Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS203661.roa
File:                     AS203661.roa (raw, json)
Hash identifier:          U9p7Kc9bZHo8VKdlT2Z9PcmGe2sRBnTexfZnRuJn1us=
Subject key identifier:   6A:8D:1C:47:4B:E4:99:15:DA:0F:1F:83:8E:96:26:1E:D6:EA:7A:51
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       49DB6305A9452185341B14438E58D7968CAFA112
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS203661.roa
Signing time:             Sat 08 Apr 2023 03:25:26 +0000
ROA not before:           Sat 08 Apr 2023 03:20:26 +0000
ROA not after:            Sat 06 Apr 2024 03:25:26 +0000
asID:                     203661
IP address blocks:        2a12:dd47:81d0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:db:63:05:a9:45:21:85:34:1b:14:43:8e:58:d7:96:8c:af:a1:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:26 2023 GMT
            Not After : Apr  6 03:25:26 2024 GMT
        Subject: CN=6A8D1C474BE49915DA0F1F838E96261ED6EA7A51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8f:ba:c3:67:c7:9e:e9:38:73:9c:88:c0:fc:
                    a6:18:4f:dd:4c:c4:c9:21:1e:c4:b6:9b:85:dc:05:
                    13:19:f1:2f:46:5e:79:4e:69:47:2e:1d:19:c9:21:
                    dd:18:88:46:78:83:f0:52:63:06:93:58:dd:6c:5c:
                    a2:07:79:34:f1:07:05:84:41:9a:83:9e:9a:14:4d:
                    a8:b0:41:f6:3e:05:a6:b0:6b:a0:fb:d7:88:51:86:
                    c6:a6:aa:bf:ea:6a:91:02:4a:2f:12:e7:b9:99:ed:
                    06:6d:d3:7c:77:bd:65:b4:f1:00:85:76:38:a0:a5:
                    a2:39:a0:cb:13:6a:a1:cf:b6:71:48:fa:35:70:25:
                    db:41:60:31:24:f8:c9:19:20:49:3c:32:53:c6:19:
                    79:6b:97:0a:97:91:d8:8a:a4:3d:2c:64:7b:2d:5e:
                    26:71:4f:f9:af:39:52:ad:fe:41:02:a3:a7:4f:d3:
                    c1:59:19:8a:15:62:d3:2e:d7:8c:c5:d3:fe:30:00:
                    ff:9f:c4:39:d5:28:41:58:58:19:74:1c:23:23:0e:
                    37:39:60:d2:4d:c5:1d:64:bf:2b:a8:41:f6:11:69:
                    03:78:b5:0d:06:63:4f:0b:f3:aa:b2:08:5f:5a:37:
                    b7:38:2d:bb:bf:4c:b0:61:c3:a9:2f:f3:e0:ef:a7:
                    81:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:8D:1C:47:4B:E4:99:15:DA:0F:1F:83:8E:96:26:1E:D6:EA:7A:51
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS203661.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:81d0::/44

    Signature Algorithm: sha256WithRSAEncryption
         7f:52:76:22:ad:c9:d7:ee:0a:b8:20:d3:1f:39:7d:1e:7b:76:
         ae:db:99:ec:80:0b:fc:7a:89:9b:b9:9a:df:e5:da:f2:4d:fe:
         3e:43:63:c9:36:6c:73:72:e0:6e:a8:65:3e:9f:7f:e2:bf:c8:
         f4:78:8c:1e:a4:3a:0c:31:db:bd:16:5f:80:0d:0a:6a:98:20:
         eb:c2:60:dc:85:cb:e1:7d:c8:89:d1:f9:40:f3:3b:0f:0d:62:
         7c:b4:0e:e1:76:df:db:a5:39:0b:03:b3:48:8f:66:5f:57:64:
         c3:75:2d:03:ac:76:05:8c:bf:49:c3:c5:17:80:22:a6:23:12:
         0b:10:e5:4d:fe:84:d7:66:29:d5:f5:5a:2f:31:f0:01:17:a3:
         1c:49:8b:9e:6d:8f:5e:04:64:27:4a:bb:d6:42:62:f9:c5:17:
         a7:d6:ab:a5:7a:b4:85:5f:7f:e1:f2:2b:db:a0:66:b8:59:26:
         e1:71:8c:b0:c7:5f:3f:9b:9d:de:4e:c2:34:26:cc:f3:8c:b5:
         38:5a:32:59:74:56:1f:20:e5:bb:c7:c4:a6:b8:8e:67:02:52:
         b9:f1:53:b1:60:92:00:ca:84:27:ff:a1:2e:af:fa:ab:6a:94:
         d1:b4:f3:b5:58:87:9c:6d:ac:6e:c6:04:e1:fb:e9:6e:e5:81:
         77:69:8a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----