Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS208690.roa
File:                     AS208690.roa (raw, json)
Hash identifier:          mt2zO7GHhsasEgAykdsXj+NA9/LCgCqUtCeqBOPDAmU=
Subject key identifier:   04:A0:36:62:4C:F7:0F:62:0D:7A:0C:FB:E0:DE:E0:49:B6:5B:E1:87
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       60B901F078ADE8C314D4426CD9C0C29AAB0EE308
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS208690.roa
Signing time:             Sat 08 Apr 2023 03:25:44 +0000
ROA not before:           Sat 08 Apr 2023 03:20:44 +0000
ROA not after:            Sat 06 Apr 2024 03:25:44 +0000
asID:                     208690
IP address blocks:        2a12:dd47:fa00::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:b9:01:f0:78:ad:e8:c3:14:d4:42:6c:d9:c0:c2:9a:ab:0e:e3:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:44 2023 GMT
            Not After : Apr  6 03:25:44 2024 GMT
        Subject: CN=04A036624CF70F620D7A0CFBE0DEE049B65BE187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:72:55:b4:b4:1a:d2:b8:d5:b0:93:47:58:0b:
                    19:5b:64:4d:c6:cf:48:fe:c1:0f:b1:9c:8f:8b:8f:
                    fd:0e:5b:26:bb:c7:0e:53:d6:e2:b4:ea:0c:18:a8:
                    90:3e:18:5c:db:0e:31:4f:a2:94:89:73:1f:d6:eb:
                    87:bd:c8:4f:04:8f:f2:f1:4d:f8:ad:73:86:4d:d6:
                    5a:79:c0:fe:46:a1:75:14:b9:9d:35:f6:69:ac:95:
                    fe:20:31:7b:04:e7:62:7e:01:72:fa:d6:1e:3c:bc:
                    05:07:d9:d4:64:8f:f2:61:4a:34:05:13:d2:78:23:
                    7b:a6:36:1d:a8:e7:be:e5:94:9e:1b:d2:df:cf:45:
                    90:eb:c5:68:5f:4a:cf:df:6f:a5:b1:64:e0:25:e8:
                    66:51:ce:e0:ef:53:41:94:05:b2:c9:fb:7d:5a:21:
                    dc:f4:26:e9:a4:96:1a:1e:d2:91:01:d6:f2:db:aa:
                    20:d1:a1:09:e6:86:7c:ac:a2:f5:5f:aa:18:c3:5e:
                    fb:66:d8:9d:22:b6:a4:9f:8d:bf:c9:83:e7:a1:18:
                    74:81:82:f6:7e:ba:9f:02:33:04:49:e8:4d:05:49:
                    58:30:4a:43:5e:b9:46:0e:ec:c3:f7:7c:1b:85:4c:
                    5d:dd:7c:34:0e:9b:8b:96:c0:61:db:1b:88:7e:b2:
                    fa:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:A0:36:62:4C:F7:0F:62:0D:7A:0C:FB:E0:DE:E0:49:B6:5B:E1:87
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS208690.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:fa00::/40

    Signature Algorithm: sha256WithRSAEncryption
         75:ab:5c:b6:d0:20:a9:76:88:5d:d2:4a:8a:ac:20:9c:19:91:
