Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/326131323a646434373a383730303a3a2f34302d3438203d3e20323030353739.roa
File:                     326131323a646434373a383730303a3a2f34302d3438203d3e20323030353739.roa (raw, json)
Hash identifier:          nle2xfBnogSWnpfOp6yWqGQ8BtIbc/3jVL1GMLpYXBM=
Subject key identifier:   A1:CA:A9:A2:56:B2:AC:7B:46:89:3F:37:77:1A:B6:F3:26:F2:C5:FF
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       403FBDB6D2FDFFDB18DBA6C3A9D67E3AB296685A
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/326131323a646434373a383730303a3a2f34302d3438203d3e20323030353739.roa
Signing time:             Sat 08 Apr 2023 05:28:42 +0000
ROA not before:           Sat 08 Apr 2023 05:23:42 +0000
ROA not after:            Sat 06 Apr 2024 05:28:42 +0000
asID:                     200579
IP address blocks:        2a12:dd47:8700::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:3f:bd:b6:d2:fd:ff:db:18:db:a6:c3:a9:d6:7e:3a:b2:96:68:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 05:23:42 2023 GMT
            Not After : Apr  6 05:28:42 2024 GMT
        Subject: CN=A1CAA9A256B2AC7B46893F37771AB6F326F2C5FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a0:85:98:b3:81:f1:6a:dc:1f:26:aa:65:ea:
                    42:3d:d4:d1:d7:a4:bd:e4:2b:1a:1a:10:fa:b3:9d:
                    69:40:65:67:27:62:d1:f7:fa:6b:3c:74:58:da:9b:
                    67:71:d8:a1:42:72:2c:a6:e3:d1:8e:6a:81:24:38:
                    f3:6c:b2:2c:a7:9b:99:9e:ac:9c:a9:5a:12:c1:d3:
                    06:95:7a:19:65:1f:3b:84:ef:17:2c:58:c6:3d:87:
                    f3:36:b7:3f:9f:e5:65:05:56:96:bf:8e:97:6f:3c:
                    dd:69:15:0a:01:30:c0:24:81:02:bd:07:a1:67:69:
                    38:3d:a1:bd:82:75:d2:9b:31:4f:4a:ef:fd:e9:4e:
                    1a:9f:69:28:5d:44:b5:bd:52:e7:89:ed:ea:0b:79:
                    61:24:20:04:6c:fd:75:32:49:3e:f8:82:d6:19:f3:
                    2d:80:41:c1:83:e2:da:ab:57:7e:39:f8:42:ad:8b:
                    59:1e:51:e7:66:f6:87:14:73:51:8f:84:88:f4:d8:
                    ca:52:b6:02:e3:91:e3:9d:11:48:86:b3:c7:84:d5:
                    8f:06:45:9e:c9:4a:5c:d4:57:fd:1a:3e:08:0d:a3:
                    89:38:22:c4:b7:e4:36:1e:a7:83:08:0d:bb:27:02:
                    7a:0b:96:9b:c9:6f:b8:c0:f4:cf:81:f4:3a:78:11:
                    f8:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:CA:A9:A2:56:B2:AC:7B:46:89:3F:37:77:1A:B6:F3:26:F2:C5:FF
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/326131323a646434373a383730303a3a2f34302d3438203d3e20323030353739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8700::/40

    Signature Algorithm: sha256WithRSAEncryption
         9b:0b:81:9b:dc:1b:0a:46:e4:26:49:44:d7:fe:d7:2b:a4:71:
         2f:48:98:5e:d6:24:b9:6e:52:2c:d4:7f:a6:c7:b8:9a:f0:c2:
         38:c2:e0:3f:73:4c:53:70:a4:a2:65:cd:7f:35:a5:95:44:bb:
         ed:c0:60:af:ea:9e:4c:2d:40:54:35:56:d4:e5:94:7a:35:dc:
         fc:d0:27:66:18:14:9a:65:dd:85:89:ff:9e:88:a7:6f:b5:a8:
         d5:42:73:c3:45:20:9e:27:d8:df:fd:18:8a:9d:3d:43:1b:ce:
         f2:c3:cd:20:4d:9f:67:03:0e:0a:8a:1c:7d:5a:8f:ce:d3:dc:
         5f:49:53:59:52:79:50:a2:96:0d:1a:8c:48:01:53:0a:70:8a:
         9a:a6:ee:c7:91:cc:c5:37:7c:d9:87:a6:1b:52:e9:e8:e4:dc:
         e9:6b:38:7e:7a:2d:4a:ba:df:fa:50:0f:09:42:05:71:17:68:
         06:ab:04:d6:86:14:48:56:33:52:89:da:de:ed:66:4d:d7:45:
         b4:8b:d4:6a:b6:63:2b:6c:c2:a2:b6:67:dc:d0:67:5c:94:ec:
         20:03:10:4d:85:1a:31:55:81:71:ac:bd:73:f6:38:bd:33:18:
         f8:07:82:aa:af:e9:e8:78:74:ce:f6:50:d5:91:02:34:9b:95:
         56:3b:cf:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----