Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/326131323a646434373a386566303a3a2f34342d3438203d3e20313939363833.roa
File:                     326131323a646434373a386566303a3a2f34342d3438203d3e20313939363833.roa (raw, json)
Hash identifier:          7UoMxcbH8kzeA1Dp+IkJNMJFMifsU3F9iCnyCg/Xj6I=
Subject key identifier:   75:C8:C8:AB:ED:1B:7E:86:F7:97:F7:60:3D:B6:8A:C0:39:EA:A6:35
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       4D66FA9EC6EDE761B3ED8A3782F2577FB193A6B5
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/326131323a646434373a386566303a3a2f34342d3438203d3e20313939363833.roa
Signing time:             Sat 08 Apr 2023 05:28:55 +0000
ROA not before:           Sat 08 Apr 2023 05:23:55 +0000
ROA not after:            Sat 06 Apr 2024 05:28:55 +0000
asID:                     199683
IP address blocks:        2a12:dd47:8ef0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:66:fa:9e:c6:ed:e7:61:b3:ed:8a:37:82:f2:57:7f:b1:93:a6:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 05:23:55 2023 GMT
            Not After : Apr  6 05:28:55 2024 GMT
        Subject: CN=75C8C8ABED1B7E86F797F7603DB68AC039EAA635
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:80:5c:ed:95:9c:95:d9:39:12:31:0a:2a:1a:
                    f2:aa:03:af:c5:ca:6a:ff:cb:40:4b:1e:e0:17:16:
                    b5:41:5f:e1:c2:85:1c:be:12:86:84:d5:15:51:03:
                    fb:51:7b:d8:ad:6f:0e:66:24:08:68:1f:f9:f2:86:
                    d2:ca:34:09:88:86:9a:f5:e9:02:79:9b:00:03:9a:
                    10:09:87:ad:2a:cc:33:fa:8a:04:d1:a4:24:55:ba:
                    6a:e5:f5:45:c3:02:34:fd:d1:2d:b8:04:56:08:d1:
                    ac:5f:ed:f3:29:7c:db:0d:91:8f:86:9f:61:dc:d9:
                    41:c5:73:3d:18:b5:56:cb:87:57:ac:1a:a2:b1:38:
                    36:44:38:01:2b:7e:bf:ed:18:43:82:91:c3:08:6b:
                    70:b5:fd:b7:b8:13:d9:d5:95:13:2b:ae:11:e8:23:
                    e3:e8:4d:0b:37:97:8d:c0:30:72:9a:4b:bf:f1:36:
                    04:51:4f:fe:bc:22:15:83:6d:38:39:c2:3a:22:24:
                    05:15:53:be:f8:68:b6:e9:12:ab:43:f8:8e:ac:63:
                    b8:b5:10:22:a5:8b:2e:29:24:c9:8a:97:96:5c:4c:
                    28:38:22:ef:80:12:87:5e:f1:09:2b:6a:40:62:33:
                    1b:d9:a8:8b:9c:8c:97:33:48:9f:b4:36:83:65:a6:
                    c8:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:C8:C8:AB:ED:1B:7E:86:F7:97:F7:60:3D:B6:8A:C0:39:EA:A6:35
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/326131323a646434373a386566303a3a2f34342d3438203d3e20313939363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8ef0::/44

    Signature Algorithm: sha256WithRSAEncryption
         2d:61:5f:11:5b:f1:56:26:ee:3c:8e:4b:14:e7:27:41:4b:b9:
         71:77:32:5d:29:34:ef:c9:30:df:33:7d:6d:20:8a:61:5c:92:
         eb:ef:0c:88:b7:46:11:94:3a:18:83:52:16:ec:91:23:14:52:
         f5:a1:e5:9f:06:1e:82:bb:b8:57:04:0d:a9:cd:0f:54:c4:f5:
         20:9f:93:23:13:48:c8:9c:aa:39:12:7c:8b:1b:7c:5b:f9:8d:
         bc:01:cd:59:19:9e:48:33:25:12:54:6c:dc:1a:ab:29:52:29:
         f2:e5:53:fd:bc:f1:a4:72:51:e4:a2:2e:54:73:23:7c:f0:60:
         01:e6:1d:d3:87:cb:d8:d9:7c:04:33:bc:dc:fb:77:43:d4:8d:
         36:3a:f4:2b:09:77:d9:31:ac:bc:93:ac:10:57:59:61:d1:f2:
         5c:4c:42:2f:0b:76:60:66:f2:3d:49:69:4d:51:a8:f8:22:9f:
         fa:51:22:80:57:c8:a9:c3:43:34:0c:f6:5d:c6:aa:47:a6:c2:
         8f:49:3b:6a:01:51:a1:f7:20:d7:07:9a:60:76:e0:3d:29:c2:
         23:54:70:35:4a:f2:f0:6a:4e:c2:44:32:71:55:73:69:e8:4b:
         23:4b:25:fb:f1:ec:99:bd:f7:01:35:2f:52:cf:3b:bc:82:e8:
         e3:c4:f1:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:26 2023 by rpki-client on console-ams.rpki-client.org