Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/326131323a646434373a383333333a3a2f34382d3438203d3e20313939363832.roa
File:                     326131323a646434373a383333333a3a2f34382d3438203d3e20313939363832.roa (raw, json)
Hash identifier:          ApO4NrYyF7rZdBv084Xzwe5U5k2DkJdla6kF2CV5Dtk=
Subject key identifier:   D2:6B:BB:27:E7:62:6F:59:3E:73:E1:12:57:0E:CE:D3:AC:48:88:15
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       3AE96B9531B0EC562F4A4AF8394174704216174C
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/326131323a646434373a383333333a3a2f34382d3438203d3e20313939363832.roa
Signing time:             Sat 08 Apr 2023 05:28:44 +0000
ROA not before:           Sat 08 Apr 2023 05:23:44 +0000
ROA not after:            Sat 06 Apr 2024 05:28:44 +0000
asID:                     199682
IP address blocks:        2a12:dd47:8333::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:e9:6b:95:31:b0:ec:56:2f:4a:4a:f8:39:41:74:70:42:16:17:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 05:23:44 2023 GMT
            Not After : Apr  6 05:28:44 2024 GMT
        Subject: CN=D26BBB27E7626F593E73E112570ECED3AC488815
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b2:3d:cd:2c:2a:85:55:21:f7:a5:40:ef:e3:
                    57:46:23:2f:d9:ed:46:61:c1:33:86:9d:c6:cd:1b:
                    b4:83:1c:c3:e2:a2:f9:d8:e6:6e:e8:30:79:7b:7e:
                    6f:dc:fb:8d:e5:44:d7:a1:06:c3:2c:d2:01:b0:74:
                    e7:c0:8f:71:66:46:02:24:31:66:b4:bb:48:9e:2a:
                    74:eb:ac:64:2a:52:70:d2:19:2d:1d:23:72:7e:85:
                    6c:79:80:ef:b1:41:67:1c:37:cf:06:d6:6b:f3:2b:
                    60:9e:bb:62:80:42:26:ea:f3:77:4c:cd:1f:75:73:
                    f8:9c:d1:59:37:1e:ed:51:ca:73:62:fa:14:87:83:
                    5c:16:fb:d4:85:a6:d6:1f:e9:93:ed:a3:0f:24:28:
                    85:d6:e2:d5:8f:2c:cb:2b:5a:b1:6f:c5:c9:bc:66:
                    89:08:0d:41:8a:fe:d7:b2:3b:89:e7:7f:48:3a:a7:
                    80:a9:3e:56:ac:3d:66:72:18:aa:77:14:0c:b1:f4:
                    dd:32:83:f4:92:ba:9b:dd:0d:c6:7e:bc:2c:b0:b1:
                    e1:89:74:b0:c1:d0:5c:e7:c6:ea:91:24:a3:84:a9:
                    85:83:ef:b6:0c:4d:1f:9d:f5:65:fb:ba:bb:1e:9e:
                    42:8a:6e:e1:f4:58:b7:24:1f:80:00:c3:ce:75:fe:
                    96:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:6B:BB:27:E7:62:6F:59:3E:73:E1:12:57:0E:CE:D3:AC:48:88:15
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/326131323a646434373a383333333a3a2f34382d3438203d3e20313939363832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8333::/48

    Signature Algorithm: sha256WithRSAEncryption
         3a:e1:99:45:b6:ed:c9:48:eb:37:66:4e:b7:4b:25:c3:d3:6a:
         6f:55:30:a1:24:59:bf:36:e7:2a:58:2c:11:78:bc:a7:0a:4e:
         1b:29:98:13:a3:46:5a:5e:d3:e4:73:e2:6f:5a:bd:48:f0:89:
         4b:92:cf:b4:41:e6:ec:aa:8e:eb:4b:25:a2:d4:0f:1a:65:56:
         31:37:e8:ec:2b:c4:73:e6:7d:87:40:c7:77:71:c0:4d:e6:9d:
         ee:d2:a9:71:c9:1c:c7:4f:0b:d4:16:11:d7:48:6e:bd:12:da:
         18:14:a5:4b:3d:77:e2:93:46:c0:3d:1e:24:ac:be:8a:b8:bd:
         db:53:3b:ad:e2:1a:49:9f:e5:3e:9a:4b:3e:d9:48:b5:69:1c:
         38:85:f8:b1:db:85:06:ab:a2:b7:a9:b9:27:11:12:62:0d:57:
         e0:7e:92:19:ae:d8:69:b4:a3:6e:a1:04:23:81:62:1e:04:23:
         b9:ca:c1:e1:16:dc:ee:42:01:bd:cd:90:e4:a8:a4:63:32:7e:
         96:99:92:9c:94:e3:76:62:3f:88:d4:87:4b:69:0e:ae:89:f8:
         2b:46:9a:ea:de:c4:0f:21:0f:2f:59:34:b9:6d:ed:82:54:31:
         4b:bf:6f:74:11:1e:70:ad:f7:af:d5:bc:22:38:c2:6b:a6:ac:
         2f:b3:69:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:31 2023 by rpki-client on console-fra.rpki-client.org