Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/326131323a646434363a623030623a3a2f34382d3438203d3e20313432353938.roa
File:                     326131323a646434363a623030623a3a2f34382d3438203d3e20313432353938.roa (raw, json)
Hash identifier:          t1UZO3LQRuQKTWTmtSKN7Un8QzlenOpxoER39iQIRlU=
Subject key identifier:   24:40:8C:E7:5B:6C:E0:22:1C:C7:0F:97:7A:7F:A4:F0:76:ED:B3:26
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       0466AB788505F78E1144BD3F11E1605570A959F9
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/326131323a646434363a623030623a3a2f34382d3438203d3e20313432353938.roa
Signing time:             Sat 08 Apr 2023 05:28:43 +0000
ROA not before:           Sat 08 Apr 2023 05:23:43 +0000
ROA not after:            Sat 06 Apr 2024 05:28:43 +0000
asID:                     142598
IP address blocks:        2a12:dd46:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:66:ab:78:85:05:f7:8e:11:44:bd:3f:11:e1:60:55:70:a9:59:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 05:23:43 2023 GMT
            Not After : Apr  6 05:28:43 2024 GMT
        Subject: CN=24408CE75B6CE0221CC70F977A7FA4F076EDB326
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2e:fd:6a:a1:49:27:a0:50:06:ee:e8:3a:d0:
                    5f:18:62:61:25:de:7d:85:e3:15:50:a0:09:8a:27:
                    f2:8f:49:2e:60:0d:40:d8:80:2b:9e:af:f0:3d:1c:
                    6d:e2:dd:45:0d:d9:7d:e7:90:b9:53:3a:78:89:4f:
                    3c:74:c8:0c:bb:87:76:e8:f3:8f:dd:c6:a2:8d:88:
                    b9:ec:4c:0b:89:43:1e:32:30:ac:63:b0:23:e2:e3:
                    f6:a3:f8:a9:d7:2c:9e:eb:dd:6f:5a:d5:e6:cd:00:
                    99:1e:3f:3a:ed:02:68:a5:98:f7:1c:08:90:8a:54:
                    9f:e6:f4:04:10:7b:6c:f6:69:c7:12:95:04:bc:41:
                    13:6e:97:45:3e:ac:f4:8a:27:e8:b9:16:fa:75:b3:
                    bb:e2:2e:70:ae:ef:57:d2:d2:7d:3b:45:ad:af:73:
                    e6:9d:2c:39:12:7d:0c:e2:10:d0:23:b3:b7:29:96:
                    a1:1d:93:f4:4c:02:53:b8:60:86:2e:88:e9:59:dd:
                    d7:dd:4f:d9:aa:d1:c4:e6:e7:1f:a3:49:fe:7e:56:
                    b2:e9:33:76:2c:87:89:03:f1:63:78:05:03:a1:d6:
                    e8:4e:72:ff:71:54:2c:b9:da:b1:1c:df:03:95:60:
                    0d:1f:ad:63:58:22:39:1c:1b:23:f7:91:b9:64:3f:
                    a0:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:40:8C:E7:5B:6C:E0:22:1C:C7:0F:97:7A:7F:A4:F0:76:ED:B3:26
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/326131323a646434363a623030623a3a2f34382d3438203d3e20313432353938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd46:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         ba:fb:0b:cc:61:76:bb:3e:4c:b5:6b:e1:b1:0f:3e:0c:15:cb:
         af:ac:ec:48:81:64:db:e0:b7:8e:33:c9:00:b7:39:d6:b6:aa:
         7f:96:60:c4:dd:b1:86:e5:e0:99:8e:bb:43:19:ee:d3:33:7c:
         b8:43:2d:be:3b:4f:72:3a:5b:66:56:61:b4:d3:4d:83:50:28:
         b5:69:57:e2:6c:79:4a:af:e8:1e:50:e0:cb:1d:50:2c:8f:d0:
         5e:ea:a0:91:87:1b:a8:10:33:41:f6:0d:23:ca:6f:2c:fa:3d:
         33:47:b5:20:c8:1f:92:18:ef:86:a0:bd:ef:9a:cb:57:d8:84:
         2d:27:94:86:73:bb:c9:b8:d9:11:06:04:03:dc:d4:9d:75:1d:
         10:0e:4f:ec:d8:d3:d8:f8:e5:c9:7c:4b:e5:74:2e:c0:a2:fa:
         66:74:03:f4:76:55:b2:90:9d:3f:77:d6:9e:6b:27:14:d8:c6:
         2e:fd:71:07:07:e4:64:4f:00:00:87:ec:fd:43:c0:7a:4a:46:
         0d:59:df:75:cf:38:59:54:8c:11:35:38:b8:99:98:4a:2a:32:
         cf:1c:28:69:5f:8a:5a:71:16:2a:ec:01:e4:03:2f:06:3f:57:
         1a:40:6c:10:1f:8f:05:20:d6:10:35:8b:c5:17:e3:b3:0d:23:
         2c:3c:1b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----