         f2:b1:f5:7a:e0:49:0c:c1:19:e1:b6:94:07:ff:f3:41:6e:aa:
         ef:67:91:93:02:5e:b3:bf:69:95:fa:39:a4:c7:a5:31:ef:c5:
         69:5e:44:9b:cc:20:e0:6c:58:4b:0e:fb:12:84:7e:6d:f8:d0:
         c9:43:f3:dd:6e:42:ba:51:e9:35:7b:4c:e3:24:11:47:12:bb:
         ee:2c:29:db:eb:04:9b:2c:b4:fa:6e:6f:3b:0d:df:4a:58:d3:
         79:53:ba:62:04:b6:61:90:12:a8:97:dc:8f:5c:5b:0d:ad:4d:
         c1:18:6a:e8:1a:6c:ac:08:32:a1:3f:7e:46:fd:73:fc:1f:55:
         2f:8c:8d:f3:8b:d9:b4:61:45:2a:c8:06:64:29:2a:d7:d5:ed:
         a3:20:62:25:ee:0b:65:9a:68:18:8e:4e:70:49:f8:ba:ec:3c:
         82:29:a0:4b:18:5b:dd:9d:08:a7:b7:a1:19:d6:d8:11:43:84:
         09:1b:2a:dc:1a:ca:5f:a4:5c:5d:20:83:ae:07:08:a6:b7:dc:
         f7:56:d7:1e:c1:af:38:30:27:20:8c:b7:84:91:57:bd:13:1b:
         e5:87:d9:ba:67:91:61:81:4f:5e:2f:25:cd:c2:26:a5:28:01:
         dd:a5:3a:5b
-----BEGIN CERTIFICATE-----
MIIEjjCCA3agAwIBAgIUYLkB8Hit6MMU1EJs2cDCmqsO4wgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjU3ZGNiYTlmYzdiMGVmMWYzY2M4MGExYWVlMjJjMDAx
OThlNzY3YTAeFw0yMzA0MDgwMzIwNDRaFw0yNDA0MDYwMzI1NDRaMDMxMTAvBgNV
BAMTKDA0QTAzNjYyNENGNzBGNjIwRDdBMENGQkUwREVFMDQ5QjY1QkUxODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoclW0tBrSuNWwk0dYCxlbZE3G
z0j+wQ+xnI+Lj/0OWya7xw5T1uK06gwYqJA+GFzbDjFPopSJcx/W64e9yE8Ej/Lx
Tfitc4ZN1lp5wP5GoXUUuZ019mmslf4gMXsE52J+AXL61h48vAUH2dRkj/JhSjQF
E9J4I3umNh2o577llJ4b0t/PRZDrxWhfSs/fb6WxZOAl6GZRzuDvU0GUBbLJ+31a
Idz0Jumklhoe0pEB1vLbqiDRoQnmhnysovVfqhjDXvtm2J0itqSfjb/Jg+ehGHSB
gvZ+up8CMwRJ6E0FSVgwSkNeuUYO7MP3fBuFTF3dfDQOm4uWwGHbG4h+svpvAgMB
AAGjggGYMIIBlDAdBgNVHQ4EFgQUBKA2Ykz3D2INegz74N7gSbZb4YcwHwYDVR0j
BBgwFoAUtX3Lqfx7DvHzzIChruIsABmOdnowDgYDVR0PAQH/BAQDAgeAMFkGA1Ud
HwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5jby9yZXBvL0hZU1AvNi9CNTdEQ0JB
OUZDN0IwRUYxRjNDQzgwQTFBRUUyMkMwMDE5OEU3NjdBLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvdFgzTHFmeDdEdkh6eklDaHJ1SXNBQm1PZG5vLmNlcjBEBggr
BgEFBQcBCwQ4MDYwNAYIKwYBBQUHMAuGKHJzeW5jOi8vcnBraS5jby9yZXBvL0hZ
U1AvNi9BUzIwODY5MC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr
BgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoS3Uf6MA0GCSqGSIb3DQEBCwUAA4IB
AQB1q1y20CCpdohd0kqKrCCcGZHysfV64EkMwRnhtpQH//NBbqrvZ5GTAl6zv2mV
+jmkx6Ux78VpXkSbzCDgbFhLDvsShH5t+NDJQ/PdbkK6Uek1e0zjJBFHErvuLCnb
6wSbLLT6bm87Dd9KWNN5U7piBLZhkBKol9yPXFsNrU3BGGroGmysCDKhP35G/XP8
H1UvjI3zi9m0YUUqyAZkKSrX1e2jIGIl7gtlmmgYjk5wSfi67DyCKaBLGFvdnQin
t6EZ1tgRQ4QJGyrcGspfpFxdIIOuBwimt9z3Vtcewa84MCcgjLeEkVe9Exvlh9m6
Z5FhgU9eLyXNwialKAHdpTpb
-----END CERTIFICATE-----