Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/326131323a646434373a383034383a3a2f34382d3438203d3e20323032393936.roa
File:                     326131323a646434373a383034383a3a2f34382d3438203d3e20323032393936.roa (raw, json)
Hash identifier:          mPMVi2MlDly/y6EIm5ZehKk4vqXWHT2zDLVAVacOkA8=
Subject key identifier:   A0:EF:49:53:A0:9D:C0:04:F4:C2:64:5D:EF:8A:1D:55:39:4A:40:CA
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       6FA156DDB56C0A60ABDFBE2B63B3F14D0D1C5832
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/326131323a646434373a383034383a3a2f34382d3438203d3e20323032393936.roa
Signing time:             Sat 08 Apr 2023 05:28:54 +0000
ROA not before:           Sat 08 Apr 2023 05:23:54 +0000
ROA not after:            Sat 06 Apr 2024 05:28:54 +0000
asID:                     202996
IP address blocks:        2a12:dd47:8048::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:a1:56:dd:b5:6c:0a:60:ab:df:be:2b:63:b3:f1:4d:0d:1c:58:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 05:23:54 2023 GMT
            Not After : Apr  6 05:28:54 2024 GMT
        Subject: CN=A0EF4953A09DC004F4C2645DEF8A1D55394A40CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ac:cf:05:97:30:29:80:6e:a7:d1:50:19:e9:
                    2c:92:95:a0:75:a1:0e:4c:fb:6d:ad:b3:c7:8d:dc:
                    4d:3c:8b:26:ba:4a:ea:67:2f:27:c5:16:30:9b:51:
                    f4:ab:ff:3a:a1:b8:a1:2c:8b:34:36:27:de:54:b6:
                    a7:f0:59:d9:12:51:44:05:13:4d:90:d5:bf:04:2c:
                    5f:4f:74:58:13:28:16:ff:05:7d:d9:29:a5:5c:ae:
                    db:de:59:fd:d0:7e:eb:b9:7d:6d:4d:1a:1d:de:f1:
                    e1:3b:92:0d:93:e3:db:76:88:2c:b1:18:9c:f4:26:
                    27:e3:bd:11:6d:ce:a3:55:14:e9:6f:51:e7:e8:3e:
                    e3:12:62:5b:53:bf:38:97:06:e7:a7:3d:db:1c:ec:
                    73:23:d7:34:96:a2:d3:ca:53:c3:04:bd:5a:7e:dd:
                    71:20:4a:90:30:51:9a:d5:f8:4d:41:a4:79:c9:93:
                    5e:68:d1:05:23:e6:43:26:15:be:b0:11:04:9e:3a:
                    ae:4c:27:58:8c:e5:2c:7a:e0:9c:5f:2b:40:d3:8c:
                    bc:2e:51:fb:f0:a4:92:64:96:cd:b3:8a:49:a5:96:
                    d3:04:a5:b3:74:f7:eb:9b:df:c3:d4:8a:f4:05:d6:
                    cd:7e:dd:96:26:ed:24:43:01:01:ed:34:ba:75:82:
                    72:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:EF:49:53:A0:9D:C0:04:F4:C2:64:5D:EF:8A:1D:55:39:4A:40:CA
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/326131323a646434373a383034383a3a2f34382d3438203d3e20323032393936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8048::/48

    Signature Algorithm: sha256WithRSAEncryption
