Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS203529.roa
File:                     AS203529.roa (raw, json)
Hash identifier:          kvNWDFrnyIkfC30LzNxmzSuiSsVJcYMahPjkzj8Pcx4=
Subject key identifier:   D8:00:BC:E0:03:9D:8B:DC:B9:A3:B6:B9:BF:14:A0:CA:53:A9:6C:6B
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       663948D91F2B1EEA3C717BDCFFE835E16925F865
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS203529.roa
Signing time:             Sat 08 Apr 2023 03:25:34 +0000
ROA not before:           Sat 08 Apr 2023 03:20:34 +0000
ROA not after:            Sat 06 Apr 2024 03:25:34 +0000
asID:                     203529
IP address blocks:        2a12:dd47:5e10::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:39:48:d9:1f:2b:1e:ea:3c:71:7b:dc:ff:e8:35:e1:69:25:f8:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:34 2023 GMT
            Not After : Apr  6 03:25:34 2024 GMT
        Subject: CN=D800BCE0039D8BDCB9A3B6B9BF14A0CA53A96C6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:12:a7:e6:4f:08:74:fa:42:7e:55:2e:8a:e1:
                    b7:32:3d:48:f4:5d:3b:5b:7e:c8:f8:22:1f:85:ab:
                    78:2f:82:e8:51:b5:60:9c:af:67:7f:eb:ad:e8:6b:
                    77:78:a6:90:78:1c:0a:b6:63:28:54:bb:27:a6:fa:
                    d3:85:92:3a:e2:d3:66:43:23:81:4f:b9:1b:3d:aa:
                    7a:28:e9:26:db:e9:6d:68:c1:a0:53:14:d5:6e:55:
                    13:db:26:05:ea:50:33:26:5e:f1:0a:6a:d2:64:b6:
                    fa:c5:9b:0a:5c:5f:17:47:0f:07:70:a7:38:7b:d6:
                    c4:c7:ea:66:0d:38:45:03:a7:b6:c9:4f:b4:91:30:
                    f7:3f:50:27:3a:32:1a:4d:f2:51:45:bd:b8:bd:e1:
                    e7:03:eb:1a:d7:6e:62:33:a0:33:a8:e0:fa:f4:5d:
                    29:d8:65:8a:33:f0:77:17:28:fb:80:bf:c9:7a:2c:
                    85:5d:08:56:e8:77:45:c7:f6:d2:dd:b1:6b:a2:88:
                    f3:80:ff:ac:b1:a2:ca:2e:bc:18:76:db:d5:d1:f2:
                    0b:49:d6:92:37:59:77:e1:93:d7:f3:02:e4:f8:a8:
                    d2:47:f6:3a:47:89:66:21:ab:06:88:a3:fc:9a:35:
                    19:2f:2a:76:c8:86:0a:a6:a7:36:3e:13:b3:f8:e6:
                    f4:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:00:BC:E0:03:9D:8B:DC:B9:A3:B6:B9:BF:14:A0:CA:53:A9:6C:6B
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS203529.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:5e10::/44

    Signature Algorithm: sha256WithRSAEncryption
         02:49:fd:ae:c0:e4:4c:7d:c3:79:bd:a2:64:97:b2:31:d6:8b:
