Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS203323.roa
File:                     AS203323.roa (raw, json)
Hash identifier:          9SbZClud5Jjxg1tixSsnI1Y78B+e+hNaEF4HKbgOqp4=
Subject key identifier:   67:E8:0C:1E:52:55:E7:A4:8B:62:E8:31:C9:1E:ED:22:7E:46:70:BC
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       2BF4B1F75A76A8C6F086C5A486219F5F0F74A800
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS203323.roa
Signing time:             Sat 08 Apr 2023 03:25:41 +0000
ROA not before:           Sat 08 Apr 2023 03:20:41 +0000
ROA not after:            Sat 06 Apr 2024 03:25:41 +0000
asID:                     203323
IP address blocks:        2a12:dd47:8078::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:f4:b1:f7:5a:76:a8:c6:f0:86:c5:a4:86:21:9f:5f:0f:74:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:41 2023 GMT
            Not After : Apr  6 03:25:41 2024 GMT
        Subject: CN=67E80C1E5255E7A48B62E831C91EED227E4670BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b3:8f:6a:fe:c7:3f:3b:90:2b:d4:ac:a0:f0:
                    5c:30:9f:35:ae:b0:44:d3:68:1a:f9:b0:e9:90:a0:
                    c9:f2:48:a1:69:de:53:68:7d:5b:b4:e9:ca:32:5f:
                    39:64:a1:f1:a3:9e:75:ba:a9:88:68:ec:3b:c4:7a:
                    21:91:a3:0c:cb:75:34:22:a3:43:72:3e:ec:93:de:
                    01:ef:45:ea:b3:37:cb:9e:85:91:7f:41:1a:3a:76:
                    6f:fe:c9:d0:ce:aa:bb:63:a8:7c:d3:a3:ac:2d:ae:
                    80:16:be:61:4d:cb:6e:cd:bf:35:47:5a:bd:e9:a4:
                    3a:bd:39:4a:45:67:8f:f8:99:52:9d:dd:1d:d5:2b:
                    32:1c:ef:e3:ca:15:73:7d:c2:6f:7a:34:c8:da:b2:
                    96:87:2c:71:8b:cc:dc:2b:14:53:f6:6e:90:6d:3a:
                    34:03:08:b0:24:df:f7:0e:a9:53:7f:4d:8c:90:73:
                    99:e0:e7:54:26:44:5a:3c:da:30:f7:2c:3d:31:2b:
                    73:e9:8c:82:9c:ad:d9:8f:ea:76:4a:dd:90:7a:4e:
                    c4:dc:80:9d:57:b8:3e:05:90:53:01:1f:64:a3:b3:
                    6f:7d:e1:f6:e1:e5:8b:f3:40:cc:bd:85:07:10:0a:
                    0a:5d:4a:c0:7e:38:a2:c3:8b:1f:c9:3f:83:8d:ac:
                    08:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:E8:0C:1E:52:55:E7:A4:8B:62:E8:31:C9:1E:ED:22:7E:46:70:BC
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS203323.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8078::/48

    Signature Algorithm: sha256WithRSAEncryption
         06:40:fe:46:28:96:3d:22:e8:e2:02:57:c7:6e:7e:c1:36:ed:
         8e:c9:b1:ce:4b:c1:ac:a5:79:60:d8:49:dd:e7:c4:dc:ad:8a:
         11:72:6b:1a:29:60:a6:7b:4d:48:d9:f8:69:88:b3:b1:b0:1a:
         d3:54:6c:3c:b1:38:fa:f5:e1:e9:6e:56:4f:76:68:f2:a2:81:
         21:b8:81:a8:7a:7d:ef:35:03:69:72:59:0d:1f:3e:58:42:18:
         b5:2c:f3:e3:c1:66:38:de:de:3a:af:0b:7b:d5:d4:10:6b:eb:
         ab:2c:b5:ce:df:22:45:97:57:91:cd:1c:e0:9d:b6:3d:04:3e:
         d4:97:a8:9b:a5:7d:3a:93:2c:3d:bb:ce:c0:b3:cc:eb:bc:e7:
         a5:a7:97:60:36:1e:6a:40:e7:cd:bf:ed:e9:0d:94:99:05:da:
         72:34:45:6e:43:92:cd:d8:bd:b8:a8:f7:64:0c:33:05:ee:c1:
         b5:95:64:fb:9f:49:cd:ce:48:51:31:af:2a:78:3f:90:68:0e:
         a5:89:63:ec:47:bf:09:fb:14:8e:4b:90:32:d3:cd:8e:4e:42:
         52:46:62:e9:0b:8e:3d:cd:85:02:b9:5a:65:86:41:d5:98:0c:
         d2:4c:fe:16:b4:2c:f8:20:60:86:a0:09:8e:df:5b:83:f7:8e:
         5c:eb:75:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----