Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS134478.roa
File:                     AS134478.roa (raw, json)
Hash identifier:          Of9y49z/h2JTyWYSqp312S08O+w9KCT9Krw5vAy0X1U=
Subject key identifier:   A5:5D:0E:73:46:CC:1F:88:2F:FA:A8:70:E5:AC:FE:E9:B6:05:B7:D6
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       790A578813A11F5FF83120652719E29A0B1F6AE7
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS134478.roa
Signing time:             Sat 08 Apr 2023 03:25:41 +0000
ROA not before:           Sat 08 Apr 2023 03:20:41 +0000
ROA not after:            Sat 06 Apr 2024 03:25:41 +0000
asID:                     134478
IP address blocks:        2a12:dd47:80d0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:0a:57:88:13:a1:1f:5f:f8:31:20:65:27:19:e2:9a:0b:1f:6a:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:41 2023 GMT
            Not After : Apr  6 03:25:41 2024 GMT
        Subject: CN=A55D0E7346CC1F882FFAA870E5ACFEE9B605B7D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:08:fd:ff:73:ef:c1:f4:87:f8:a1:dd:fc:17:
                    8a:96:1d:60:2b:b2:78:b1:b6:06:cf:17:f4:c1:af:
                    ac:a1:45:8b:61:99:34:09:fc:a0:7b:cb:0d:10:89:
                    4d:7a:fd:24:8f:e6:10:6b:73:dc:5e:67:6e:9e:00:
                    01:bf:fa:c5:fa:17:8b:b6:73:8a:9b:3f:ff:98:ef:
                    56:82:d2:ab:6b:02:c0:99:fe:15:89:f3:0c:40:ba:
                    bd:18:39:f9:0a:44:89:6d:9a:7e:34:38:8b:9b:08:
                    47:e1:c5:8b:06:7e:41:3e:31:dd:69:c5:b5:43:cb:
                    6a:94:9b:6d:d3:18:33:3a:f3:c9:44:b7:58:23:cb:
                    30:26:07:3d:2a:16:84:d6:77:6c:02:42:18:0a:20:
                    82:59:69:5b:32:3d:f1:bf:3b:eb:81:98:45:a2:9f:
                    4e:f4:98:9d:74:97:22:a3:cc:67:e8:8e:c2:08:86:
                    14:0c:bf:64:78:08:a1:35:36:6a:f6:1c:60:50:23:
                    da:f0:44:d7:37:22:9d:1f:74:06:5e:de:49:15:b3:
                    2e:05:f2:75:f4:76:75:84:10:1a:3e:7e:ee:18:1d:
                    ab:71:b9:77:0e:2a:c2:bc:c3:c8:77:84:f6:57:30:
                    89:89:a3:7d:30:46:71:b8:b8:87:36:a0:3c:8a:be:
                    cd:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:5D:0E:73:46:CC:1F:88:2F:FA:A8:70:E5:AC:FE:E9:B6:05:B7:D6
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS134478.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:80d0::/44

    Signature Algorithm: sha256WithRSAEncryption
         9f:19:18:d4:7a:b3:cb:3b:04:ca:3b:63:56:d7:b1:37:74:28:
         a1:ce:bc:bc:d0:6c:e4:68:88:bd:31:ec:d4:6c:25:c9:8f:27:
         73:65:92:95:cb:03:09:cd:11:7e:9a:82:bf:c8:d1:a3:a3:1f:
         64:6b:82:9d:c0:e5:01:e9:31:93:d7:c5:4a:80:37:14:a7:38:
         13:09:3a:6b:c6:3c:f2:b1:9b:f1:70:05:d2:67:26:ad:32:1e:
         72:03:d3:51:06:6b:10:ef:f2:23:58:6c:d0:1a:64:05:2c:7a:
         d8:03:5a:ef:c3:6d:52:ff:df:0e:8a:ee:c5:82:18:61:56:10:
         b7:fe:ec:eb:bf:90:e8:f1:01:05:78:f3:f2:b1:9d:0c:a9:79:
         2d:38:c1:28:0b:f3:e1:03:ca:65:23:9c:5a:96:b5:2e:82:6d:
         78:1d:5b:06:21:75:02:3a:42:52:5a:7e:6c:84:32:66:4d:4d:
         d0:64:f3:e7:e4:9e:ce:12:0a:5a:f8:20:92:a8:1c:a2:5b:9b:
         92:1d:cd:a6:d5:7c:6a:9a:39:34:75:d5:cf:f2:82:ee:53:5c:
         d5:88:00:47:01:ce:fe:1e:73:04:75:4e:d0:2d:38:bc:5f:e0:
         51:b6:21:5e:27:04:95:21:a3:e6:5c:0e:d0:d6:d4:7c:fb:ea:
         09:e5:97:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----