Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS199203.roa
File:                     AS199203.roa (raw, json)
Hash identifier:          d2mBZcOZOZfWPO0pSArNSFeQ1uGl9uf6ZZAovh4+bak=
Subject key identifier:   0D:2A:50:02:A3:16:06:CA:1A:E3:4A:FB:1C:65:92:00:B6:71:61:11
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       213EB7776FCD04BC3DA803A24CDDE99139CA029D
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS199203.roa
Signing time:             Sat 08 Apr 2023 03:25:40 +0000
ROA not before:           Sat 08 Apr 2023 03:20:40 +0000
ROA not after:            Sat 06 Apr 2024 03:25:40 +0000
asID:                     199203
IP address blocks:        2a12:dd47:3000::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:3e:b7:77:6f:cd:04:bc:3d:a8:03:a2:4c:dd:e9:91:39:ca:02:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:40 2023 GMT
            Not After : Apr  6 03:25:40 2024 GMT
        Subject: CN=0D2A5002A31606CA1AE34AFB1C659200B6716111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:0a:a0:6e:f8:63:1a:33:ae:78:2d:aa:e6:1a:
                    1e:06:84:db:f5:d1:b1:52:dc:6a:ec:e3:8b:cf:c2:
                    32:2c:7d:ed:95:d6:92:26:13:e7:1d:11:05:cd:9a:
                    9a:eb:3c:60:88:38:a1:30:fd:e6:d4:6d:66:ca:8b:
                    2f:82:7e:75:48:06:34:2b:b0:2a:ff:c8:38:ea:9e:
                    04:36:ae:87:31:50:b9:0d:8d:ce:67:c6:45:4d:0f:
                    13:69:bd:a9:20:1c:fe:7e:63:14:bc:cd:27:55:ae:
                    ee:a2:30:82:55:22:cd:a6:2b:4f:eb:1c:37:61:0f:
                    a0:29:80:12:b5:52:88:c4:a4:f1:cb:bc:4c:4e:f2:
                    db:59:17:14:d9:f1:57:8f:88:16:74:a5:8f:58:2a:
                    bb:30:e9:7e:78:69:69:17:f0:34:77:93:04:77:9f:
                    11:52:82:a3:05:61:48:cf:46:55:37:73:7c:02:e3:
                    8d:f0:05:5e:05:02:58:b4:53:80:05:4d:36:c2:17:
                    b5:1c:46:70:31:e4:b7:d3:25:12:c3:b5:fe:d2:c2:
                    f2:e8:21:e7:f5:08:15:13:00:e0:e9:41:06:12:76:
                    e3:84:b8:3a:bf:a5:7b:4f:77:99:6d:44:3d:eb:7f:
                    ca:89:20:5f:a0:ba:0d:db:45:f8:73:99:a0:84:c0:
                    33:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:2A:50:02:A3:16:06:CA:1A:E3:4A:FB:1C:65:92:00:B6:71:61:11
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS199203.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:3000::/40

    Signature Algorithm: sha256WithRSAEncryption
         6a:ef:fb:24:71:71:4e:d8:40:a9:cf:38:57:d3:ee:cf:64:80:
         08:e3:ae:e2:87:28:2f:0b:8a:71:39:7a:6f:10:22:41:29:11:
         db:d7:c1:44:a4:85:b6:7d:a7:d6:dd:55:07:75:0f:29:f1:c9:
         13:3f:ed:49:9d:58:cd:b0:2a:ff:77:b5:01:d8:3c:ce:bd:bf:
         15:9c:10:55:47:27:31:d7:b1:f4:55:6e:5d:1c:37:6c:da:ef:
         e9:b8:52:61:c6:fe:15:a3:f8:4c:08:d8:b5:5b:ac:9d:da:b4:
         dc:57:c6:83:09:05:04:4c:7f:18:d0:3b:64:4e:80:4c:93:86:
         d3:ea:22:99:aa:90:b8:a2:4c:d1:2a:f3:f6:36:72:38:82:29:
         b6:37:6a:1b:40:7e:4c:12:70:8d:af:78:53:a2:9f:04:ac:66:
         b5:7e:cb:b6:b9:76:5e:ff:88:da:1c:77:58:73:1b:1c:4e:89:
         52:5d:6f:f2:bd:12:24:e1:ee:0e:01:a7:fe:a0:06:73:6b:21:
         ef:39:c9:eb:37:f1:30:ad:8d:cb:df:99:7b:fc:e0:b0:f3:b4:
         de:f6:1c:32:89:f2:20:18:82:cf:db:ec:8a:e5:4a:16:b8:14:
         cc:e5:a5:8b:ff:b7:58:cc:e3:2d:82:0a:dc:bc:db:2d:90:2b:
         ca:42:d7:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----