Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS203145.roa
File:                     AS203145.roa (raw, json)
Hash identifier:          X3e9I1x4WQePAkPK70IhaqPSdCJkgPEUjKSWz+rRgqQ=
Subject key identifier:   FE:FB:69:4B:7F:91:B9:40:38:E4:35:8E:2C:DC:81:F2:8B:CA:26:76
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       4AAC32809E179651AFE3C03BC1903C717B59F3BE
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS203145.roa
Signing time:             Sat 08 Apr 2023 03:25:37 +0000
ROA not before:           Sat 08 Apr 2023 03:20:37 +0000
ROA not after:            Sat 06 Apr 2024 03:25:37 +0000
asID:                     203145
IP address blocks:        2a12:dd47:8120::/44 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:ac:32:80:9e:17:96:51:af:e3:c0:3b:c1:90:3c:71:7b:59:f3:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:37 2023 GMT
            Not After : Apr  6 03:25:37 2024 GMT
        Subject: CN=FEFB694B7F91B94038E4358E2CDC81F28BCA2676
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:2d:0d:7d:3a:84:a6:c8:8a:c9:42:c9:aa:5b:
                    33:1e:16:61:3a:bb:03:c8:91:fc:b4:20:17:2f:23:
                    73:a9:dd:58:99:e6:e1:cf:39:1f:e9:33:b7:2e:c1:
                    64:61:b1:a0:a8:98:b2:47:c0:9c:90:30:fc:83:e5:
                    eb:d2:96:28:8c:23:c9:7c:87:db:d8:ae:de:8b:86:
                    82:36:17:8b:3c:e0:30:8f:25:1b:fc:f2:a8:a8:10:
                    89:f2:95:a9:b0:3a:e1:eb:a7:59:10:66:a4:4a:29:
                    85:1e:56:07:f3:f6:98:17:69:af:da:bb:47:1a:35:
                    b6:62:24:2b:29:ea:56:a2:74:32:f7:9d:79:31:48:
                    f9:df:40:ae:79:a2:14:7b:8c:fa:de:78:8a:63:6d:
                    b1:bb:df:52:3c:08:c3:8d:07:43:d2:54:ad:b5:85:
                    11:a8:a5:32:be:02:1e:4e:cf:e3:b7:5a:5b:df:66:
                    a4:43:35:8f:72:1d:4e:a1:b8:78:2a:66:36:9c:26:
                    e1:67:4c:22:d2:6b:1d:49:69:9c:57:bd:20:af:e2:
                    b4:9d:16:20:fd:67:c7:91:17:45:51:bd:5a:57:9f:
                    c0:2f:83:87:55:46:8d:5d:24:d2:5b:f5:52:06:ce:
                    2f:68:fa:e6:88:a9:e6:69:97:fb:21:83:c9:23:d7:
                    9d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:FB:69:4B:7F:91:B9:40:38:E4:35:8E:2C:DC:81:F2:8B:CA:26:76
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS203145.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8120::/44

    Signature Algorithm: sha256WithRSAEncryption
         41:63:ec:7d:32:3c:a4:72:94:c0:5b:1a:4a:bb:18:4e:4b:51:
         16:c3:cf:c1:b7:a4:68:98:2d:d4:6e:86:50:e2:9a:1a:47:55:
         fe:2f:bf:59:57:a4:a8:93:f4:c2:12:e3:22:da:e7:1e:ba:c2:
         c9:c3:c2:b3:77:b7:8c:03:01:d1:5a:b4:75:84:cd:18:02:fb:
         7b:bd:20:be:4f:78:82:26:e5:1a:ea:0f:37:2d:27:fc:43:70:
         ce:11:72:a6:d5:5c:a8:eb:d1:3c:7c:8b:0e:8d:ea:bf:77:2b:
         69:99:8c:d4:14:b0:c9:19:94:71:93:83:1b:c4:a0:5e:74:0e:
         0c:1a:ce:cd:6c:69:79:d1:98:cb:24:15:33:b3:f2:ad:11:db:
         6d:9b:81:ed:d1:61:fd:cd:6f:14:2f:f3:53:ef:07:de:3f:cf:
         0f:f2:47:bf:a3:1d:64:88:c7:8f:af:df:c1:c0:d0:12:c9:8f:
         7a:02:db:0d:04:9c:6e:8e:d8:02:a9:06:96:46:78:89:0e:da:
         ae:4a:8a:8c:ca:6a:3c:d0:90:f4:4b:b6:c4:ed:31:ce:ec:1a:
         bb:29:da:1e:17:e5:21:43:c5:2c:12:ea:ca:06:8f:d5:65:6c:
         39:00:fb:0f:c7:04:8d:c3:9e:34:61:ac:a1:4a:2e:55:0c:07:
         ec:50:3e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----