Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/326131323a646434373a383337303a3a2f34342d3438203d3e20323031383031.roa
File:                     326131323a646434373a383337303a3a2f34342d3438203d3e20323031383031.roa (raw, json)
Hash identifier:          4Zud5EvDxqXl8iAUsD+ha3/At3hOhpJ0TrtmphHuAkI=
Subject key identifier:   DF:9E:45:07:68:3B:0B:61:74:BF:30:6F:E9:46:96:86:72:45:C7:A4
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       7274E9B306FC6EB5A5CD3C62A22DF07A19DB9666
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/326131323a646434373a383337303a3a2f34342d3438203d3e20323031383031.roa
Signing time:             Sat 08 Apr 2023 05:28:50 +0000
ROA not before:           Sat 08 Apr 2023 05:23:50 +0000
ROA not after:            Sat 06 Apr 2024 05:28:50 +0000
asID:                     201801
IP address blocks:        2a12:dd47:8370::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:74:e9:b3:06:fc:6e:b5:a5:cd:3c:62:a2:2d:f0:7a:19:db:96:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 05:23:50 2023 GMT
            Not After : Apr  6 05:28:50 2024 GMT
        Subject: CN=DF9E4507683B0B6174BF306FE94696867245C7A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:0e:a3:01:6c:dd:a2:da:bc:50:5a:e4:f2:a7:
                    12:4e:7f:d2:32:79:d9:51:30:1c:bd:6c:a4:37:4f:
                    ce:db:61:e9:78:e1:ea:9e:73:73:e1:ed:3c:92:82:
                    ac:0c:0c:bb:ff:54:99:b4:4a:69:43:9e:6c:84:e5:
                    24:22:e5:80:81:a1:8b:be:4d:62:50:51:f8:a7:44:
                    5f:a3:c0:84:14:0d:f6:ea:b0:e4:d6:22:c5:ee:43:
                    52:7d:8d:82:99:9e:7a:d7:0d:59:e8:1f:4a:f8:41:
                    3d:1d:8c:bd:e1:8a:82:a9:00:d0:ff:d2:3b:6a:18:
                    7d:88:7a:3c:7d:4b:08:4c:1f:df:2b:e4:0a:fa:b0:
                    52:c9:93:4c:7a:b7:3a:01:f4:0b:35:58:85:63:cd:
                    53:02:f1:16:a5:7b:f5:58:6e:b8:2b:4a:9f:17:a2:
                    f2:5a:85:df:ea:09:3f:af:c0:fc:ce:1a:cd:97:03:
                    05:6e:46:ef:d5:90:eb:45:0b:5a:12:36:32:fe:97:
                    f4:9e:12:0c:a0:10:01:c2:f0:f3:f5:7b:df:ed:2d:
                    52:a4:a2:10:77:e7:24:cc:ab:f3:a7:e7:a7:af:46:
                    c7:17:18:7a:49:70:6d:19:ea:c0:4f:f3:b8:08:2b:
                    0c:32:ce:75:2b:57:0e:93:0a:78:92:fb:8f:1d:61:
                    b4:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:9E:45:07:68:3B:0B:61:74:BF:30:6F:E9:46:96:86:72:45:C7:A4
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/326131323a646434373a383337303a3a2f34342d3438203d3e20323031383031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8370::/44

    Signature Algorithm: sha256WithRSAEncryption
         13:c9:04:5e:18:3e:be:3b:6b:41:a4:a1:59:67:e3:fe:30:a9:
         31:f8:1c:83:91:f4:51:5e:cf:3c:3a:91:a0:f1:93:6c:76:8e:
         b7:e6:e5:06:97:12:eb:a8:56:96:f6:cd:bc:fc:e4:f6:7a:35:
         d9:fc:5f:e8:14:d6:18:67:0b:47:59:12:1f:bc:4d:14:42:6c:
         2e:37:1e:1f:b0:15:c9:be:b6:15:ea:a4:b1:cc:81:c9:55:17:
         c2:3a:55:91:70:1d:4d:29:64:46:a8:83:07:8a:5c:0c:21:15:
         f5:3e:02:33:08:05:d7:6e:39:f5:c3:bf:00:a2:16:c8:47:bf:
         e0:35:d9:7e:2a:d9:28:c4:1f:4d:16:c4:46:3e:30:64:96:e8:
         4a:09:13:10:11:ce:1e:77:1a:67:c8:6b:d2:03:e8:36:6e:cc:
         1f:46:de:71:a1:39:2a:d2:49:28:82:dd:b2:89:90:64:43:83:
         28:a9:bd:00:af:ab:6a:4e:bb:73:e1:17:65:d2:bc:9b:4e:f3:
         41:ec:7b:3f:ec:88:15:bd:bb:dd:06:dd:03:94:97:8c:ef:20:
         85:b6:be:bf:7d:0e:e9:03:78:5d:94:6a:86:9c:e3:77:a1:68:
         91:17:19:5a:85:2a:1b:ba:e6:b4:8b:62:49:e9:0b:1f:59:1f:
         c8:95:f0:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:31 2023 by rpki-client on console-fra.rpki-client.org