Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS203062.roa
File:                     AS203062.roa (raw, json)
Hash identifier:          r/UxGtY9/qne7NdocziRUDjBzQDoTXi4ZBLA1YmR9wA=
Subject key identifier:   71:DE:D6:40:D7:64:C7:E0:86:22:F9:A8:EB:08:14:ED:41:A6:14:F1
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       24245C816A899951875B107FD76713DF7F35C270
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS203062.roa
Signing time:             Sat 08 Apr 2023 03:25:28 +0000
ROA not before:           Sat 08 Apr 2023 03:20:28 +0000
ROA not after:            Sat 06 Apr 2024 03:25:28 +0000
asID:                     203062
IP address blocks:        2a12:dd47:802a::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:24:5c:81:6a:89:99:51:87:5b:10:7f:d7:67:13:df:7f:35:c2:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:28 2023 GMT
            Not After : Apr  6 03:25:28 2024 GMT
        Subject: CN=71DED640D764C7E08622F9A8EB0814ED41A614F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ec:82:ea:c5:ef:d3:70:3a:d1:14:f8:ad:66:
                    3a:bf:b6:c8:78:8c:50:79:ef:93:9d:79:f7:c4:63:
                    b8:98:30:c7:56:cd:dc:61:6f:67:3c:36:a0:f1:77:
                    b5:74:ac:0c:79:9b:90:70:28:2d:33:e4:9d:ec:80:
                    8e:ab:2a:dc:75:4b:42:4e:8d:82:ff:08:7b:e0:95:
                    46:ef:0e:e6:b0:60:a6:0a:51:81:f4:92:22:3b:b0:
                    7e:1c:11:ee:0c:ed:62:62:47:ea:63:bb:10:7b:6e:
                    85:7a:3b:0c:bd:e0:73:00:c7:45:65:8b:0f:93:17:
                    29:1a:54:d1:eb:41:2c:0e:25:e2:73:88:ba:52:19:
                    2e:27:c6:50:60:c7:0a:ca:78:3c:14:1a:08:21:4e:
                    e6:e0:0a:d7:d1:ec:61:8c:96:1a:59:e5:b8:73:4a:
                    f6:5b:07:ae:53:5b:91:f4:86:1b:89:9f:a9:9d:37:
                    e9:87:45:04:ad:99:06:7a:9e:25:52:3d:a2:4b:34:
                    d5:e3:d6:c6:ae:fb:b0:51:3a:ca:20:19:e2:d4:4b:
                    e7:e4:e5:29:5c:e4:dd:66:db:7a:68:60:22:43:59:
                    ec:6d:94:d5:c2:07:93:1a:57:b5:70:a1:e0:93:57:
                    80:d0:4b:4f:88:3b:64:b0:20:af:ee:84:54:77:2f:
                    36:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:DE:D6:40:D7:64:C7:E0:86:22:F9:A8:EB:08:14:ED:41:A6:14:F1
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS203062.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:802a::/48

    Signature Algorithm: sha256WithRSAEncryption
         b9:fe:4a:3e:18:f1:5d:45:89:02:90:a1:40:a1:36:c0:f3:fa:
         63:34:4a:a5:81:17:38:3b:4a:96:69:1f:7d:48:fd:84:b4:12:
         f3:83:bf:f8:56:0e:3b:1d:24:cb:a2:d4:7f:8a:47:45:5b:94:
         ba:ad:3c:d6:9e:1c:eb:e4:09:26:c8:1f:d9:d3:df:73:ce:e3:
         b8:8d:da:89:d0:e8:c2:91:b3:14:a0:fa:22:99:6c:d4:24:b4:
         9f:a7:72:a0:fb:a0:79:41:e0:16:9c:f3:e0:1f:f7:c6:57:a3:
         02:18:9e:ba:71:93:34:ad:a3:b1:d2:e5:8b:89:46:f6:8d:2b:
         15:43:05:46:75:dc:43:7d:5e:4d:f9:29:46:7f:74:89:00:de:
         f5:a8:25:ae:76:e6:19:fd:c7:1a:66:ea:46:1f:ec:52:c6:ad:
         1a:e3:47:79:be:a5:7a:66:c7:5f:96:9a:33:90:f0:ce:7d:02:
         b8:54:62:de:ef:e5:f3:13:8e:48:ce:37:b1:29:bf:99:8d:b7:
         70:cd:54:2d:2f:8a:1f:02:4e:fb:de:ed:f7:f6:62:52:fb:d6:
         8b:fb:ee:28:8d:11:20:ba:1d:ac:9c:b1:56:9f:36:f5:9b:16:
         2e:5b:d1:61:31:32:33:2a:ad:ac:fe:c8:17:c0:e2:b6:39:fe:
         83:51:3e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----