Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/326131323a646434373a386564303a3a2f34342d3438203d3e20313939363536.roa
File:                     326131323a646434373a386564303a3a2f34342d3438203d3e20313939363536.roa (raw, json)
Hash identifier:          YyNu3Ojym0pglStNkSyygDcef1F1keAULdCiuD+ld+c=
Subject key identifier:   9A:5A:60:26:7F:E9:F9:40:B0:9A:BA:C7:F1:56:21:01:AF:64:3D:BF
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       70B7DC09AE31DF405AEFE8695F702847B938770A
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/326131323a646434373a386564303a3a2f34342d3438203d3e20313939363536.roa
Signing time:             Sat 08 Apr 2023 05:28:45 +0000
ROA not before:           Sat 08 Apr 2023 05:23:45 +0000
ROA not after:            Sat 06 Apr 2024 05:28:45 +0000
asID:                     199656
IP address blocks:        2a12:dd47:8ed0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:b7:dc:09:ae:31:df:40:5a:ef:e8:69:5f:70:28:47:b9:38:77:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 05:23:45 2023 GMT
            Not After : Apr  6 05:28:45 2024 GMT
        Subject: CN=9A5A60267FE9F940B09ABAC7F1562101AF643DBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:62:56:d0:cb:16:84:68:76:52:24:fd:d0:78:
                    46:e7:84:c7:bf:33:d0:2c:97:ae:c2:18:da:74:eb:
                    b1:a7:a9:4f:fa:e9:9f:54:8f:97:9e:ad:90:04:47:
                    8d:de:e4:dc:df:97:fa:30:9f:31:f2:86:a8:62:2a:
                    90:c1:9b:8a:54:a0:6e:5c:b7:70:31:23:6f:16:0f:
                    32:67:19:93:8e:44:f1:a3:1e:43:60:59:b7:c3:1a:
                    a3:c1:01:85:de:87:08:85:a1:96:53:51:52:e6:c3:
                    63:41:50:68:b7:c3:c3:45:a5:1d:08:1e:9d:7a:4c:
                    9d:9a:92:11:77:a4:62:2c:a5:23:74:22:79:ba:4f:
                    e3:eb:69:c4:1a:89:e2:b8:c6:77:70:c3:95:df:1e:
                    c1:e4:d1:5b:ed:14:2b:7a:62:10:f4:1b:b5:45:11:
                    6c:03:e8:c2:ee:f8:90:ef:cb:a5:8b:9d:3a:fb:fd:
                    a6:f3:0d:62:ce:d0:5d:9f:db:e3:59:81:b6:b6:41:
                    03:ab:f5:4a:be:0a:7d:cc:fe:d8:88:9b:89:10:f3:
                    83:46:11:21:dd:46:7b:73:08:3e:89:08:0e:b5:d1:
                    16:18:3a:a4:2e:0c:6c:c9:97:15:48:71:10:82:28:
                    f4:21:55:9a:eb:b0:23:46:49:0a:cf:a1:a8:58:9c:
                    8f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:5A:60:26:7F:E9:F9:40:B0:9A:BA:C7:F1:56:21:01:AF:64:3D:BF
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/326131323a646434373a386564303a3a2f34342d3438203d3e20313939363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8ed0::/44

