Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/326131323a646434373a386535303a3a2f34342d3438203d3e20323031393338.roa
File:                     326131323a646434373a386535303a3a2f34342d3438203d3e20323031393338.roa (raw, json)
Hash identifier:          gGydgc/1dRkqKL+2+h4IL7WaaG+bvD7Q7OFgLcuZedg=
Subject key identifier:   E1:E3:BC:8C:CA:D7:F6:A1:59:B7:22:1D:0C:FE:03:68:D6:F0:22:BE
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       72EA23AD35D116500E39D52176723109A2658921
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/326131323a646434373a386535303a3a2f34342d3438203d3e20323031393338.roa
Signing time:             Sat 08 Apr 2023 05:28:48 +0000
ROA not before:           Sat 08 Apr 2023 05:23:48 +0000
ROA not after:            Sat 06 Apr 2024 05:28:48 +0000
asID:                     201938
IP address blocks:        2a12:dd47:8e50::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:ea:23:ad:35:d1:16:50:0e:39:d5:21:76:72:31:09:a2:65:89:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 05:23:48 2023 GMT
            Not After : Apr  6 05:28:48 2024 GMT
        Subject: CN=E1E3BC8CCAD7F6A159B7221D0CFE0368D6F022BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c0:db:31:17:b7:36:7e:00:39:bc:fd:49:8c:
                    c9:af:fe:e8:18:aa:38:3d:c3:6a:24:29:4b:6b:58:
                    af:1d:70:45:d4:27:70:56:60:3d:e6:62:11:12:d1:
                    00:30:15:42:dc:bb:44:e2:94:c0:d0:02:9c:85:e6:
                    9c:9c:3d:86:6b:7f:28:38:c9:3d:da:45:64:aa:03:
                    46:f1:d3:e4:8c:1f:7b:6f:ff:e1:96:b7:92:f0:79:
                    b7:d0:9e:ae:91:e1:15:ea:5f:92:88:58:4d:40:65:
                    42:fa:7b:aa:d3:0e:f9:1b:bc:eb:32:61:f5:5e:f3:
                    7e:e6:a8:f3:49:3e:71:f0:22:b0:f8:3e:d2:56:d4:
                    cb:bc:6b:a0:b8:4b:d2:6c:54:4b:90:18:f7:a0:76:
                    ee:d4:39:9f:42:9e:97:dd:9d:bc:4d:42:c0:fd:9d:
                    b6:12:65:44:df:bb:0a:9c:fa:f3:de:dd:4e:4d:55:
                    18:41:a9:f7:de:09:a4:bc:2f:25:8c:a3:0b:60:b5:
                    f8:72:2a:8f:6e:55:28:cd:91:15:30:ff:8b:c9:67:
                    07:65:c2:d4:bf:53:47:c6:2f:50:7e:e5:a9:42:2c:
                    97:4c:1d:37:f7:41:31:a1:7b:c3:a6:48:a4:6f:86:
                    3c:52:f0:90:e9:d0:88:61:87:7d:5b:ea:d8:8e:c4:
                    ea:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:E3:BC:8C:CA:D7:F6:A1:59:B7:22:1D:0C:FE:03:68:D6:F0:22:BE
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/326131323a646434373a386535303a3a2f34342d3438203d3e20323031393338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8e50::/44

