Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS199679.roa
File:                     AS199679.roa (raw, json)
Hash identifier:          AkJFYgrf+FAlte5V43S+JFoBDFEpYy0QUmxB1UPf8jQ=
Subject key identifier:   91:B4:B9:5E:12:51:21:4A:0C:4F:68:16:5E:07:90:2A:4C:EB:9B:FD
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       78B9AC4C279329651A8197EC080B9A6B5BBD4B54
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS199679.roa
Signing time:             Sat 08 Apr 2023 03:25:47 +0000
ROA not before:           Sat 08 Apr 2023 03:20:47 +0000
ROA not after:            Sat 06 Apr 2024 03:25:47 +0000
asID:                     199679
IP address blocks:        2a12:dd47:f200::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:b9:ac:4c:27:93:29:65:1a:81:97:ec:08:0b:9a:6b:5b:bd:4b:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:47 2023 GMT
            Not After : Apr  6 03:25:47 2024 GMT
        Subject: CN=91B4B95E1251214A0C4F68165E07902A4CEB9BFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:7f:d1:17:55:f9:7a:42:df:cb:40:8c:ca:61:
                    c8:60:4a:59:82:e5:19:4e:a7:d3:7d:56:18:53:01:
                    e4:e5:46:73:98:e4:7d:de:af:c2:2f:68:43:99:31:
                    c2:71:58:ee:a9:b6:78:fb:20:3b:71:62:21:81:17:
                    aa:8b:17:e3:51:46:b5:44:82:c6:4d:f6:b0:82:f3:
                    5f:49:e3:d7:6a:ff:a0:7b:cc:85:05:40:3e:6e:d1:
                    ad:24:6d:71:99:04:16:11:c3:00:44:78:53:3f:7b:
                    6f:58:8e:c2:85:07:bc:80:4c:6e:1d:15:d3:46:82:
                    2d:9b:b6:eb:42:df:b2:c6:99:08:9a:c9:3e:b1:4d:
                    ee:78:06:56:e4:7e:28:70:3a:37:1f:19:93:d7:2f:
                    c4:67:3f:e8:4a:71:01:26:c2:d9:52:0f:eb:6d:8c:
                    1d:9b:03:55:7c:c9:15:38:7c:16:90:92:4f:b9:8f:
                    38:0f:43:3a:3c:a6:b8:3a:a5:3d:1b:17:80:2f:d1:
                    32:d5:fd:6f:4a:1e:2e:1b:78:54:13:9b:a6:32:74:
                    6d:76:9f:e0:84:4b:3b:d8:74:97:4f:51:82:ba:0f:
                    8d:fc:9b:97:b8:c0:61:65:3f:1b:3a:4e:80:f6:3a:
                    49:16:b1:96:23:ce:6a:b4:bf:82:66:12:31:9a:a9:
                    80:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:B4:B9:5E:12:51:21:4A:0C:4F:68:16:5E:07:90:2A:4C:EB:9B:FD
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS199679.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:f200::/40

    Signature Algorithm: sha256WithRSAEncryption
         38:ce:22:ed:c6:14:94:7a:2b:6f:80:68:78:13:29:f4:36:6d:
         05:1d:6e:60:f7:c1:38:08:d4:30:16:a2:5c:2b:0d:5b:7d:54:
         f1:06:2e:de:68:79:2d:48:d4:63:20:f5:4b:2f:73:d8:2b:6e:
         e3:3c:2d:bc:12:3b:20:d4:31:07:6b:4f:8a:3a:33:73:62:64:
         9f:ef:d3:ec:d2:ce:2d:d7:d1:bf:c9:64:95:2c:ba:ae:e6:2f:
         14:9f:f1:be:0f:d8:a2:af:ef:ae:45:c6:a4:7a:15:a4:e5:bd:
         e7:e6:7b:96:d7:e5:c8:65:af:37:07:0e:8b:81:6a:fc:94:25:
         52:5d:25:ae:c9:10:f8:51:76:61:4e:d9:97:89:ac:73:11:77:
         8b:cc:2f:9b:58:74:b1:24:b5:0e:1a:1f:89:32:15:3f:53:61:
         79:49:d0:44:42:99:59:11:5d:08:db:20:39:42:d1:0e:a4:da:
         e9:9a:2e:0a:e1:43:de:56:67:4a:c2:ef:3c:26:a2:9b:7d:9a:
         32:ea:3e:74:81:6b:20:23:e0:b6:61:0d:55:93:fc:06:6a:f2:
         25:6c:34:ed:5e:c3:7b:3d:c2:50:70:25:b1:d4:8d:b8:6e:d0:
         a2:f9:c2:a5:dd:40:27:ab:b8:ad:3f:a6:dc:16:15:6d:23:9a:
         07:81:4f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----