Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/326131323a646434373a333130303a3a2f34302d3438203d3e20313939333331.roa
File:                     326131323a646434373a333130303a3a2f34302d3438203d3e20313939333331.roa (raw, json)
Hash identifier:          R768E27LPaZjUpK9yQqW+IysC/We1tsMYfFjMoq4Wek=
Subject key identifier:   AA:33:13:11:67:B4:54:00:C6:6F:88:97:23:CB:91:38:F0:A7:C9:C1
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       652717FD50E035F707F6D6FFDD1F21DD3AFC00C9
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/326131323a646434373a333130303a3a2f34302d3438203d3e20313939333331.roa
Signing time:             Sat 08 Apr 2023 05:28:52 +0000
ROA not before:           Sat 08 Apr 2023 05:23:52 +0000
ROA not after:            Sat 06 Apr 2024 05:28:52 +0000
asID:                     199331
IP address blocks:        2a12:dd47:3100::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:27:17:fd:50:e0:35:f7:07:f6:d6:ff:dd:1f:21:dd:3a:fc:00:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 05:23:52 2023 GMT
            Not After : Apr  6 05:28:52 2024 GMT
        Subject: CN=AA33131167B45400C66F889723CB9138F0A7C9C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:9c:c7:8d:6e:ec:91:93:1a:e6:5a:f3:37:c8:
                    7e:7e:7a:82:af:4b:c8:d1:6b:55:32:b7:fa:64:b5:
                    f8:93:3a:1e:08:0a:82:74:5e:63:af:23:89:cd:12:
                    42:06:e5:4c:49:a7:be:3d:7b:67:07:a7:d2:e2:1b:
                    54:0a:f5:a2:68:66:04:8d:c1:1b:90:cf:b2:ec:07:
                    95:41:43:5c:68:3a:e1:9f:cb:9d:49:e4:83:5c:ce:
                    a6:2b:ba:8f:35:d0:26:4f:4d:50:bb:88:39:62:46:
                    80:ec:89:4f:23:eb:97:1c:cc:63:4c:eb:a1:13:15:
                    30:03:4f:db:6f:08:a0:6b:b6:ae:55:f7:59:7f:b2:
                    a0:50:b1:d5:ce:19:ca:52:f7:86:68:a9:83:65:ce:
                    b3:9f:d5:a9:33:58:b6:43:32:b2:13:bd:84:87:0c:
                    54:ad:08:28:a8:73:2a:56:05:04:76:55:c1:4b:5b:
                    9b:ea:ed:81:ca:c3:ce:53:84:d8:50:0c:47:64:e0:
                    9e:9d:8c:80:06:bf:b5:27:9f:a9:16:a6:c2:a9:19:
                    aa:08:8c:b3:48:0c:40:1c:37:6e:3f:82:e8:e7:05:
                    67:5f:83:b1:fe:d4:3a:b9:8a:aa:1e:04:a4:c9:8f:
                    35:6c:59:62:eb:48:16:9f:8a:e7:56:04:38:33:92:
                    1f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:33:13:11:67:B4:54:00:C6:6F:88:97:23:CB:91:38:F0:A7:C9:C1
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/326131323a646434373a333130303a3a2f34302d3438203d3e20313939333331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:3100::/40

