d6:
         07:52:21:29:87:97:97:59:72:f9:95:71:80:ee:a9:f7:97:94:
         71:0f:5a:51:75:9c:ea:f0:9e:f2:58:f0:13:2e:e4:cd:d2:fb:
         d4:a7:8b:eb:b4:f5:7c:dc:8e:36:ee:de:9d:12:ad:d4:17:5d:
         ca:e7:a2:9c:f5:b6:13:5b:53:a7:16:9b:58:ba:88:94:57:f2:
         a6:d2:7c:6f:9d:04:9c:9b:7a:51:8a:69:7a:c4:2a:4e:76:06:
         1b:2c:98:55:7e:29:06:1d:fa:6a:67:95:f3:74:5b:ed:c6:26:
         84:2e:fe:71:24:b1:cc:a9:c2:4f:01:e8:9f:10:23:34:60:e9:
         98:f9:b8:2e:ab:0f:9f:a6:ea:f5:87:52:6c:ae:9d:6a:58:0e:
         81:7e:5a:33:82:aa:53:89:21:48:d6:65:9b:7b:b5:8a:54:e8:
         0b:ec:9b:58:56:4f:46:29:1f:de:69:d2:b9:bf:a8:22:b6:ea:
         c0:d2:fc:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----