Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS203197.roa
File:                     AS203197.roa (raw, json)
Hash identifier:          1tPodo6ZQOiUmsK3Qv3uFdqaoeYEMOJw9KLJWOsXHWE=
Subject key identifier:   A3:37:FE:F6:5D:EF:D4:10:7D:6F:54:9F:29:22:8E:E0:C0:30:4D:93
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       177F4E14BD8B1455C2C0F9A0CC7FE774F865CB62
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS203197.roa
Signing time:             Sat 08 Apr 2023 03:25:33 +0000
ROA not before:           Sat 08 Apr 2023 03:20:33 +0000
ROA not after:            Sat 06 Apr 2024 03:25:33 +0000
asID:                     203197
IP address blocks:        2a12:dd47:8140::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:7f:4e:14:bd:8b:14:55:c2:c0:f9:a0:cc:7f:e7:74:f8:65:cb:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:33 2023 GMT
            Not After : Apr  6 03:25:33 2024 GMT
        Subject: CN=A337FEF65DEFD4107D6F549F29228EE0C0304D93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:cc:19:e0:03:9c:81:f5:8f:9f:aa:7a:b4:7b:
                    9d:81:14:ad:b9:5a:11:df:02:7a:84:fe:a9:bd:37:
                    d6:fd:7d:6a:22:da:44:8b:95:be:43:d2:d9:f7:13:
                    8b:7d:ee:6d:fb:d4:49:a0:d9:89:0a:2a:51:ad:74:
                    3e:bc:63:35:52:83:9f:32:21:db:96:03:80:f8:c5:
                    cd:b4:26:c4:00:41:64:c4:8c:f4:40:f6:be:c7:38:
                    66:00:9e:f5:32:ed:5b:bc:c4:8c:b4:ce:16:1b:cb:
                    31:e8:bf:f0:ae:fd:3f:41:0a:c1:40:4a:90:7c:52:
                    8e:4f:ec:70:05:da:b4:12:90:6f:0f:12:cd:94:2d:
                    98:11:1e:7a:12:03:35:e6:12:ba:ed:f4:ca:36:aa:
                    6a:dc:03:5a:06:5a:cc:02:95:57:a0:58:cd:e9:58:
                    4a:59:3d:90:f5:75:61:b8:c5:e6:16:71:08:d4:44:
                    c0:93:2a:7a:54:22:9e:2b:6f:be:70:77:7b:04:51:
                    49:74:af:54:97:b4:fd:fa:32:80:14:70:be:2e:f3:
                    70:d6:e4:b1:82:da:07:56:c7:f6:52:fb:a8:bd:6f:
                    36:6b:29:b2:01:f4:cd:70:b0:d7:3e:6b:17:cc:17:
                    44:f1:9b:6c:93:ab:bb:67:ad:10:53:5c:e2:5e:73:
                    e4:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:37:FE:F6:5D:EF:D4:10:7D:6F:54:9F:29:22:8E:E0:C0:30:4D:93
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS203197.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8140::/44

    Signature Algorithm: sha256WithRSAEncryption
         ba:38:6e:f4:51:3f:01:6f:d8:dd:cf:96:07:fc:a6:a3:81:7f:
         f5:b2:bf:60:49:35:34:ff:8a:b1:2e:88:9f:6e:bd:1f:50:1f:
         07:d0:7d:6b:25:7b:1f:ed:29:83:78:96:fe:a4:af:09:c7:24:
         21:7c:ea:6d:54:45:0d:1a:97:be:95:de:11:76:45:18:6c:04:
         08:d6:21:87:a9:0c:ad:4c:5a:b8:19:36:b7:0b:e9:c0:04:d3:
         dc:21:7c:2e:62:fc:df:21:dd:3d:53:c0:81:2a:69:88:df:e9:
         95:78:55:95:7b:2b:4d:0f:ba:c4:9f:91:5b:d5:c8:b2:89:68:
         71:a7:a2:6c:7d:fc:dc:09:e5:2e:75:b5:82:a3:47:b4:cf:cc:
         2a:e0:2c:a3:11:e0:fe:36:4e:54:26:66:ed:96:96:6b:5c:d4:
         76:41:f6:ed:7f:10:fd:d2:e2:30:56:a1:02:ec:53:e4:83:53:
         99:53:b2:20:cb:d1:26:23:a5:4d:ee:a6:3c:c6:c6:55:57:60:
         6b:52:14:4c:19:75:57:ed:2d:39:44:17:d3:0b:d0:b5:aa:af:
         d0:a9:ba:9a:40:e8:f8:0c:1e:63:d1:bd:e3:52:b5:c4:ea:75:
         1a:2c:0c:3e:57:73:2f:10:bc:f4:d5:d5:44:98:97:3a:cb:eb:
         b6:c0:23:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----