    Signature Algorithm: sha256WithRSAEncryption
         13:08:b8:f2:62:6a:ec:15:7d:89:bc:f9:b6:f3:d3:a1:e6:93:
         b4:fd:7c:54:a9:b7:c7:37:c5:71:c4:dc:5d:9b:38:52:6f:03:
         33:45:21:46:2f:9a:50:03:d6:83:e9:86:cd:f8:be:e6:3b:ff:
         82:00:12:80:d2:1f:22:b8:08:06:1c:87:5e:71:73:32:97:ea:
         25:09:79:57:b1:b8:f1:c6:1c:44:f4:3f:50:25:94:d8:0d:f5:
         3c:25:60:45:68:69:24:a4:ff:6a:fd:7a:f1:bc:7f:91:0b:29:
         5b:0b:d3:5a:70:55:d2:fe:5e:8b:c7:f7:76:5c:66:48:3c:02:
         84:ed:05:3d:1d:7e:05:e5:cc:44:08:6a:f7:cc:b0:3d:77:73:
         e8:2b:4b:2d:63:6a:49:bc:ee:7a:44:7c:47:71:1e:10:c6:5b:
         f6:f2:85:4d:6f:38:1a:75:13:e6:09:c3:d1:9d:74:03:50:1e:
         49:f0:61:05:e9:72:79:70:ea:21:95:3e:b7:8c:69:91:18:21:
         3d:45:ff:24:dd:38:9e:7f:51:ff:b8:83:68:ef:35:15:4e:6a:
         64:81:b5:59:bd:2d:fc:d1:70:a1:a0:b4:ec:a0:d1:70:32:94:
         fb:c8:c6:80:27:a6:ac:4b:22:01:ca:3a:6f:74:11:b1:95:5a:
         ce:c1:b4:96
-----BEGIN CERTIFICATE-----
MIIExzCCA6+gAwIBAgIUcLfcCa4x30Ba7+hpX3AoR7k4dwowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjU3ZGNiYTlmYzdiMGVmMWYzY2M4MGExYWVlMjJjMDAx
OThlNzY3YTAeFw0yMzA0MDgwNTIzNDVaFw0yNDA0MDYwNTI4NDVaMDMxMTAvBgNV
BAMTKDlBNUE2MDI2N0ZFOUY5NDBCMDlBQkFDN0YxNTYyMTAxQUY2NDNEQkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRYlbQyxaEaHZSJP3QeEbnhMe/
M9Asl67CGNp067GnqU/66Z9Uj5eerZAER43e5Nzfl/ownzHyhqhiKpDBm4pUoG5c
t3AxI28WDzJnGZOORPGjHkNgWbfDGqPBAYXehwiFoZZTUVLmw2NBUGi3w8NFpR0I
Hp16TJ2akhF3pGIspSN0Inm6T+PracQaieK4xndww5XfHsHk0VvtFCt6YhD0G7VF
EWwD6MLu+JDvy6WLnTr7/abzDWLO0F2f2+NZgba2QQOr9Uq+Cn3M/tiIm4kQ84NG
ESHdRntzCD6JCA610RYYOqQuDGzJlxVIcRCCKPQhVZrrsCNGSQrPoahYnI+vAgMB
AAGjggHRMIIBzTAdBgNVHQ4EFgQUmlpgJn/p+UCwmrrH8VYhAa9kPb8wHwYDVR0j
BBgwFoAUtX3Lqfx7DvHzzIChruIsABmOdnowDgYDVR0PAQH/BAQDAgeAMFkGA1Ud
HwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5jby9yZXBvL0hZU1AvNi9CNTdEQ0JB
OUZDN0IwRUYxRjNDQzgwQTFBRUUyMkMwMDE5OEU3NjdBLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvdFgzTHFmeDdEdkh6eklDaHJ1SXNBQm1PZG5vLmNlcjB8Bggr
BgEFBQcBCwRwMG4wbAYIKwYBBQUHMAuGYHJzeW5jOi8vcnBraS5jby9yZXBvL0hZ
U1AvNi8zMjYxMzEzMjNhNjQ2NDM0MzczYTM4NjU2NDMwM2EzYTJmMzQzNDJkMzQz
ODIwM2QzZTIwMzEzOTM5MzYzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhLdR47QMA0GCSqGSIb3
DQEBCwUAA4IBAQATCLjyYmrsFX2JvPm289Oh5pO0/XxUqbfHN8VxxNxdmzhSbwMz
RSFGL5pQA9aD6YbN+L7mO/+CABKA0h8iuAgGHIdecXMyl+olCXlXsbjxxhxE9D9Q
JZTYDfU8JWBFaGkkpP9q/XrxvH+RCylbC9NacFXS/l6Lx/d2XGZIPAKE7QU9HX4F
5cxECGr3zLA9d3PoK0stY2pJvO56RHxHcR4Qxlv28oVNbzgadRPmCcPRnXQDUB5J
8GEF6XJ5cOohlT63jGmRGCE9Rf8k3Tief1H/uINo7zUVTmpkgbVZvS380XChoLTs
oNFwMpT7yMaAJ6asSyIByjpvdBGxlVrOwbSW
-----END CERTIFICATE-----