Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS203867.roa
File:                     AS203867.roa (raw, json)
Hash identifier:          hIOiVH/boXevKtDLFAtMXnTXe02Ap1vfwA87TlZ20J8=
Subject key identifier:   59:1A:43:B5:E0:20:10:A7:1B:FE:3C:2A:9B:5D:B7:CB:7C:05:F9:1D
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       1C6320544D9B59F4A6D5A8493C04C007EE7C3EC6
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS203867.roa
Signing time:             Sat 08 Apr 2023 03:25:26 +0000
ROA not before:           Sat 08 Apr 2023 03:20:26 +0000
ROA not after:            Sat 06 Apr 2024 03:25:26 +0000
asID:                     203867
IP address blocks:        2a12:dd47:8170::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:63:20:54:4d:9b:59:f4:a6:d5:a8:49:3c:04:c0:07:ee:7c:3e:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:26 2023 GMT
            Not After : Apr  6 03:25:26 2024 GMT
        Subject: CN=591A43B5E02010A71BFE3C2A9B5DB7CB7C05F91D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:24:87:13:d8:58:b9:5b:0c:8e:be:72:cf:03:
                    38:91:2c:b7:5a:64:24:30:53:2e:2e:48:f7:3a:f1:
                    ed:50:aa:6f:f5:9f:ff:09:23:16:a2:d2:b4:9e:3e:
                    a3:bb:50:73:d9:96:3f:ec:67:61:14:1b:75:55:5c:
                    23:b3:90:c6:75:90:51:6b:b5:20:5e:f2:f7:0e:e5:
                    3e:81:f2:43:d0:dd:e3:77:84:9b:57:47:7a:36:2f:
                    65:fa:21:04:41:9f:b6:90:f5:09:57:a6:16:b0:34:
                    f9:59:5b:94:ea:94:7a:be:3e:c6:26:f2:ea:3b:05:
                    e4:71:c5:99:79:3f:c2:89:fa:f2:6e:b0:94:71:2b:
                    fa:93:a9:e0:5d:c2:1e:d8:28:0f:ab:22:64:b7:8e:
                    20:6c:8f:06:9d:d5:72:a1:ed:91:ec:77:c6:86:b3:
                    f1:7e:fc:6c:a1:1a:6b:a6:ea:32:91:33:27:58:72:
                    48:cd:ea:54:2c:e7:61:51:38:96:fa:4d:a1:ac:6b:
                    a8:1b:3b:e3:cf:a0:a2:8d:37:74:d0:66:0a:bc:1f:
                    b4:81:31:0c:c6:f9:8a:4e:88:9d:99:66:04:ae:fa:
                    e6:a5:bc:ed:42:f0:43:31:98:d0:be:5c:3f:1b:b3:
                    50:3d:4c:8f:ba:1f:f6:38:48:cb:ab:55:f9:8e:99:
                    fb:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:1A:43:B5:E0:20:10:A7:1B:FE:3C:2A:9B:5D:B7:CB:7C:05:F9:1D
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS203867.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8170::/44

    Signature Algorithm: sha256WithRSAEncryption
         96:d9:b7:25:fb:61:52:b9:cc:e4:64:03:b2:3c:a7:cf:30:2d:
         33:33:71:98:45:cd:16:16:8d:67:71:4a:ce:82:da:a4:02:89:
         7b:cc:2f:8c:ea:a3:71:80:c0:58:7b:e1:c0:9d:2a:f3:29:d2:
         53:28:8b:3d:db:f4:df:a3:5e:ce:ff:13:18:31:78:49:04:8e:
         9b:ba:aa:88:4a:0c:eb:11:58:26:82:b6:78:ec:36:53:48:e5:
         cc:05:1a:56:f5:4d:9a:fe:83:24:77:44:0a:52:4f:7c:63:eb:
         c9:e4:09:57:f9:16:f7:18:cf:be:03:23:eb:e1:a9:55:3c:23:
         51:e6:99:1c:22:ff:3c:dd:8f:cd:d3:06:a8:fe:06:59:e4:7f:
         f6:c9:2f:9a:af:57:31:d5:3d:b1:48:42:35:e6:fe:86:7c:8d:
         67:f2:7b:3a:d9:58:0f:cd:31:29:75:fd:29:5d:4f:24:8a:b6:
         c5:31:57:57:ea:e9:18:0f:7e:89:c8:bf:e0:d9:dc:1a:9e:7b:
         c3:25:7d:11:1b:d6:6e:81:fb:41:d9:a4:48:12:2d:ee:cb:ee:
         24:9a:d9:86:51:b8:63:cf:84:57:2e:ac:8d:e8:d2:2f:6d:37:
         16:64:30:ef:c1:f2:98:c8:08:1a:45:b2:04:7a:78:c9:53:4c:
         73:80:b6:a0
-----BEGIN CERTIFICATE-----
MIIEjzCCA3egAwIBAgIUHGMgVE2bWfSm1ahJPATAB+58PsYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjU3ZGNiYTlmYzdiMGVmMWYzY2M4MGExYWVlMjJjMDAx
OThlNzY3YTAeFw0yMzA0MDgwMzIwMjZaFw0yNDA0MDYwMzI1MjZaMDMxMTAvBgNV
BAMTKDU5MUE0M0I1RTAyMDEwQTcxQkZFM0MyQTlCNURCN0NCN0MwNUY5MUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0JIcT2Fi5WwyOvnLPAziRLLda
ZCQwUy4uSPc68e1Qqm/1n/8JIxai0rSePqO7UHPZlj/sZ2EUG3VVXCOzkMZ1kFFr
tSBe8vcO5T6B8kPQ3eN3hJtXR3o2L2X6IQRBn7aQ9QlXphawNPlZW5TqlHq+PsYm
8uo7BeRxxZl5P8KJ+vJusJRxK/qTqeBdwh7YKA+rImS3jiBsjwad1XKh7ZHsd8aG
s/F+/GyhGmum6jKRMydYckjN6lQs52FROJb6TaGsa6gbO+PPoKKNN3TQZgq8H7SB
MQzG+YpOiJ2ZZgSu+ualvO1C8EMxmNC+XD8bs1A9TI+6H/Y4SMurVfmOmfuTAgMB
AAGjggGZMIIBlTAdBgNVHQ4EFgQUWRpDteAgEKcb/jwqm123y3wF+R0wHwYDVR0j
BBgwFoAUtX3Lqfx7DvHzzIChruIsABmOdnowDgYDVR0PAQH/BAQDAgeAMFkGA1Ud
HwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5jby9yZXBvL0hZU1AvNi9CNTdEQ0JB
OUZDN0IwRUYxRjNDQzgwQTFBRUUyMkMwMDE5OEU3NjdBLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvdFgzTHFmeDdEdkh6eklDaHJ1SXNBQm1PZG5vLmNlcjBEBggr
BgEFBQcBCwQ4MDYwNAYIKwYBBQUHMAuGKHJzeW5jOi8vcnBraS5jby9yZXBvL0hZ
U1AvNi9BUzIwMzg2Ny5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoS3UeBcDANBgkqhkiG9w0BAQsFAAOC
AQEAltm3JfthUrnM5GQDsjynzzAtMzNxmEXNFhaNZ3FKzoLapAKJe8wvjOqjcYDA
WHvhwJ0q8ynSUyiLPdv036Nezv8TGDF4SQSOm7qqiEoM6xFYJoK2eOw2U0jlzAUa
VvVNmv6DJHdEClJPfGPryeQJV/kW9xjPvgMj6+GpVTwjUeaZHCL/PN2PzdMGqP4G
WeR/9skvmq9XMdU9sUhCNeb+hnyNZ/J7OtlYD80xKXX9KV1PJIq2xTFXV+rpGA9+
ici/4NncGp57wyV9ERvWboH7QdmkSBIt7svuJJrZhlG4Y8+EVy6sjejSL203FmQw
78HymMgIGkWyBHp4yVNMc4C2oA==
-----END CERTIFICATE-----