Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS203577.roa
File:                     AS203577.roa (raw, json)
Hash identifier:          /ws5HO4lUXorhsTIIT45qWqTI5Ogmir7zin0yRtIqoo=
Subject key identifier:   34:1D:80:E0:A0:87:83:8C:7E:4D:B2:6B:15:07:45:B2:53:1D:F0:3D
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       6F5542F9FA030A10AED91C76C001D2EA1F996167
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS203577.roa
Signing time:             Sat 08 Apr 2023 03:25:25 +0000
ROA not before:           Sat 08 Apr 2023 03:20:25 +0000
ROA not after:            Sat 06 Apr 2024 03:25:25 +0000
asID:                     203577
IP address blocks:        2a12:dd47:81e0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:55:42:f9:fa:03:0a:10:ae:d9:1c:76:c0:01:d2:ea:1f:99:61:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:25 2023 GMT
            Not After : Apr  6 03:25:25 2024 GMT
        Subject: CN=341D80E0A087838C7E4DB26B150745B2531DF03D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c6:08:05:e8:e2:18:5f:e8:90:fa:16:5b:06:
                    e5:a9:39:87:19:d2:a5:97:15:cb:86:95:b4:13:49:
                    b3:0b:57:b3:37:6b:51:96:45:8b:0c:37:ec:9e:9a:
                    61:04:11:90:81:1b:47:97:6e:de:c1:2d:e4:04:48:
                    ab:ed:9f:ea:c6:67:d1:0f:6d:00:8c:4d:9f:8b:6a:
                    c6:aa:68:4b:cb:37:1b:de:ff:b5:af:02:0a:0d:43:
                    9d:61:b3:b2:6e:1d:a6:90:15:08:a6:cb:ce:f3:6e:
                    11:aa:d9:d0:d8:d2:ac:f8:25:5e:48:a6:c7:d6:ef:
                    b4:fb:54:02:ad:05:95:dd:b3:87:71:dd:24:fe:7d:
                    24:2f:75:f9:26:04:14:b2:41:1f:cd:7a:fa:a5:27:
                    3e:ff:68:b4:15:d8:bb:7f:62:fe:c2:c8:7f:7c:c0:
                    48:89:e5:41:fd:28:1a:63:96:03:85:44:1e:f9:ac:
                    f7:6a:1a:6e:3b:9b:2e:94:14:d9:9e:88:19:32:8b:
                    74:13:ee:71:22:f1:e8:07:8d:f0:0f:0a:84:59:ee:
                    6c:fe:50:aa:bf:ca:53:d3:73:28:f2:1b:e3:cf:c4:
                    b4:70:07:d5:e2:f8:51:0f:98:35:36:57:d5:cb:29:
                    2a:3a:ed:ba:75:f2:d9:44:bb:dc:37:85:2c:b0:70:
                    c5:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:1D:80:E0:A0:87:83:8C:7E:4D:B2:6B:15:07:45:B2:53:1D:F0:3D
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS203577.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:81e0::/44

    Signature Algorithm: sha256WithRSAEncryption
         38:02:ef:7b:85:07:ff:f7:2e:ae:eb:86:7e:8f:93:4e:bf:24:
