Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS206042.roa
File:                     AS206042.roa (raw, json)
Hash identifier:          Hr6o2JQ6Dfh2lWdCph+ng57eAJ/xEy57RqOKDnn7D8Q=
Subject key identifier:   F7:91:94:7B:AC:4A:6E:35:8B:9D:EA:ED:C0:BD:CA:E6:B6:3B:10:DA
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       7955DCC743945B712A70198B32DD77956D71B524
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS206042.roa
Signing time:             Sat 08 Apr 2023 03:25:39 +0000
ROA not before:           Sat 08 Apr 2023 03:20:39 +0000
ROA not after:            Sat 06 Apr 2024 03:25:39 +0000
asID:                     206042
IP address blocks:        2a12:dd47:8390::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:55:dc:c7:43:94:5b:71:2a:70:19:8b:32:dd:77:95:6d:71:b5:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:39 2023 GMT
            Not After : Apr  6 03:25:39 2024 GMT
        Subject: CN=F791947BAC4A6E358B9DEAEDC0BDCAE6B63B10DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:2f:c7:23:32:f1:6c:b3:f9:0b:76:7e:36:7e:
                    47:11:ee:e9:74:3d:6e:ba:a8:b5:77:3e:1c:35:5b:
                    92:96:81:7d:42:57:70:fc:a5:aa:b7:a3:4c:9e:ab:
                    d1:a6:33:3a:0c:d4:49:d3:fd:d3:81:3a:07:14:5b:
                    ea:db:6a:e5:8d:0c:d0:d9:64:4e:7a:a5:5b:36:57:
                    0b:5e:6c:a8:94:95:34:13:e3:88:a6:a7:51:69:05:
                    02:aa:b7:cd:38:a0:fb:93:3d:cf:1e:88:59:83:d0:
                    96:6e:e1:60:ab:9c:d9:41:09:d0:b3:5d:75:49:33:
                    b9:02:98:f7:2d:d0:6c:25:1f:29:9a:a9:ee:7a:d7:
                    b8:7b:49:c2:a2:8b:52:a8:f1:3d:52:fc:14:42:03:
                    d0:41:21:29:68:b8:d5:0a:19:7e:80:3d:7c:03:14:
                    b4:6d:46:ed:81:23:9f:79:cb:ea:5e:96:e6:34:90:
                    6e:9b:17:89:14:96:fd:22:c9:78:54:05:81:27:b9:
                    c4:fc:48:d9:46:2b:65:7b:6f:47:ba:c5:37:55:4e:
                    c6:1c:1d:4b:fb:b6:f1:95:3f:b3:2c:af:37:1f:63:
                    82:26:35:b5:9d:a8:91:b4:41:e6:66:38:51:15:26:
                    79:e5:f9:ac:a2:02:a9:79:0a:a6:1f:f4:8e:71:03:
                    0f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:91:94:7B:AC:4A:6E:35:8B:9D:EA:ED:C0:BD:CA:E6:B6:3B:10:DA
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS206042.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8390::/44

    Signature Algorithm: sha256WithRSAEncryption
         69:de:ff:56:dc:c4:58:aa:e8:90:c6:75:cf:1d:6f:01:8d:5c:
         36:e7:6c:a3:cf:7f:31:7a:0e:30:eb:1b:96:db:6a:1f:2f:63:
         bc:83:a5:11:b2:ae:26:c9:37:85:e2:c3:ff:1e:a8:34:24:38:
         05:16:98:b8:61:c8:e0:66:66:38:27:f2:5c:7a:b0:eb:13:34:
         94:c6:f4:01:33:c3:fa:be:3d:da:de:77:89:b3:9f:e1:df:67:
         1a:a9:41:8d:0d:a1:bc:db:04:1a:ae:f8:b9:a4:72:0e:5d:ba:
         f5:e3:5f:16:68:3d:ed:09:74:d8:bf:87:30:95:00:a8:ca:bf:
         18:fd:60:40:c1:ad:54:84:57:9d:04:60:38:4a:27:8a:b5:1a:
         97:5f:4b:f0:92:a0:98:59:42:d3:2b:66:7f:e2:f7:c1:92:95:
         1b:b5:d2:28:bb:08:d9:dd:d1:96:c5:2b:42:59:4b:90:62:5b:
         3d:88:d3:cb:86:67:db:ab:d8:de:21:10:60:42:74:3f:09:61:
         87:cc:1e:4b:55:d5:36:4b:0f:f9:72:a2:71:a6:0f:8c:eb:a5:
         68:15:9f:7a:eb:f1:b3:d8:bc:1d:0b:31:6f:84:65:06:fe:3c:
         ff:92:c2:a9:4f:df:e3:06:36:67:df:c5:a0:96:70:92:99:d4:
         27:e2:c2:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----