Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/326131323a646434363a383030303a3a2f34382d3438203d3e20323034363736.roa
File:                     326131323a646434363a383030303a3a2f34382d3438203d3e20323034363736.roa (raw, json)
Hash identifier:          +SSjOvZoWxOAPrRSTzKvKBnDaSJSm351xngVNgs6Wao=
Subject key identifier:   89:0F:36:E8:8A:26:34:58:70:61:7A:BF:26:99:9C:0E:3E:99:6F:EF
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       0D8DAB83C9651CC775A1C625958BA284A5652FBE
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/326131323a646434363a383030303a3a2f34382d3438203d3e20323034363736.roa
Signing time:             Sat 08 Apr 2023 05:28:40 +0000
ROA not before:           Sat 08 Apr 2023 05:23:40 +0000
ROA not after:            Sat 06 Apr 2024 05:28:40 +0000
asID:                     204676
IP address blocks:        2a12:dd46:8000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:8d:ab:83:c9:65:1c:c7:75:a1:c6:25:95:8b:a2:84:a5:65:2f:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 05:23:40 2023 GMT
            Not After : Apr  6 05:28:40 2024 GMT
        Subject: CN=890F36E88A26345870617ABF26999C0E3E996FEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:07:2d:d6:69:78:61:7e:b3:c9:3f:aa:ec:ad:
                    2a:52:57:a8:c4:46:d0:b0:3b:fb:d7:e3:59:c5:f7:
                    9c:69:ec:48:89:1a:1d:23:b2:20:7d:a8:8b:82:ad:
                    c8:b0:63:75:3c:29:8f:af:1a:e6:91:09:5f:d3:e7:
                    c7:69:16:83:ef:a0:36:03:96:a6:83:e7:8c:09:2c:
                    af:ce:71:64:e1:6e:c3:c9:4e:01:a8:9c:59:ad:67:
                    6a:99:ba:0a:04:0b:f1:0f:8a:68:ef:e3:0d:b9:71:
                    1d:0c:c3:08:b8:f9:8b:d1:64:f5:b7:1f:de:01:5a:
                    bb:d5:8d:39:d9:da:f7:8b:51:88:5d:ba:45:9c:de:
                    51:cc:5a:ea:1f:70:c7:bb:9c:2a:04:d8:27:be:dc:
                    4a:0c:2c:33:66:6f:57:78:1e:5b:e9:46:82:e7:2a:
                    24:f8:1f:31:3e:3f:6e:36:52:ba:b4:69:28:eb:df:
                    12:c7:97:77:5b:a3:50:96:7e:a5:32:8b:b5:94:30:
                    47:7e:22:16:ca:af:20:1f:60:59:61:09:fb:a5:4c:
                    49:51:cc:24:06:76:d2:a1:49:f2:01:75:e8:fc:87:
                    c9:26:3b:37:44:ef:84:4b:9e:df:6a:e5:1b:b6:e9:
                    9a:99:9b:bd:27:29:a0:f9:02:c0:34:08:b6:4f:e1:
                    57:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:0F:36:E8:8A:26:34:58:70:61:7A:BF:26:99:9C:0E:3E:99:6F:EF
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/326131323a646434363a383030303a3a2f34382d3438203d3e20323034363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd46:8000::/48

    Signature Algorithm: sha256WithRSAEncryption
         b5:88:a2:66:34:8e:4b:9d:29:09:da:34:b8:b3:4f:a9:cc:c5:
         d8:5c:91:50:5e:8e:4e:89:0e:15:15:27:4e:33:8f:4f:13:19:
         2b:18:fe:78:e5:3d:e9:b1:70:8e:e2:8b:4c:30:d8:9a:b1:0e:
         dc:64:f9:0f:89:da:c0:42:ba:59:d0:df:5f:50:20:1f:a3:74:
         92:37:b9:72:48:0b:7e:50:21:80:43:7a:6b:3c:39:54:c3:2f:
         46:3d:ed:c1:7a:04:e1:38:c7:d7:fb:9c:2c:0f:80:32:ff:f4:
         91:0b:83:69:f0:4a:7f:ef:cc:08:ee:c2:f2:df:6f:36:25:ad:
         02:17:a9:36:57:81:a1:14:17:ed:dc:7a:d1:ad:4b:a0:c2:72:
         2e:3b:87:e6:e3:cc:f4:cb:33:90:1f:9a:d9:88:a8:2d:a6:b7:
         08:fd:fd:7b:d7:c4:14:a3:97:90:09:17:56:59:d3:29:84:d3:
         c8:b0:0d:fc:0b:a7:0b:14:1a:ab:4b:15:a2:c2:e2:da:24:3d:
         e2:7d:3c:9c:0c:30:d5:2c:e6:5c:91:63:3d:08:d2:33:82:9e:
         64:1b:75:b5:86:63:34:6b:db:43:e1:8b:98:f6:e9:38:22:71:
         08:5e:04:15:28:f1:0c:8f:bf:1c:15:72:a2:68:0c:7c:82:19:
         34:09:64:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----