         74:3d:30:04:2a:62:1e:40:bc:0a:07:ff:23:18:e9:a5:be:69:
         2a:8d:af:0c:e7:a8:d3:30:7b:c7:bd:a6:ea:c6:83:94:d2:b3:
         91:38:c1:e4:2f:cd:7d:df:94:e4:6c:cd:ed:7f:ce:69:d4:c4:
         3c:ba:9d:89:f6:b9:d3:8d:5a:e6:4d:57:e5:4c:a5:7e:9b:c6:
         90:0b:de:8a:ec:99:78:0e:3e:2e:ff:2f:16:ed:08:fb:6f:a7:
         f4:27:6e:a9:28:a2:92:8a:55:17:15:41:44:9b:07:68:0b:39:
         eb:71:89:78:6b:38:f0:11:5b:c0:dc:2f:2d:54:ff:26:e5:60:
         bd:99:8a:c4:c2:87:c9:84:e0:6a:49:93:23:b2:ad:16:c5:11:
         1d:fb:11:f3:d9:bb:3f:70:ee:a7:9e:4d:d0:a9:81:7d:a0:32:
         69:6b:71:2a:a8:59:fb:83:08:2f:8d:86:98:6e:d1:14:df:c9:
         89:18:f4:44:b1:3a:03:8e:0d:a5:6a:f6:64:a0:21:34:c3:13:
         11:0f:60:db:8d:47:12:a2:68:b6:a9:cb:48:2a:32:20:75:2f:
         b4:78:32:90:1a:68:67:89:30:19:fe:38:37:43:be:5a:f6:42:
         df:da:3a:86
-----BEGIN CERTIFICATE-----
MIIEjzCCA3egAwIBAgIUZjlI2R8rHuo8cXvc/+g14Wkl+GUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjU3ZGNiYTlmYzdiMGVmMWYzY2M4MGExYWVlMjJjMDAx
OThlNzY3YTAeFw0yMzA0MDgwMzIwMzRaFw0yNDA0MDYwMzI1MzRaMDMxMTAvBgNV
BAMTKEQ4MDBCQ0UwMDM5RDhCRENCOUEzQjZCOUJGMTRBMENBNTNBOTZDNkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoEqfmTwh0+kJ+VS6K4bcyPUj0
XTtbfsj4Ih+Fq3gvguhRtWCcr2d/663oa3d4ppB4HAq2YyhUuyem+tOFkjri02ZD
I4FPuRs9qnoo6Sbb6W1owaBTFNVuVRPbJgXqUDMmXvEKatJktvrFmwpcXxdHDwdw
pzh71sTH6mYNOEUDp7bJT7SRMPc/UCc6MhpN8lFFvbi94ecD6xrXbmIzoDOo4Pr0
XSnYZYoz8HcXKPuAv8l6LIVdCFbod0XH9tLdsWuiiPOA/6yxosouvBh229XR8gtJ
1pI3WXfhk9fzAuT4qNJH9jpHiWYhqwaIo/yaNRkvKnbIhgqmpzY+E7P45vR3AgMB
AAGjggGZMIIBlTAdBgNVHQ4EFgQU2AC84AOdi9y5o7a5vxSgylOpbGswHwYDVR0j
BBgwFoAUtX3Lqfx7DvHzzIChruIsABmOdnowDgYDVR0PAQH/BAQDAgeAMFkGA1Ud
HwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5jby9yZXBvL0hZU1AvNi9CNTdEQ0JB
OUZDN0IwRUYxRjNDQzgwQTFBRUUyMkMwMDE5OEU3NjdBLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvdFgzTHFmeDdEdkh6eklDaHJ1SXNBQm1PZG5vLmNlcjBEBggr
BgEFBQcBCwQ4MDYwNAYIKwYBBQUHMAuGKHJzeW5jOi8vcnBraS5jby9yZXBvL0hZ
U1AvNi9BUzIwMzUyOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoS3UdeEDANBgkqhkiG9w0BAQsFAAOC
AQEAAkn9rsDkTH3Deb2iZJeyMdaLdD0wBCpiHkC8Cgf/Ixjppb5pKo2vDOeo0zB7
x72m6saDlNKzkTjB5C/Nfd+U5GzN7X/OadTEPLqdifa5041a5k1X5UylfpvGkAve
iuyZeA4+Lv8vFu0I+2+n9CduqSiikopVFxVBRJsHaAs563GJeGs48BFbwNwvLVT/
JuVgvZmKxMKHyYTgakmTI7KtFsURHfsR89m7P3Dup55N0KmBfaAyaWtxKqhZ+4MI
L42GmG7RFN/JiRj0RLE6A44NpWr2ZKAhNMMTEQ9g241HEqJotqnLSCoyIHUvtHgy
kBpoZ4kwGf44N0O+WvZC39o6hg==
-----END CERTIFICATE-----