Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/326131323a646434373a343030303a3a2f33362d3438203d3e20323032323536.roa
File:                     326131323a646434373a343030303a3a2f33362d3438203d3e20323032323536.roa (raw, json)
Hash identifier:          JHMHym90g5h7+fNpH8t37SGFyGwnQYxqt+ODlfDIgo8=
Subject key identifier:   36:56:84:56:B7:78:01:DC:E5:D3:4D:EE:15:66:59:72:2A:6A:A3:71
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       6C7EA20CFDA0DBA0BBBCD11ED98500FC915CAEBC
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/326131323a646434373a343030303a3a2f33362d3438203d3e20323032323536.roa
Signing time:             Sat 08 Apr 2023 05:28:52 +0000
ROA not before:           Sat 08 Apr 2023 05:23:52 +0000
ROA not after:            Sat 06 Apr 2024 05:28:52 +0000
asID:                     202256
IP address blocks:        2a12:dd47:4000::/36 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:7e:a2:0c:fd:a0:db:a0:bb:bc:d1:1e:d9:85:00:fc:91:5c:ae:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 05:23:52 2023 GMT
            Not After : Apr  6 05:28:52 2024 GMT
        Subject: CN=36568456B77801DCE5D34DEE156659722A6AA371
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b9:37:74:39:c4:83:b1:66:b7:04:b0:6f:1f:
                    bd:1c:ae:07:6f:cd:5c:4f:1f:a1:a9:d9:b0:3f:fa:
                    3c:3e:8e:4a:0c:f0:cb:24:ef:56:7d:39:88:b7:68:
                    b3:37:22:16:ee:19:69:7a:5c:8d:b0:1e:d9:a7:bc:
                    d1:e6:c7:8d:cc:a8:85:4f:05:b2:93:ff:af:f4:59:
                    99:6f:e2:d6:c4:9f:ef:ea:ad:01:bc:93:a1:e9:4b:
                    a4:5b:09:0c:04:86:c6:74:da:55:aa:e5:15:40:a5:
                    7d:27:0a:c9:2a:df:ec:2a:18:c7:ec:5e:16:2b:0e:
                    21:2d:81:a2:d5:e5:10:32:34:dd:20:16:58:82:d6:
                    1f:a5:8c:34:ce:04:90:9a:79:3d:2e:e1:5f:d5:90:
                    0c:68:c0:77:db:d3:bb:7c:2c:76:9b:55:71:88:61:
                    36:26:56:70:2d:17:a5:4d:83:e3:42:10:35:8a:2f:
                    13:a8:00:ac:f4:c6:70:db:ed:f5:51:bc:3a:5e:78:
                    e1:80:c1:32:68:e5:dd:2b:63:f5:b9:f5:98:85:87:
                    d7:11:26:2b:fd:09:73:20:52:77:eb:43:5f:35:4b:
                    0a:23:7a:ed:b3:5a:5b:cf:a3:8d:24:00:ef:fc:48:
                    ad:db:12:68:cb:ae:96:18:db:7d:9d:71:24:95:9c:
                    6e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:56:84:56:B7:78:01:DC:E5:D3:4D:EE:15:66:59:72:2A:6A:A3:71
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/326131323a646434373a343030303a3a2f33362d3438203d3e20323032323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         04:38:a1:fb:85:98:9c:4d:e0:88:cd:39:91:fa:b8:d8:29:d5:
         d8:d6:2c:fd:28:4e:1f:fa:4f:9c:f0:60:59:5d:ec:fe:9d:25:
         b7:78:f7:b6:85:ac:c3:18:72:03:6f:25:0e:92:71:b3:29:b9:
         8f:13:fd:c3:01:42:5b:d0:56:e8:f4:10:2c:e2:6f:4e:bd:d4:
         68:96:6a:cc:74:b5:f9:99:e1:d0:fe:a3:ca:a7:af:56:26:3d:
         07:27:68:ed:dd:0d:cd:e0:09:1b:0f:0a:76:36:b9:1f:1b:2d:
         30:09:b8:39:cb:ec:3a:3f:4d:fb:cd:38:80:dc:f8:fb:15:e2:
         24:c8:b0:9a:d0:92:16:04:d6:9f:a2:be:3b:56:da:ac:25:59:
         27:cb:70:71:d2:bd:d2:1c:95:92:17:2e:34:8d:29:57:84:ff:
         25:f7:1f:2e:35:52:ec:8f:52:83:fd:77:31:27:8f:5b:96:73:
         b6:9d:10:e8:41:f3:95:b7:14:ac:72:f0:35:7a:57:e4:9d:6c:
         88:60:57:43:1d:49:ef:78:6e:95:88:cd:02:7d:cf:86:82:dd:
         8b:06:5e:9d:32:09:77:7e:4c:9a:73:8e:e0:14:a4:be:88:5e:
         db:33:c4:31:e0:18:7a:5b:41:69:2d:14:f0:69:98:2a:5b:83:
         4f:0e:09:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:31 2023 by rpki-client on console-fra.rpki-client.org