Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS200021.roa
File:                     AS200021.roa (raw, json)
Hash identifier:          I7jPxXnIjiYnmouOuBCHMRqJqYzgcS1tUYUQxULTSwY=
Subject key identifier:   3A:FD:D4:16:F0:71:3F:92:CA:40:00:85:B7:BA:4F:E8:D4:A7:19:D9
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       0B3D523DAFBCE414D88833687A35C7BE7DD7A683
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS200021.roa
Signing time:             Sat 08 Apr 2023 03:25:28 +0000
ROA not before:           Sat 08 Apr 2023 03:20:28 +0000
ROA not after:            Sat 06 Apr 2024 03:25:28 +0000
asID:                     200021
IP address blocks:        2a12:dd47:5c00::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:3d:52:3d:af:bc:e4:14:d8:88:33:68:7a:35:c7:be:7d:d7:a6:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:28 2023 GMT
            Not After : Apr  6 03:25:28 2024 GMT
        Subject: CN=3AFDD416F0713F92CA400085B7BA4FE8D4A719D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:90:19:73:05:b4:a3:d5:8e:41:15:72:03:d5:
                    66:a2:81:49:80:29:09:a7:22:47:73:af:94:53:bd:
                    fa:9c:90:0a:24:ef:7c:33:68:d8:4f:b4:e3:a2:36:
                    67:6d:1b:48:35:c9:97:4a:ee:39:f7:2d:2f:e6:b6:
                    3d:b8:59:b9:a6:f3:58:32:93:fd:61:b2:95:d2:6e:
                    07:20:2f:fb:40:aa:07:bd:04:79:a2:88:b6:67:a0:
                    83:6a:90:71:4e:19:7f:0d:1e:c0:51:7e:66:66:fb:
                    2c:51:e2:2d:fb:2f:da:11:d3:e4:ca:9e:35:6f:09:
                    4b:a8:63:0e:d0:14:0a:24:ea:64:dc:30:b0:03:6b:
                    f9:f4:8d:6a:d3:69:ac:79:c1:73:9c:3d:8c:c2:a7:
                    fe:dd:63:98:db:e6:6f:70:35:b8:91:bb:bb:fe:e3:
                    45:60:f0:a9:79:a0:c4:d6:6f:cc:e9:da:ec:65:a8:
                    10:75:f4:60:48:16:a0:84:35:58:d3:21:8c:10:14:
                    6a:3f:8b:ab:bf:d4:1e:8d:80:a2:f0:fb:74:f4:36:
                    47:64:f2:f9:18:0b:3d:57:97:92:ee:95:cc:97:11:
                    25:46:11:58:f1:b5:4a:0e:fc:81:fe:7d:66:10:c0:
                    1c:0c:a3:f9:fa:7c:30:6c:2e:ad:c2:14:da:1d:6d:
                    91:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:FD:D4:16:F0:71:3F:92:CA:40:00:85:B7:BA:4F:E8:D4:A7:19:D9
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS200021.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:5c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         96:3d:41:76:ac:1e:ef:41:59:4d:1e:ae:7c:54:d9:01:50:c8:
         2c:64:48:ca:b0:83:5d:14:cf:08:6f:76:34:9a:75:c9:33:71:
         4e:59:82:6e:9a:8f:04:25:f4:7d:53:66:6e:55:0a:d8:1f:9d:
         ce:2a:9d:ee:e1:af:3e:ca:06:88:22:c4:60:7d:d9:13:ff:9a:
         c8:3c:31:1b:ff:f1:76:1b:24:00:14:ea:cb:04:67:4a:af:6b:
         91:c7:61:47:95:4a:a0:3a:29:8f:aa:4d:93:7f:2e:63:2b:a3:
         35:63:23:51:e8:c5:89:19:1c:1c:c6:06:04:c6:57:5a:8b:1d:
         d7:8e:17:12:9c:dd:da:83:44:37:e2:26:2a:61:8c:d2:8b:6c:
         3e:c5:18:e9:33:92:61:c7:c1:14:37:da:03:e7:6b:1a:51:04:
         ac:c9:03:95:b9:4a:28:d2:ef:4f:e8:3d:1e:17:ff:7b:09:d4:
         5d:a7:a7:53:45:37:56:68:22:c2:b6:3e:0e:ba:a0:0d:d0:3f:
         a5:ea:7d:7e:2c:cd:8f:71:05:77:f3:11:9c:1e:b5:b8:ef:8b:
         e2:b1:ec:9b:e5:4d:e8:e0:b5:b5:bc:6e:08:6a:de:ae:6b:95:
         b9:db:6e:45:27:7d:0c:c8:b0:72:33:e3:f2:ac:c0:6d:ad:bf:
         f0:6f:c5:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----