Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS208029.roa
File:                     AS208029.roa (raw, json)
Hash identifier:          KxypomzyX8sGNkk/8Ky5CDp+oyfWlz9nS1MAJXF2pfM=
Subject key identifier:   F2:0A:41:F0:36:F0:2B:F4:E6:AA:82:CF:A5:A4:3F:E8:87:5F:A4:C9
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       70AB13EBCB509FAE427B390851B0BD0829247E6C
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS208029.roa
Signing time:             Sat 08 Apr 2023 03:25:48 +0000
ROA not before:           Sat 08 Apr 2023 03:20:48 +0000
ROA not after:            Sat 06 Apr 2024 03:25:48 +0000
asID:                     208029
IP address blocks:        2a12:dd47:8041::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:ab:13:eb:cb:50:9f:ae:42:7b:39:08:51:b0:bd:08:29:24:7e:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:48 2023 GMT
            Not After : Apr  6 03:25:48 2024 GMT
        Subject: CN=F20A41F036F02BF4E6AA82CFA5A43FE8875FA4C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:33:57:6f:14:88:f1:28:06:43:77:3d:2a:85:
                    47:4c:b1:6a:c7:6a:27:d1:12:c5:e9:ec:8e:b0:80:
                    46:0e:1f:93:c3:1e:5c:37:ed:b2:6a:19:ec:5e:6f:
                    a6:0c:dc:ae:ba:d5:bb:ee:e5:1c:cb:74:fd:ee:a6:
                    35:88:1b:7b:0a:c9:94:f7:db:ce:4e:43:94:3b:f9:
                    d5:a3:f7:4f:a7:5e:30:21:cc:32:c7:97:53:5a:59:
                    b0:7c:46:e6:ed:71:fe:6b:3b:b4:4a:96:05:d4:51:
                    7b:7d:5e:99:b5:6d:9a:b6:e6:a7:ee:4b:eb:7e:02:
                    37:f1:15:f1:7f:05:94:c6:ac:ae:7f:66:ca:6d:4a:
                    c8:e8:71:6a:0f:30:4f:f0:02:e1:ea:9e:91:69:2a:
                    b8:4d:b9:c8:74:54:fc:53:5f:f0:18:4a:71:a3:3e:
                    d2:f6:cc:5c:15:a3:3f:b6:40:a3:63:de:bb:eb:fc:
                    97:b1:ce:2b:19:49:3e:27:38:28:ae:72:30:f0:d5:
                    a9:d7:ef:f8:8c:4f:71:76:2f:c8:06:3e:09:df:cb:
                    4e:0c:e9:2f:e4:5d:70:ef:d1:c7:d9:ef:36:01:df:
                    ac:ba:0d:1e:cd:14:52:a5:5f:b8:ed:12:5e:e7:9a:
                    45:f2:2f:ea:5e:1f:91:b6:d2:b9:67:9d:f8:50:44:
                    b1:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:0A:41:F0:36:F0:2B:F4:E6:AA:82:CF:A5:A4:3F:E8:87:5F:A4:C9
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS208029.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8041::/48

    Signature Algorithm: sha256WithRSAEncryption
         a8:8a:d9:b9:61:f2:3a:97:09:48:7b:14:7e:48:91:c6:aa:89:
         01:12:4a:4a:ff:b1:08:ad:4b:3f:25:e0:34:b0:e9:df:79:49:
         c6:82:1f:8e:83:e5:46:1a:b8:23:7d:c6:56:70:a2:5d:20:1d:
         49:6e:8f:01:1c:41:82:00:f4:92:6f:b3:f6:47:e7:c7:fa:1b:
         02:d2:1d:1f:af:02:3c:f6:ab:ea:fb:b2:7e:75:dd:a1:4a:ea:
         02:e7:ce:80:de:1b:d7:f4:86:1b:bf:d8:b4:6d:3e:eb:be:15:
         eb:33:3b:a7:f3:6b:cf:6e:79:86:0d:14:3f:51:38:3b:37:37:
         bc:f3:2e:5b:44:1a:c7:2f:cf:67:ee:99:45:85:5c:22:e2:1f:
         f2:3c:9d:e8:47:7a:49:3d:7e:18:a9:37:42:3a:21:66:74:b0:
         fb:3b:0e:7f:a0:79:1e:6a:4c:c9:41:41:5c:83:f9:af:97:c6:
         47:2a:b6:b6:64:24:8a:60:dd:00:c2:5e:7e:67:b2:3d:7a:17:
         82:46:d9:45:c6:33:3b:f2:22:a1:26:81:a6:37:85:1f:66:70:
         ca:62:cb:5b:cd:ba:4b:ee:42:ce:15:61:57:c7:95:5f:ce:ca:
         bc:08:93:8d:c3:cd:cc:f8:4c:78:45:4d:bc:7a:6d:1f:fe:46:
         58:d0:4e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----