         37:57:a8:5e:0f:39:7f:af:95:26:33:48:3d:1a:6e:63:1d:d2:
         2b:49:1e:25:89:1f:c8:c5:05:ad:3f:c0:ac:a9:8c:83:01:6e:
         3a:26:6e:d4:39:b9:e3:80:8a:50:3b:db:79:41:8f:b1:26:62:
         8a:35:ca:04:f1:09:20:4c:1f:f3:94:c6:a6:0c:53:3f:e5:5e:
         c7:0f:62:57:c8:41:72:2e:b0:fa:e1:69:cc:d8:fd:a3:21:08:
         03:54:e4:a1:e8:2e:b3:e1:ec:51:ac:c0:41:2f:43:a6:3e:3f:
         4e:75:84:7b:16:2d:30:53:a5:75:f4:bb:a7:a7:d8:fc:65:52:
         76:e3:bd:b0:f2:fd:14:68:2c:e7:fc:f9:23:fd:43:e8:80:46:
         2b:00:6f:5a:e1:e6:01:0e:f6:dd:ab:c5:3b:ce:ca:72:91:34:
         2a:46:e1:9a:f5:29:3b:6e:fb:44:3d:a3:a5:af:3d:2f:67:6f:
         6a:70:32:bf:63:39:60:12:47:24:85:2a:84:1f:0a:6d:e3:eb:
         45:50:73:88:eb:ae:97:a5:ae:aa:f2:cc:0d:c7:85:e2:92:a8:
         d7:3d:cc:d8:14:9c:e8:17:80:4e:bf:f1:23:47:80:85:cb:5c:
         78:1d:ef:5d:35:93:90:7b:b6:3b:02:c8:9b:1b:c1:be:42:4d:
         b6:3a:51:94
-----BEGIN CERTIFICATE-----
MIIExzCCA6+gAwIBAgIUb6FW3bVsCmCr374rY7PxTQ0cWDIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjU3ZGNiYTlmYzdiMGVmMWYzY2M4MGExYWVlMjJjMDAx
OThlNzY3YTAeFw0yMzA0MDgwNTIzNTRaFw0yNDA0MDYwNTI4NTRaMDMxMTAvBgNV
BAMTKEEwRUY0OTUzQTA5REMwMDRGNEMyNjQ1REVGOEExRDU1Mzk0QTQwQ0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWrM8FlzApgG6n0VAZ6SySlaB1
oQ5M+22ts8eN3E08iya6SupnLyfFFjCbUfSr/zqhuKEsizQ2J95UtqfwWdkSUUQF
E02Q1b8ELF9PdFgTKBb/BX3ZKaVcrtveWf3Qfuu5fW1NGh3e8eE7kg2T49t2iCyx
GJz0JifjvRFtzqNVFOlvUefoPuMSYltTvziXBuenPdsc7HMj1zSWotPKU8MEvVp+
3XEgSpAwUZrV+E1BpHnJk15o0QUj5kMmFb6wEQSeOq5MJ1iM5Sx64JxfK0DTjLwu
UfvwpJJkls2zikmlltMEpbN09+ub38PUivQF1s1+3ZYm7SRDAQHtNLp1gnJJAgMB
AAGjggHRMIIBzTAdBgNVHQ4EFgQUoO9JU6CdwAT0wmRd74odVTlKQMowHwYDVR0j
BBgwFoAUtX3Lqfx7DvHzzIChruIsABmOdnowDgYDVR0PAQH/BAQDAgeAMFkGA1Ud
HwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5jby9yZXBvL0hZU1AvNi9CNTdEQ0JB
OUZDN0IwRUYxRjNDQzgwQTFBRUUyMkMwMDE5OEU3NjdBLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvdFgzTHFmeDdEdkh6eklDaHJ1SXNBQm1PZG5vLmNlcjB8Bggr
BgEFBQcBCwRwMG4wbAYIKwYBBQUHMAuGYHJzeW5jOi8vcnBraS5jby9yZXBvL0hZ
U1AvNi8zMjYxMzEzMjNhNjQ2NDM0MzczYTM4MzAzNDM4M2EzYTJmMzQzODJkMzQz
ODIwM2QzZTIwMzIzMDMyMzkzOTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhLdR4BIMA0GCSqGSIb3
DQEBCwUAA4IBAQA3V6heDzl/r5UmM0g9Gm5jHdIrSR4liR/IxQWtP8CsqYyDAW46
Jm7UObnjgIpQO9t5QY+xJmKKNcoE8QkgTB/zlMamDFM/5V7HD2JXyEFyLrD64WnM
2P2jIQgDVOSh6C6z4exRrMBBL0OmPj9OdYR7Fi0wU6V19Lunp9j8ZVJ2472w8v0U
aCzn/Pkj/UPogEYrAG9a4eYBDvbdq8U7zspykTQqRuGa9Sk7bvtEPaOlrz0vZ29q
cDK/YzlgEkckhSqEHwpt4+tFUHOI666Xpa6q8swNx4XikqjXPczYFJzoF4BOv/Ej
R4CFy1x4He9dNZOQe7Y7AsibG8G+Qk22OlGU
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:31 2023 by rpki-client on console-fra.rpki-client.org