         65:c4:10:d2:3b:05:07:33:c5:bf:2c:e1:07:bc:25:81:e4:9e:
         21:32:9b:30:d1:c5:d1:77:a7:f3:7e:27:e6:b8:6e:fe:8b:40:
         27:4c:a6:21:ef:27:41:f2:89:47:ef:97:c7:50:2f:56:67:f2:
         99:0f:a4:4d:cd:a2:14:45:a8:0d:14:56:36:28:5f:db:5a:64:
         bf:62:3e:8b:6a:aa:0b:66:3e:74:25:8f:f0:ec:64:fc:49:3b:
         6e:b0:47:cf:60:71:bf:0f:43:3e:49:1a:86:d8:cf:2f:b2:6e:
         98:29:c0:4d:0f:20:21:ed:df:ac:a2:18:fe:1e:59:ef:3e:88:
         67:a9:70:64:75:27:bc:21:fd:f6:d2:91:2c:45:3c:18:a5:94:
         4c:b0:76:10:6e:45:c4:46:1e:d0:ae:a7:35:fd:45:11:b6:fa:
         0c:c5:a5:be:40:8a:27:b8:c4:88:3f:ce:ce:87:a0:ae:3b:d8:
         99:f0:a6:3a:7e:e3:7e:d3:21:20:d4:62:f5:a6:a2:aa:9c:b3:
         2a:1f:58:a4:56:dd:19:ac:98:a5:1b:ec:d1:89:a7:1d:74:d6:
         1e:4c:35:ff:69:0b:1a:be:ef:f3:a9:9a:ed:ba:6e:96:f1:f9:
         c3:52:e7:40
-----BEGIN CERTIFICATE-----
MIIEjzCCA3egAwIBAgIUb1VC+foDChCu2Rx2wAHS6h+ZYWcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjU3ZGNiYTlmYzdiMGVmMWYzY2M4MGExYWVlMjJjMDAx
OThlNzY3YTAeFw0yMzA0MDgwMzIwMjVaFw0yNDA0MDYwMzI1MjVaMDMxMTAvBgNV
BAMTKDM0MUQ4MEUwQTA4NzgzOEM3RTREQjI2QjE1MDc0NUIyNTMxREYwM0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOxggF6OIYX+iQ+hZbBuWpOYcZ
0qWXFcuGlbQTSbMLV7M3a1GWRYsMN+yemmEEEZCBG0eXbt7BLeQESKvtn+rGZ9EP
bQCMTZ+LasaqaEvLNxve/7WvAgoNQ51hs7JuHaaQFQimy87zbhGq2dDY0qz4JV5I
psfW77T7VAKtBZXds4dx3ST+fSQvdfkmBBSyQR/NevqlJz7/aLQV2Lt/Yv7CyH98
wEiJ5UH9KBpjlgOFRB75rPdqGm47my6UFNmeiBkyi3QT7nEi8egHjfAPCoRZ7mz+
UKq/ylPTcyjyG+PPxLRwB9Xi+FEPmDU2V9XLKSo67bp18tlEu9w3hSywcMU1AgMB
AAGjggGZMIIBlTAdBgNVHQ4EFgQUNB2A4KCHg4x+TbJrFQdFslMd8D0wHwYDVR0j
BBgwFoAUtX3Lqfx7DvHzzIChruIsABmOdnowDgYDVR0PAQH/BAQDAgeAMFkGA1Ud
HwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5jby9yZXBvL0hZU1AvNi9CNTdEQ0JB
OUZDN0IwRUYxRjNDQzgwQTFBRUUyMkMwMDE5OEU3NjdBLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvdFgzTHFmeDdEdkh6eklDaHJ1SXNBQm1PZG5vLmNlcjBEBggr
BgEFBQcBCwQ4MDYwNAYIKwYBBQUHMAuGKHJzeW5jOi8vcnBraS5jby9yZXBvL0hZ
U1AvNi9BUzIwMzU3Ny5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoS3UeB4DANBgkqhkiG9w0BAQsFAAOC
AQEAOALve4UH//curuuGfo+TTr8kZcQQ0jsFBzPFvyzhB7wlgeSeITKbMNHF0Xen
834n5rhu/otAJ0ymIe8nQfKJR++Xx1AvVmfymQ+kTc2iFEWoDRRWNihf21pkv2I+
i2qqC2Y+dCWP8Oxk/Ek7brBHz2Bxvw9DPkkahtjPL7JumCnATQ8gIe3frKIY/h5Z
7z6IZ6lwZHUnvCH99tKRLEU8GKWUTLB2EG5FxEYe0K6nNf1FEbb6DMWlvkCKJ7jE
iD/OzoegrjvYmfCmOn7jftMhINRi9aaiqpyzKh9YpFbdGayYpRvs0YmnHXTWHkw1
/2kLGr7v86ma7bpulvH5w1LnQA==
-----END CERTIFICATE-----