Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS203199.roa
File:                     AS203199.roa (raw, json)
Hash identifier:          GQBjMWmv6gJIGFXEixIWiKjjpzE/S/pC68qC9F/JAgE=
Subject key identifier:   72:3E:6B:FC:40:BD:BA:B0:E6:84:6B:4E:B0:75:7A:69:F7:AD:60:5C
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       485FC83D8931077E084D53D991323EC3EDF7CB2B
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS203199.roa
Signing time:             Sat 08 Apr 2023 03:25:43 +0000
ROA not before:           Sat 08 Apr 2023 03:20:43 +0000
ROA not after:            Sat 06 Apr 2024 03:25:43 +0000
asID:                     203199
IP address blocks:        2a12:dd47:8007::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:5f:c8:3d:89:31:07:7e:08:4d:53:d9:91:32:3e:c3:ed:f7:cb:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:43 2023 GMT
            Not After : Apr  6 03:25:43 2024 GMT
        Subject: CN=723E6BFC40BDBAB0E6846B4EB0757A69F7AD605C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f4:b8:29:7a:55:77:f0:2c:bb:1a:a2:da:8e:
                    c6:ed:47:f9:aa:e3:e2:84:f2:dd:20:2d:55:4d:14:
                    12:74:b3:c2:b0:dd:ca:c9:27:dc:29:b9:e8:ba:3d:
                    70:29:d0:5e:fc:0c:b5:4d:a1:12:f7:dd:19:d6:db:
                    c5:82:0a:78:5c:9f:ea:d1:91:6d:b6:81:b6:33:d7:
                    4d:d8:0a:b4:ba:e4:42:de:53:b7:98:04:c1:91:90:
                    ed:21:05:22:db:23:ec:16:fc:a4:ef:b7:d4:17:ca:
                    5d:f5:3d:3e:72:b6:68:36:fd:d4:00:09:47:42:94:
                    41:16:d5:13:b5:54:56:b3:ab:29:90:99:b6:ae:c8:
                    7c:cd:c1:dc:df:f2:63:62:5d:c1:2e:50:c1:65:ee:
                    3c:8e:8c:3c:6a:4f:ea:fd:22:67:00:85:95:9b:6a:
                    00:04:cf:30:68:66:de:c6:73:a1:35:25:13:09:d3:
                    e3:b2:15:5d:32:d1:c6:9a:9e:f2:57:dc:5b:8d:d7:
                    b3:39:ed:40:ee:79:3a:a1:e1:f4:3c:21:ab:50:82:
                    92:21:77:fc:6e:b7:82:6c:60:88:fd:b2:37:c3:58:
                    0c:d0:fd:81:91:c6:e1:d2:18:a5:aa:9b:01:af:b0:
                    c2:ee:ba:43:34:10:35:00:74:8d:23:ec:d1:9d:22:
                    16:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:3E:6B:FC:40:BD:BA:B0:E6:84:6B:4E:B0:75:7A:69:F7:AD:60:5C
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS203199.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8007::/48

    Signature Algorithm: sha256WithRSAEncryption
         2e:d1:1f:b5:b8:c1:a2:31:21:91:09:ff:95:61:c4:30:28:7a:
         c7:61:b5:de:01:93:26:90:75:0c:b4:7a:48:bc:36:eb:87:de:
         6c:5c:a4:51:67:37:61:3c:37:50:7a:df:29:ad:c3:7e:2d:e5:
         06:90:df:71:d7:4a:eb:2c:48:e9:a8:8b:11:ba:9d:f6:84:2e:
         b3:fe:48:ea:46:6f:30:31:18:20:04:83:d7:1e:81:b0:1f:e0:
         fe:9a:c8:76:2f:57:7a:20:60:3a:31:b8:98:1a:08:45:da:ab:
         15:3d:de:d9:80:8b:a8:c1:6a:e3:ec:d4:4f:cb:30:83:5c:8c:
         0b:cc:2d:fe:2e:8c:d4:4b:4a:25:c0:92:2b:6c:36:b5:17:d8:
         c4:7f:a6:79:63:a3:c7:ed:13:b6:86:78:b4:10:b3:34:6e:3f:
         08:18:cf:70:c2:ef:bf:9a:08:28:f6:41:c0:59:57:81:77:29:
         35:ad:53:5f:00:45:4c:50:d3:f0:f1:ae:c2:cf:47:1f:33:c0:
         e7:c2:3c:70:21:6d:0f:0d:39:7b:52:12:e0:7c:d3:64:9e:d1:
         31:4d:40:ae:db:60:67:81:c2:67:10:b6:ca:11:ed:c4:ef:3d:
         05:94:b1:ad:c7:d4:fe:ad:0b:5d:c8:21:0c:33:c4:81:96:37:
         09:3a:65:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----