Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/326131323a646434373a353230303a3a2f34302d3438203d3e20323030313630.roa
File:                     326131323a646434373a353230303a3a2f34302d3438203d3e20323030313630.roa (raw, json)
Hash identifier:          dcuFr+Gln/vyXebcVBmalRP5YGCcB4lp/NnFyQzg7ks=
Subject key identifier:   56:FF:A0:8E:CD:31:51:65:66:38:27:9D:FE:52:76:03:78:F7:72:09
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       06DA10E05BDAD003F299160FDDDD8D38A12A00DA
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/326131323a646434373a353230303a3a2f34302d3438203d3e20323030313630.roa
Signing time:             Sat 08 Apr 2023 05:28:46 +0000
ROA not before:           Sat 08 Apr 2023 05:23:46 +0000
ROA not after:            Sat 06 Apr 2024 05:28:46 +0000
asID:                     200160
IP address blocks:        2a12:dd47:5200::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:da:10:e0:5b:da:d0:03:f2:99:16:0f:dd:dd:8d:38:a1:2a:00:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 05:23:46 2023 GMT
            Not After : Apr  6 05:28:46 2024 GMT
        Subject: CN=56FFA08ECD3151656638279DFE52760378F77209
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:86:19:64:9e:9e:fa:41:b9:f5:8a:96:17:82:
                    d4:86:75:20:25:5d:43:49:e8:0d:9d:53:5e:0f:57:
                    d8:f4:6c:3b:bf:b2:b8:b9:eb:6a:c6:de:3e:e3:06:
                    86:97:37:69:04:14:78:6a:51:9f:a5:7e:60:66:29:
                    7b:f8:2c:d8:15:35:7f:3b:c6:a5:65:34:e6:5c:fa:
                    b3:3d:e7:32:b5:a1:31:c5:93:46:3e:c1:06:fe:a9:
                    4e:3b:c6:f5:9e:f0:7c:40:eb:51:aa:22:aa:91:44:
                    f8:36:2f:25:ff:70:8f:95:21:9a:2a:c7:38:63:eb:
                    23:40:9d:14:af:57:92:59:5f:e9:fc:7a:33:9f:5b:
                    b7:25:41:b6:d4:80:23:26:32:ed:56:4d:c2:c2:9d:
                    e0:97:e0:03:66:38:3a:e0:47:bd:74:da:9c:77:cc:
                    b0:c0:2e:d5:7f:c1:62:63:4d:8b:7c:73:8d:96:6f:
                    b3:ee:4e:34:dd:51:a3:67:74:f5:d6:8a:db:e0:a5:
                    58:76:f8:b2:61:f1:61:ab:cd:bc:8f:8f:fc:52:d1:
                    7b:11:76:ea:4e:78:8f:0e:bd:79:71:66:4a:ab:35:
                    1a:27:df:c2:c7:ea:04:dc:c2:9e:ed:72:71:da:6f:
                    d2:b5:4b:d2:8d:04:e0:80:ea:11:4c:f1:8c:6c:c4:
                    01:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:FF:A0:8E:CD:31:51:65:66:38:27:9D:FE:52:76:03:78:F7:72:09
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/326131323a646434373a353230303a3a2f34302d3438203d3e20323030313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:5200::/40

    Signature Algorithm: sha256WithRSAEncryption
         34:85:de:85:72:e5:2e:f4:ac:59:2a:26:9a:08:65:18:76:3b:
         33:c7:77:4b:76:d5:e6:1e:0a:3f:ea:b9:1c:1e:c9:e4:23:eb:
         e6:9b:86:08:0a:bb:0a:75:55:f7:43:fa:c0:38:ac:0d:de:a7:
         3c:00:e8:98:ef:d9:f8:7e:ec:34:51:ab:74:b3:23:47:06:c5:
         a9:e1:0f:d7:90:73:da:d2:d9:08:82:e8:4d:a8:3d:c7:22:9e:
         dd:f9:a9:93:85:14:40:5f:36:bb:59:81:d0:e3:72:ca:c8:af:
         63:73:05:35:8f:40:8d:5d:b2:76:27:fe:d7:a0:ca:f2:77:24:
         5f:92:e6:97:d1:bb:ea:49:ec:79:76:54:6b:1d:35:65:5f:03:
         a5:7f:65:7e:85:e6:31:7a:9d:ed:e9:6a:80:03:e7:43:e5:1f:
         37:6b:40:e9:8d:39:6d:40:95:5e:ab:44:52:7e:cd:2c:3d:d0:
         a3:04:b9:7e:32:35:59:dc:95:4d:19:ec:91:3e:3c:ec:fe:69:
         d0:bc:17:52:d6:ad:eb:97:0d:90:2b:ea:73:0c:aa:4b:e7:af:
         2c:62:b2:af:ce:5b:19:27:21:f7:c9:c6:bb:c3:27:51:30:54:
         2b:a8:b8:10:81:0c:12:fc:c9:77:0f:c5:5f:02:57:3b:07:3d:
         8f:89:10:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:31 2023 by rpki-client on console-fra.rpki-client.org