Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS203888.roa
File:                     AS203888.roa (raw, json)
Hash identifier:          PiLxlQ8BacoZKhvV5RGW3nDo2yaQStqe+bRWxWcQJtI=
Subject key identifier:   AE:FE:68:93:79:7D:5B:29:A7:B1:3D:CF:D6:FA:0A:CA:6B:80:7A:AE
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       72C1974048DBE7170F6FCB84C13A9D85E1F64F58
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS203888.roa
Signing time:             Sat 08 Apr 2023 03:25:40 +0000
ROA not before:           Sat 08 Apr 2023 03:20:40 +0000
ROA not after:            Sat 06 Apr 2024 03:25:40 +0000
asID:                     203888
IP address blocks:        2a12:dd47:300::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:c1:97:40:48:db:e7:17:0f:6f:cb:84:c1:3a:9d:85:e1:f6:4f:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:40 2023 GMT
            Not After : Apr  6 03:25:40 2024 GMT
        Subject: CN=AEFE6893797D5B29A7B13DCFD6FA0ACA6B807AAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3d:97:b5:e5:ac:8b:15:08:62:06:18:ac:98:
                    d5:0f:6c:33:5d:2d:80:99:4d:31:be:36:2c:5d:d6:
                    51:3c:c5:03:57:88:85:08:4a:3f:54:a1:a7:86:67:
                    36:06:44:bb:90:77:09:b3:fd:f6:d7:2a:61:53:0b:
                    7a:85:65:2c:5e:f6:e2:39:f7:10:78:0a:7d:22:35:
                    91:88:4b:6a:d6:38:fe:6e:77:27:38:ee:98:eb:81:
                    5f:5a:d9:1e:1b:c5:4a:41:4b:2e:d1:9f:4c:b6:a3:
                    36:bc:7e:52:f7:bf:d4:2f:8d:a8:b4:64:3d:dc:7a:
                    08:1a:13:0f:0e:0f:56:94:33:21:1f:d5:91:77:27:
                    fd:4a:7c:6a:d8:ca:de:e0:d5:96:4a:bc:60:a6:3b:
                    59:5b:6e:76:33:6d:47:6e:11:b8:19:43:68:10:f3:
                    1e:8a:7f:d3:de:b5:7c:a9:bd:7d:b9:6f:be:95:0b:
                    22:c6:b5:97:e4:ac:e5:80:3a:58:ca:07:27:7e:3c:
                    1c:d0:a8:45:79:f5:bd:3c:cd:58:19:2e:ec:b3:f0:
                    67:6a:e7:a4:b4:03:7a:f3:92:09:f8:46:35:e8:a0:
                    7f:18:8a:04:99:4a:2f:99:71:b2:45:ba:70:90:d8:
                    ee:7a:a0:5c:8a:fb:b6:0c:4a:d0:05:21:b7:e6:73:
                    e4:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:FE:68:93:79:7D:5B:29:A7:B1:3D:CF:D6:FA:0A:CA:6B:80:7A:AE
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS203888.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         b5:5d:52:83:ca:52:b8:84:68:61:1e:e6:bf:03:e7:5d:78:14:
         89:f2:59:dd:22:c9:01:41:4e:f2:1f:ea:4a:4f:f6:84:16:60:
         24:4a:4d:e4:b4:78:67:18:3b:8c:05:57:8d:fe:a1:cc:f3:24:
         03:5d:ff:d6:37:d3:ab:81:d5:7a:8a:79:46:08:71:a4:61:5c:
         55:88:1a:4b:4a:32:b0:8d:60:20:90:df:4d:43:8d:bf:84:ac:
         43:94:79:a2:22:13:ea:0a:2a:41:30:af:b6:28:ab:70:10:8c:
         24:a9:c5:36:0c:0d:77:d2:77:53:38:b3:04:27:76:3b:54:bc:
         1d:4f:b1:69:51:70:46:5f:b4:18:d1:d8:4a:fc:b2:59:9f:07:
         d6:74:a7:2e:2d:db:c4:be:1a:1c:d1:2c:f7:fa:d4:df:f2:78:
         87:dc:ca:4d:21:00:94:15:27:93:e2:c9:a6:8d:54:a5:3d:db:
         27:2c:59:a7:44:cb:19:2e:71:9e:20:61:b1:22:42:56:e8:60:
         23:1b:b7:00:db:73:b6:28:ae:2c:0c:7b:f3:10:55:db:38:01:
         78:7c:d5:89:4d:53:df:06:48:dc:78:5d:08:93:0a:13:db:f7:
         d3:cc:30:d8:d8:e6:27:05:11:61:c1:21:13:44:e0:f2:18:7a:
         24:91:4b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----