Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS203636.roa
File:                     AS203636.roa (raw, json)
Hash identifier:          l4f7tW3DSjJh3Rn2cRNOhFQARLxR2QvzewUZV+N39WM=
Subject key identifier:   A8:14:35:A6:0C:8C:3A:8C:E1:9A:52:07:FC:75:09:23:57:24:EE:CE
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       4781F5529228142880FA29C03FFF3FB2DB65A820
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS203636.roa
Signing time:             Sat 08 Apr 2023 03:25:48 +0000
ROA not before:           Sat 08 Apr 2023 03:20:48 +0000
ROA not after:            Sat 06 Apr 2024 03:25:48 +0000
asID:                     203636
IP address blocks:        2a12:dd47:5100::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:81:f5:52:92:28:14:28:80:fa:29:c0:3f:ff:3f:b2:db:65:a8:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:48 2023 GMT
            Not After : Apr  6 03:25:48 2024 GMT
        Subject: CN=A81435A60C8C3A8CE19A5207FC7509235724EECE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9d:e3:6d:4c:ff:74:b0:3f:85:b1:4f:96:41:
                    ec:8e:b9:82:a3:01:1c:43:5b:cb:e6:1a:3b:aa:50:
                    aa:b0:17:23:03:1c:8c:b1:80:9f:c8:0d:96:ea:a5:
                    50:a9:58:88:c3:db:c7:cb:28:64:8d:02:8c:f4:5b:
                    1d:78:69:00:97:ba:85:da:dc:eb:48:3a:02:29:99:
                    6d:f7:a0:25:0d:f8:b6:df:ef:94:4d:3f:fd:8e:66:
                    83:aa:bb:3d:be:f1:be:f8:41:13:24:01:17:9e:2d:
                    aa:8c:85:77:47:dd:55:69:87:c4:ea:d6:d6:0a:a5:
                    8b:89:37:95:01:fc:e5:68:36:a2:c5:75:bd:d2:eb:
                    ac:12:09:ef:1e:28:92:27:7d:88:22:af:b3:bf:02:
                    07:fc:f9:f1:b4:94:a0:a3:6a:13:39:f9:67:58:0b:
                    2b:a9:28:9b:1e:fe:d5:8e:2d:eb:bd:9b:15:07:d9:
                    72:e7:2a:83:cd:5c:25:c5:63:33:92:6f:1c:c1:17:
                    90:90:da:67:ba:e9:5a:02:6b:dd:32:94:32:6e:57:
                    f2:bb:5a:c5:5d:0e:d9:44:2a:07:af:d1:33:39:e0:
                    12:4b:a4:0b:5a:9a:02:dc:d9:49:2b:8c:6f:10:cc:
                    b7:52:90:e5:65:ac:4d:8a:09:84:83:1f:7c:59:9a:
                    19:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:14:35:A6:0C:8C:3A:8C:E1:9A:52:07:FC:75:09:23:57:24:EE:CE
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS203636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:5100::/40

    Signature Algorithm: sha256WithRSAEncryption
         85:83:82:0c:4b:a5:9e:c1:1f:1b:86:e1:75:2f:4f:f0:1e:8a:
         c8:1f:c7:a9:1c:34:54:d2:38:5f:f0:7a:ff:79:d6:d2:18:66:
         10:d1:20:09:89:dd:64:52:8a:e1:49:ac:c0:07:6a:4a:b5:80:
         b0:0f:d5:bf:aa:1f:b9:4f:ca:b7:2d:d1:65:0d:8f:17:f2:71:
         48:c3:52:92:6a:78:ef:53:60:13:79:bd:8d:17:a3:b5:5f:46:
         f9:fe:6b:df:55:08:f5:91:ee:ec:9b:41:dc:e0:a4:96:e1:5b:
         91:94:a0:29:72:ba:c2:20:22:83:ea:2d:7d:00:6a:b9:23:b6:
         aa:0a:95:9d:eb:21:40:09:3a:11:fb:89:98:a7:d0:00:80:96:
         1b:6d:04:d2:9f:d2:28:77:4b:58:1d:6c:e7:4f:23:61:17:54:
         98:1d:c5:cc:4a:71:44:0f:81:fe:47:a8:8d:47:d7:1e:b6:c7:
         ab:b2:19:1a:b2:db:bb:20:46:82:dc:fd:c5:b7:8f:1f:9d:06:
         94:8d:13:ac:5d:d2:22:46:41:33:72:07:92:1e:17:c9:06:05:
         80:04:06:fd:bb:25:07:84:b2:c2:19:c4:42:5d:4b:dd:80:dc:
         0c:5f:48:1c:44:ed:71:05:cd:c2:24:76:0e:5c:b0:23:1a:24:
         88:b1:e7:11
-----BEGIN CERTIFICATE-----
MIIEjjCCA3agAwIBAgIUR4H1UpIoFCiA+inAP/8/sttlqCAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjU3ZGNiYTlmYzdiMGVmMWYzY2M4MGExYWVlMjJjMDAx
OThlNzY3YTAeFw0yMzA0MDgwMzIwNDhaFw0yNDA0MDYwMzI1NDhaMDMxMTAvBgNV
BAMTKEE4MTQzNUE2MEM4QzNBOENFMTlBNTIwN0ZDNzUwOTIzNTcyNEVFQ0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvneNtTP90sD+FsU+WQeyOuYKj
ARxDW8vmGjuqUKqwFyMDHIyxgJ/IDZbqpVCpWIjD28fLKGSNAoz0Wx14aQCXuoXa
3OtIOgIpmW33oCUN+Lbf75RNP/2OZoOquz2+8b74QRMkAReeLaqMhXdH3VVph8Tq
1tYKpYuJN5UB/OVoNqLFdb3S66wSCe8eKJInfYgir7O/Agf8+fG0lKCjahM5+WdY
CyupKJse/tWOLeu9mxUH2XLnKoPNXCXFYzOSbxzBF5CQ2me66VoCa90ylDJuV/K7
WsVdDtlEKgev0TM54BJLpAtamgLc2UkrjG8QzLdSkOVlrE2KCYSDH3xZmhkNAgMB
AAGjggGYMIIBlDAdBgNVHQ4EFgQUqBQ1pgyMOozhmlIH/HUJI1ck7s4wHwYDVR0j
BBgwFoAUtX3Lqfx7DvHzzIChruIsABmOdnowDgYDVR0PAQH/BAQDAgeAMFkGA1Ud
HwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5jby9yZXBvL0hZU1AvNi9CNTdEQ0JB
OUZDN0IwRUYxRjNDQzgwQTFBRUUyMkMwMDE5OEU3NjdBLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvdFgzTHFmeDdEdkh6eklDaHJ1SXNBQm1PZG5vLmNlcjBEBggr
BgEFBQcBCwQ4MDYwNAYIKwYBBQUHMAuGKHJzeW5jOi8vcnBraS5jby9yZXBvL0hZ
U1AvNi9BUzIwMzYzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr
BgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoS3UdRMA0GCSqGSIb3DQEBCwUAA4IB
AQCFg4IMS6WewR8bhuF1L0/wHorIH8epHDRU0jhf8Hr/edbSGGYQ0SAJid1kUorh
SazAB2pKtYCwD9W/qh+5T8q3LdFlDY8X8nFIw1KSanjvU2ATeb2NF6O1X0b5/mvf
VQj1ke7sm0Hc4KSW4VuRlKApcrrCICKD6i19AGq5I7aqCpWd6yFACToR+4mYp9AA
gJYbbQTSn9Iod0tYHWznTyNhF1SYHcXMSnFED4H+R6iNR9cetsershkastu7IEaC
3P3Ft48fnQaUjROsXdIiRkEzcgeSHhfJBgWABAb9uyUHhLLCGcRCXUvdgNwMX0gc
RO1xBc3CJHYOXLAjGiSIsecR
-----END CERTIFICATE-----