Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS203913.roa
File:                     AS203913.roa (raw, json)
Hash identifier:          vee8u3UyoMUhHgcxEkLMNtRxwQcF4PpRVtePYt7WERg=
Subject key identifier:   F0:B6:E7:89:C3:27:D7:B9:F9:A6:CD:6C:7D:68:98:B4:46:BD:79:D4
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       2D4EBFB5ADFEE582A2A22CC0FDB01FFEBFBE9E8A
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS203913.roa
Signing time:             Sat 08 Apr 2023 05:05:08 +0000
ROA not before:           Sat 08 Apr 2023 05:00:08 +0000
ROA not after:            Sat 06 Apr 2024 05:05:08 +0000
asID:                     203913
IP address blocks:        2a12:dd47:8800::/39 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:4e:bf:b5:ad:fe:e5:82:a2:a2:2c:c0:fd:b0:1f:fe:bf:be:9e:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 05:00:08 2023 GMT
            Not After : Apr  6 05:05:08 2024 GMT
        Subject: CN=F0B6E789C327D7B9F9A6CD6C7D6898B446BD79D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b3:83:96:b2:9b:7f:50:00:e2:b5:8d:db:ea:
                    3d:43:0e:77:b6:b8:61:c5:80:f0:d9:1a:e2:16:f3:
                    c2:23:5c:1b:72:6d:f1:83:5f:b1:e7:c7:ba:8d:b0:
                    12:6f:d2:e6:c0:03:2c:cc:64:c4:c4:73:f9:d6:04:
                    1c:97:f6:e2:9f:1d:03:21:43:3f:c8:c6:ce:21:f1:
                    28:8d:10:6a:ed:28:23:bd:19:c7:f5:5e:aa:74:0a:
                    d5:aa:f2:0b:3e:56:d6:9c:d3:9f:25:b7:b8:92:00:
                    21:91:de:98:44:1b:cd:66:05:27:6f:93:5c:36:a3:
                    a9:94:30:97:48:93:fa:a1:d3:fd:44:52:74:d0:89:
                    9d:e4:c1:d9:1b:ca:29:ba:67:12:2a:04:5e:37:1e:
                    03:4e:e3:be:12:91:af:58:11:0f:01:a3:9d:be:df:
                    45:a2:d4:55:18:ec:66:ab:2e:2c:80:91:bd:db:3d:
                    5c:4a:9e:c5:c6:1e:09:00:6f:cd:c8:f4:a6:b7:ff:
                    fc:70:b7:fd:bd:9d:be:55:2f:d6:b5:d4:a8:27:84:
                    b2:fb:e2:96:1a:05:5c:e4:67:65:6f:dd:cc:97:fc:
                    9f:3b:cc:b7:83:f5:14:29:60:2f:34:bc:3f:22:91:
                    15:6f:a3:50:29:3d:4e:de:83:98:c0:80:af:3e:98:
                    8b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:B6:E7:89:C3:27:D7:B9:F9:A6:CD:6C:7D:68:98:B4:46:BD:79:D4
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS203913.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8800::/39

    Signature Algorithm: sha256WithRSAEncryption
         0a:2e:87:58:a6:97:fc:5d:9b:72:0f:ab:0e:2a:55:de:c0:a5:
         7c:1c:ad:92:8f:7d:e9:44:6b:49:20:be:40:b8:f8:e0:cb:7a:
         b8:81:4f:7f:2b:cc:47:f3:13:66:84:01:a4:57:22:14:75:bf:
         9e:9e:b8:8f:0a:76:76:fe:46:fe:c9:e4:b1:bc:e7:06:10:5b:
         5c:3e:c3:3e:9a:b8:63:02:63:8e:7f:92:de:71:36:b2:3f:db:
         2c:97:3c:3e:7e:59:1b:2a:c2:0a:13:6a:c1:a4:d4:c9:72:66:
         ce:33:ae:4d:f3:f4:b5:25:f5:bb:16:88:13:63:df:a3:d1:0b:
         c7:dc:5e:11:2f:ef:f4:6d:aa:90:1c:9b:0b:6e:c1:a2:f3:9c:
         4e:c4:b2:bb:44:fe:17:8b:8f:97:d7:8d:05:47:2c:02:45:5d:
         e2:02:f4:09:76:2a:bd:d5:97:9f:95:a2:07:8f:c6:cc:58:97:
         f8:3a:8b:e6:fd:67:71:88:cd:44:94:e2:a0:b5:9b:c1:9f:c9:
         92:a2:b7:20:30:bd:bc:62:18:df:8c:97:37:3f:6b:92:d0:ee:
         5e:b1:10:9e:08:df:75:0a:2b:76:69:c1:7f:ee:d3:2f:b3:9b:
         8c:bf:09:43:8d:e5:d0:74:d3:92:b5:bc:2f:8c:8e:2a:4b:74:
         24:59:b2:4a
-----BEGIN CERTIFICATE-----
MIIEjjCCA3agAwIBAgIULU6/ta3+5YKioizA/bAf/r++noowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjU3ZGNiYTlmYzdiMGVmMWYzY2M4MGExYWVlMjJjMDAx
OThlNzY3YTAeFw0yMzA0MDgwNTAwMDhaFw0yNDA0MDYwNTA1MDhaMDMxMTAvBgNV
BAMTKEYwQjZFNzg5QzMyN0Q3QjlGOUE2Q0Q2QzdENjg5OEI0NDZCRDc5RDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLs4OWspt/UADitY3b6j1DDne2
uGHFgPDZGuIW88IjXBtybfGDX7Hnx7qNsBJv0ubAAyzMZMTEc/nWBByX9uKfHQMh
Qz/Ixs4h8SiNEGrtKCO9Gcf1Xqp0CtWq8gs+Vtac058lt7iSACGR3phEG81mBSdv
k1w2o6mUMJdIk/qh0/1EUnTQiZ3kwdkbyim6ZxIqBF43HgNO474Ska9YEQ8Bo52+
30Wi1FUY7GarLiyAkb3bPVxKnsXGHgkAb83I9Ka3//xwt/29nb5VL9a11KgnhLL7
4pYaBVzkZ2Vv3cyX/J87zLeD9RQpYC80vD8ikRVvo1ApPU7eg5jAgK8+mItjAgMB
AAGjggGYMIIBlDAdBgNVHQ4EFgQU8LbnicMn17n5ps1sfWiYtEa9edQwHwYDVR0j
BBgwFoAUtX3Lqfx7DvHzzIChruIsABmOdnowDgYDVR0PAQH/BAQDAgeAMFkGA1Ud
HwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5jby9yZXBvL0hZU1AvNi9CNTdEQ0JB
OUZDN0IwRUYxRjNDQzgwQTFBRUUyMkMwMDE5OEU3NjdBLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvdFgzTHFmeDdEdkh6eklDaHJ1SXNBQm1PZG5vLmNlcjBEBggr
BgEFBQcBCwQ4MDYwNAYIKwYBBQUHMAuGKHJzeW5jOi8vcnBraS5jby9yZXBvL0hZ
U1AvNi9BUzIwMzkxMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr
BgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGASoS3UeIMA0GCSqGSIb3DQEBCwUAA4IB
AQAKLodYppf8XZtyD6sOKlXewKV8HK2Sj33pRGtJIL5AuPjgy3q4gU9/K8xH8xNm
hAGkVyIUdb+enriPCnZ2/kb+yeSxvOcGEFtcPsM+mrhjAmOOf5LecTayP9sslzw+
flkbKsIKE2rBpNTJcmbOM65N8/S1JfW7FogTY9+j0QvH3F4RL+/0baqQHJsLbsGi
85xOxLK7RP4Xi4+X140FRywCRV3iAvQJdiq91ZeflaIHj8bMWJf4Oovm/WdxiM1E
lOKgtZvBn8mSorcgML28YhjfjJc3P2uS0O5esRCeCN91Cit2acF/7tMvs5uMvwlD
jeXQdNOStbwvjI4qS3QkWbJK
-----END CERTIFICATE-----