Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS203423.roa
File:                     AS203423.roa (raw, json)
Hash identifier:          OUeiq4B26aWycIe5wT1LDLDfIvnx543O5n3Zz+1Kcgo=
Subject key identifier:   C2:87:B4:5E:98:90:2A:67:A4:20:ED:4C:F7:F2:D4:21:BD:64:63:56
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       7BB03754CFE489FFC91D2044A9BAB61A57CBDE97
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS203423.roa
Signing time:             Sat 08 Apr 2023 03:25:43 +0000
ROA not before:           Sat 08 Apr 2023 03:20:43 +0000
ROA not after:            Sat 06 Apr 2024 03:25:43 +0000
asID:                     203423
IP address blocks:        2a12:dd47:8310::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:b0:37:54:cf:e4:89:ff:c9:1d:20:44:a9:ba:b6:1a:57:cb:de:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:43 2023 GMT
            Not After : Apr  6 03:25:43 2024 GMT
        Subject: CN=C287B45E98902A67A420ED4CF7F2D421BD646356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:e2:27:5a:21:49:9a:9e:11:ab:ec:4b:55:71:
                    e7:d7:bc:bc:fb:86:e5:ee:2c:63:ec:36:4e:c4:34:
                    66:fd:2f:a1:44:04:75:0d:3d:88:5c:c6:9a:0a:42:
                    65:78:62:83:8e:c8:ec:7e:bf:be:3b:36:9c:24:2f:
                    62:b5:95:c3:e5:eb:fe:e5:94:43:44:1f:c9:16:36:
                    e0:a9:f5:ee:64:e4:a6:01:b9:01:49:f5:4c:a5:eb:
                    13:23:ff:ca:d6:d5:fe:8a:a1:d5:3b:e1:7f:ae:29:
                    0a:5f:88:c7:9e:52:d5:27:10:e2:b3:47:65:26:18:
                    dd:27:85:46:b8:18:be:e4:37:5d:72:fc:d4:3a:b3:
                    a4:33:52:fd:bd:a4:6c:d8:36:b8:69:b0:41:d1:20:
                    a4:aa:59:18:a1:49:ae:4d:a9:a2:9f:58:a9:c8:f0:
                    b8:91:dd:04:7c:3e:78:15:5e:16:16:37:4f:6b:e0:
                    db:de:3b:e5:80:2d:31:85:21:ba:40:98:54:2a:92:
                    d8:f4:07:af:66:e4:36:f6:d8:b8:86:10:7f:8a:7b:
                    87:b1:57:46:5a:3c:2b:ac:61:ab:ab:d5:1c:67:71:
                    56:8a:4d:29:8c:b7:90:ea:c3:1a:43:b2:15:9a:0d:
                    88:8c:f3:7a:1d:33:ae:8e:73:24:ad:14:d4:c1:ab:
                    0b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:87:B4:5E:98:90:2A:67:A4:20:ED:4C:F7:F2:D4:21:BD:64:63:56
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS203423.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8310::/44

    Signature Algorithm: sha256WithRSAEncryption
         75:d7:0c:69:17:7c:07:ae:82:a1:0b:24:d9:6f:29:e9:6e:6f:
         3b:64:34:2a:e5:69:14:d7:11:49:af:8c:d1:53:bc:83:ce:aa:
         70:dc:18:8c:93:9e:dc:f3:eb:89:93:39:29:04:68:cd:41:9a:
         fd:f8:99:59:e6:56:ec:f7:e0:b7:1f:3f:43:86:f1:07:bc:fa:
         65:e9:db:9f:94:9f:b9:b3:44:4f:1f:2c:9c:03:6d:d3:fa:0c:
         31:b6:0d:05:6d:34:55:13:af:bb:3b:85:15:cf:66:31:0b:36:
         28:e6:ff:67:62:9d:c6:7a:11:49:94:86:5a:6b:83:c8:01:d5:
         b4:4a:55:45:0d:e1:c6:d2:61:f2:a9:11:dd:7d:12:bc:6d:ae:
         18:0d:03:7d:af:e6:1f:12:80:94:63:f0:7c:6c:0a:be:d2:1b:
         77:58:69:70:15:57:04:58:3e:ac:47:ad:a4:1f:b3:55:21:13:
         99:e2:6e:a1:d0:d2:45:75:f2:c3:9c:91:8a:42:5d:e7:a5:a2:
         cc:bd:d0:21:19:9e:94:f5:2c:ac:19:b8:e7:68:f9:8b:13:ad:
         5c:bc:32:6b:5c:10:e3:ef:28:c5:b0:6e:ca:16:96:8a:0c:bb:
         0a:ed:7c:ab:5d:3e:74:fe:62:3c:3c:cc:a1:0f:eb:d8:46:c8:
         64:66:f1:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----