    Signature Algorithm: sha256WithRSAEncryption
         8b:e3:64:f8:05:76:18:7c:67:98:4a:41:07:90:d2:7e:bb:7d:
         f1:c5:1b:39:ee:97:35:41:db:44:d5:fe:86:57:44:d2:08:27:
         67:92:b2:c0:b7:06:24:f2:41:b6:4f:49:cc:82:1d:26:f9:9a:
         fe:aa:fd:1e:3a:bf:14:63:32:a8:1e:2c:82:e1:f2:a3:09:d4:
         3c:ff:ff:ed:22:b7:4b:d3:1c:6d:c1:20:df:59:23:55:bc:83:
         48:3d:2a:b6:34:b1:c5:8c:b3:5b:9f:ac:06:83:e9:a5:52:3e:
         16:35:26:f1:0c:ee:5b:ad:4a:1d:d3:7a:b0:e5:db:e9:c5:97:
         1b:30:b4:48:b7:79:c5:c6:b1:83:ef:e9:ba:a5:3d:17:98:07:
         8b:55:8a:5d:62:91:a0:94:a4:47:7d:41:7f:93:7c:c3:7e:4c:
         07:ca:33:37:d7:e1:16:08:42:05:bb:ef:57:42:4e:04:c1:20:
         d8:5d:99:6c:c7:77:3b:35:13:e4:36:a5:22:34:7e:0b:e3:90:
         ae:fe:a9:8a:ab:78:d6:cc:87:db:7e:98:de:f3:08:1d:4a:ab:
         ca:f8:3d:49:5c:18:b4:40:ca:2e:05:ab:a7:0e:e3:02:15:1b:
         71:38:11:7f:e7:08:28:38:df:15:1a:07:a9:a9:38:08:5e:65:
         08:8c:9b:90
-----BEGIN CERTIFICATE-----
MIIExzCCA6+gAwIBAgIUcuojrTXRFlAOOdUhdnIxCaJliSEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjU3ZGNiYTlmYzdiMGVmMWYzY2M4MGExYWVlMjJjMDAx
OThlNzY3YTAeFw0yMzA0MDgwNTIzNDhaFw0yNDA0MDYwNTI4NDhaMDMxMTAvBgNV
BAMTKEUxRTNCQzhDQ0FEN0Y2QTE1OUI3MjIxRDBDRkUwMzY4RDZGMDIyQkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9wNsxF7c2fgA5vP1JjMmv/ugY
qjg9w2okKUtrWK8dcEXUJ3BWYD3mYhES0QAwFULcu0TilMDQApyF5pycPYZrfyg4
yT3aRWSqA0bx0+SMH3tv/+GWt5LwebfQnq6R4RXqX5KIWE1AZUL6e6rTDvkbvOsy
YfVe837mqPNJPnHwIrD4PtJW1Mu8a6C4S9JsVEuQGPegdu7UOZ9CnpfdnbxNQsD9
nbYSZUTfuwqc+vPe3U5NVRhBqffeCaS8LyWMowtgtfhyKo9uVSjNkRUw/4vJZwdl
wtS/U0fGL1B+5alCLJdMHTf3QTGhe8OmSKRvhjxS8JDp0Ihhh31b6tiOxOp/AgMB
AAGjggHRMIIBzTAdBgNVHQ4EFgQU4eO8jMrX9qFZtyIdDP4DaNbwIr4wHwYDVR0j
BBgwFoAUtX3Lqfx7DvHzzIChruIsABmOdnowDgYDVR0PAQH/BAQDAgeAMFkGA1Ud
HwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5jby9yZXBvL0hZU1AvNi9CNTdEQ0JB
OUZDN0IwRUYxRjNDQzgwQTFBRUUyMkMwMDE5OEU3NjdBLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvdFgzTHFmeDdEdkh6eklDaHJ1SXNBQm1PZG5vLmNlcjB8Bggr
BgEFBQcBCwRwMG4wbAYIKwYBBQUHMAuGYHJzeW5jOi8vcnBraS5jby9yZXBvL0hZ
U1AvNi8zMjYxMzEzMjNhNjQ2NDM0MzczYTM4NjUzNTMwM2EzYTJmMzQzNDJkMzQz
ODIwM2QzZTIwMzIzMDMxMzkzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhLdR45QMA0GCSqGSIb3
DQEBCwUAA4IBAQCL42T4BXYYfGeYSkEHkNJ+u33xxRs57pc1QdtE1f6GV0TSCCdn
krLAtwYk8kG2T0nMgh0m+Zr+qv0eOr8UYzKoHiyC4fKjCdQ8///tIrdL0xxtwSDf
WSNVvINIPSq2NLHFjLNbn6wGg+mlUj4WNSbxDO5brUod03qw5dvpxZcbMLRIt3nF
xrGD7+m6pT0XmAeLVYpdYpGglKRHfUF/k3zDfkwHyjM31+EWCEIFu+9XQk4EwSDY
XZlsx3c7NRPkNqUiNH4L45Cu/qmKq3jWzIfbfpje8wgdSqvK+D1JXBi0QMouBaun
DuMCFRtxOBF/5wgoON8VGgepqTgIXmUIjJuQ
-----END CERTIFICATE-----