Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS200566.roa
File:                     AS200566.roa (raw, json)
Hash identifier:          eoFpDcJ6EWLW4ntMHrNtUr9wTEzbrpwzgOrpG38MJ5Q=
Subject key identifier:   CB:78:C5:7F:BC:66:29:A5:52:E6:21:96:9B:41:10:F9:AE:9B:80:19
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       580DAE82DCBE2E88181894130B5D1489BAE43304
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS200566.roa
Signing time:             Sat 08 Apr 2023 03:25:32 +0000
ROA not before:           Sat 08 Apr 2023 03:20:32 +0000
ROA not after:            Sat 06 Apr 2024 03:25:32 +0000
asID:                     200566
IP address blocks:        2a12:dd47:d300::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:0d:ae:82:dc:be:2e:88:18:18:94:13:0b:5d:14:89:ba:e4:33:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:32 2023 GMT
            Not After : Apr  6 03:25:32 2024 GMT
        Subject: CN=CB78C57FBC6629A552E621969B4110F9AE9B8019
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0b:0b:8d:73:13:6d:b2:65:06:9b:c5:01:af:
                    8d:c0:71:a6:3c:31:d5:2a:c5:c7:cd:77:97:d6:06:
                    b5:89:52:34:92:a3:0c:65:1f:da:6e:a6:eb:97:4d:
                    bf:42:6e:61:d4:bd:1d:fa:0c:2b:c7:bc:a5:b3:59:
                    97:5b:cd:f7:76:72:3b:80:95:96:c1:c8:f8:a8:4e:
                    76:f2:fb:a9:ec:4a:a7:41:53:fc:2d:5a:52:9a:c6:
                    d7:d4:da:f9:d2:32:eb:1e:0d:f8:86:74:04:2e:2a:
                    1d:cd:17:e7:11:96:ec:7a:d6:4f:7f:de:d7:22:e9:
                    eb:2a:8e:ed:ee:1d:bb:1c:42:f5:b8:a3:59:60:95:
                    d9:28:81:62:b2:b0:c7:c5:36:09:2e:e2:5f:99:c1:
                    25:1f:98:52:3a:13:69:05:23:db:28:19:d0:c8:ce:
                    b5:6a:95:03:33:0b:f6:8d:55:45:06:ba:95:25:25:
                    00:a1:58:ba:41:37:b5:5f:fc:08:13:65:32:a4:21:
                    08:29:4b:df:28:90:3d:b2:58:10:6f:d9:69:e6:2a:
                    9b:2e:7d:df:e7:e1:de:07:14:17:9d:26:ab:9e:64:
                    29:e6:f7:03:2d:a7:3e:9c:3c:ac:ef:46:65:fb:f7:
                    5a:f1:9e:0b:5f:26:8a:7f:5f:3e:86:ec:fc:39:9c:
                    14:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:78:C5:7F:BC:66:29:A5:52:E6:21:96:9B:41:10:F9:AE:9B:80:19
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS200566.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:d300::/40

    Signature Algorithm: sha256WithRSAEncryption
         a4:59:3c:71:56:5a:d9:8f:18:e7:1a:3b:16:f5:bb:db:38:e2:
         3a:c4:91:2e:a2:4b:a4:c0:53:63:a1:61:06:a1:02:ce:a9:4c:
         e7:bb:43:f7:6d:46:28:09:8f:42:29:41:cc:53:0f:88:55:10:
         92:39:db:b9:4b:bf:18:77:49:5e:51:97:2a:a6:32:de:06:72:
         e1:1d:5e:3b:c3:d4:53:de:1f:bc:ae:70:ec:f6:14:06:a3:75:
         ca:11:4d:8b:e7:78:0a:07:88:6d:ae:db:6c:73:8a:69:1b:16:
         9a:90:44:be:3a:a8:2f:03:14:bb:99:bc:52:b8:4f:ef:68:95:
         39:68:e2:28:a2:35:d3:43:13:08:48:5b:e5:13:7c:6b:fc:b3:
         c9:ca:51:77:7d:7e:48:65:cb:56:df:1a:11:8a:a3:8e:40:2e:
         46:8d:f4:ef:5a:01:79:f6:0b:13:52:0e:80:75:d8:ca:f1:e4:
         08:f0:45:b6:8a:eb:c3:58:46:55:0e:ce:c6:87:03:94:8f:10:
         b2:27:d5:af:03:29:53:a3:15:b5:d2:67:a8:ac:e3:9f:39:ab:
         67:23:fc:a2:4b:ad:dd:c3:0e:91:90:06:29:b3:48:46:15:ef:
         63:6d:a9:4d:4e:35:6d:1c:af:bd:32:08:c5:36:82:75:34:71:
         e9:cc:a6:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:32 2023 by rpki-client on console-fra.rpki-client.org