    Signature Algorithm: sha256WithRSAEncryption
         78:a8:a4:28:b9:26:21:d5:9f:3f:ab:c4:c8:69:bc:72:36:10:
         a6:51:92:94:70:e9:dc:17:f5:8d:da:91:df:9c:48:9b:3b:24:
         f0:e9:93:d1:47:13:65:9c:d7:52:a7:48:ba:aa:71:ef:5b:b0:
         cf:68:e0:45:e7:e4:d8:8e:3f:47:5d:78:1f:19:ac:b0:10:44:
         25:9e:60:11:8d:ed:c2:c5:59:53:1e:23:c7:f6:95:ae:56:05:
         4b:56:d5:49:fb:90:0b:19:5c:18:e1:70:0d:51:67:de:ca:ef:
         15:cb:4f:83:64:97:7c:16:a2:73:c3:84:f8:ae:19:be:5b:4f:
         89:b6:02:62:7e:54:b6:20:6e:3f:b1:28:2e:44:bc:ce:ae:e8:
         7e:ad:84:55:67:39:3a:f6:45:d4:c7:c9:de:78:d0:bd:f6:15:
         ca:7b:ea:8f:c1:c2:7e:61:17:31:2e:44:1f:ea:59:e6:83:2f:
         b5:4d:ef:b5:23:b5:8b:b1:92:4b:54:a2:83:46:07:54:00:31:
         2c:ec:2e:f3:43:13:97:70:f2:71:84:c1:31:1e:2f:57:7a:c2:
         37:0c:76:f1:8e:2d:62:ea:86:dc:88:d4:5d:91:3c:a7:a7:a3:
         98:63:94:22:48:2b:63:be:68:db:6b:12:6a:ea:2b:42:a0:90:
         0a:94:2b:a9
-----BEGIN CERTIFICATE-----
MIIExjCCA66gAwIBAgIUZScX/VDgNfcH9tb/3R8h3Tr8AMkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjU3ZGNiYTlmYzdiMGVmMWYzY2M4MGExYWVlMjJjMDAx
OThlNzY3YTAeFw0yMzA0MDgwNTIzNTJaFw0yNDA0MDYwNTI4NTJaMDMxMTAvBgNV
BAMTKEFBMzMxMzExNjdCNDU0MDBDNjZGODg5NzIzQ0I5MTM4RjBBN0M5QzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDznMeNbuyRkxrmWvM3yH5+eoKv
S8jRa1Uyt/pktfiTOh4ICoJ0XmOvI4nNEkIG5UxJp749e2cHp9LiG1QK9aJoZgSN
wRuQz7LsB5VBQ1xoOuGfy51J5INczqYruo810CZPTVC7iDliRoDsiU8j65cczGNM
66ETFTADT9tvCKBrtq5V91l/sqBQsdXOGcpS94ZoqYNlzrOf1akzWLZDMrITvYSH
DFStCCiocypWBQR2VcFLW5vq7YHKw85ThNhQDEdk4J6djIAGv7Unn6kWpsKpGaoI
jLNIDEAcN24/gujnBWdfg7H+1Dq5iqoeBKTJjzVsWWLrSBafiudWBDgzkh95AgMB
AAGjggHQMIIBzDAdBgNVHQ4EFgQUqjMTEWe0VADGb4iXI8uROPCnycEwHwYDVR0j
BBgwFoAUtX3Lqfx7DvHzzIChruIsABmOdnowDgYDVR0PAQH/BAQDAgeAMFkGA1Ud
HwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5jby9yZXBvL0hZU1AvNi9CNTdEQ0JB
OUZDN0IwRUYxRjNDQzgwQTFBRUUyMkMwMDE5OEU3NjdBLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvdFgzTHFmeDdEdkh6eklDaHJ1SXNBQm1PZG5vLmNlcjB8Bggr
BgEFBQcBCwRwMG4wbAYIKwYBBQUHMAuGYHJzeW5jOi8vcnBraS5jby9yZXBvL0hZ
U1AvNi8zMjYxMzEzMjNhNjQ2NDM0MzczYTMzMzEzMDMwM2EzYTJmMzQzMDJkMzQz
ODIwM2QzZTIwMzEzOTM5MzMzMzMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhLdRzEwDQYJKoZIhvcN
AQELBQADggEBAHiopCi5JiHVnz+rxMhpvHI2EKZRkpRw6dwX9Y3akd+cSJs7JPDp
k9FHE2Wc11KnSLqqce9bsM9o4EXn5NiOP0ddeB8ZrLAQRCWeYBGN7cLFWVMeI8f2
la5WBUtW1Un7kAsZXBjhcA1RZ97K7xXLT4Nkl3wWonPDhPiuGb5bT4m2AmJ+VLYg
bj+xKC5EvM6u6H6thFVnOTr2RdTHyd540L32Fcp76o/Bwn5hFzEuRB/qWeaDL7VN
77UjtYuxkktUooNGB1QAMSzsLvNDE5dw8nGEwTEeL1d6wjcMdvGOLWLqhtyI1F2R
PKeno5hjlCJIK2O+aNtrEmrqK0KgkAqUK6k=
-----END CERTIFICATE-----