Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS200579.roa
File:                     AS200579.roa (raw, json)
Hash identifier:          ygrXg44rBuXeIKl8Bqgu5uvoKgp2FtJMLRNqG7knvUI=
Subject key identifier:   83:E6:F5:C7:F3:F9:4D:17:DB:8C:11:90:8E:31:75:48:07:E1:93:78
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       109759D225421B4A6F7BAAF762A38B2ED206B32A
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS200579.roa
Signing time:             Sat 08 Apr 2023 03:25:32 +0000
ROA not before:           Sat 08 Apr 2023 03:20:32 +0000
ROA not after:            Sat 06 Apr 2024 03:25:32 +0000
asID:                     200579
IP address blocks:        2a12:dd47:8700::/40 maxlen: 48
                          2a12:dd47:d000::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:97:59:d2:25:42:1b:4a:6f:7b:aa:f7:62:a3:8b:2e:d2:06:b3:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:32 2023 GMT
            Not After : Apr  6 03:25:32 2024 GMT
        Subject: CN=83E6F5C7F3F94D17DB8C11908E31754807E19378
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:8b:ca:8f:de:75:9a:f4:b3:f6:e3:e2:bf:2f:
                    b3:2c:a0:d1:a5:54:bc:d7:fe:82:36:98:50:e1:db:
                    25:6a:2c:4a:97:ed:20:8a:b0:b3:18:64:e3:2c:7a:
                    d0:e8:7c:8b:d0:e4:ab:52:e1:d6:38:75:9f:1b:06:
                    63:ab:6b:11:22:68:fc:55:6d:de:7d:55:bf:d6:ba:
                    87:d6:76:98:67:f5:a9:f8:17:78:f9:aa:4b:6b:49:
                    a5:0f:3e:d7:1e:ea:b9:f4:a1:8e:d0:27:62:43:3d:
                    fc:2a:55:25:fb:b8:65:8d:2b:ab:e8:84:5e:cd:c4:
                    e5:f4:0a:a0:0e:2c:d7:2a:5d:9e:7c:d4:c2:d1:03:
                    35:99:f7:4a:4d:e0:c2:d1:5e:e0:ca:c7:7c:9a:fe:
                    8b:99:e5:02:f1:7c:40:c1:91:35:34:2c:34:00:9d:
                    07:b9:4c:e5:b3:94:44:ca:e5:81:ed:6b:48:94:ba:
                    75:f3:c4:04:90:6a:77:71:36:c7:26:47:54:82:81:
                    41:cc:dc:7f:12:0e:8b:03:b7:e7:38:08:2f:b2:c6:
                    7d:a9:69:8c:02:fd:be:92:04:2e:ea:10:b7:4d:61:
                    53:1d:61:90:fa:e4:1d:e4:a8:ba:ba:d2:84:bc:ae:
                    7b:0d:7f:3d:f3:b6:d3:e8:46:3c:5b:20:0c:3b:7a:
                    9c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:E6:F5:C7:F3:F9:4D:17:DB:8C:11:90:8E:31:75:48:07:E1:93:78
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS200579.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8700::/40
                  2a12:dd47:d000::/40

    Signature Algorithm: sha256WithRSAEncryption
         b3:8f:f8:7a:63:e2:3b:86:30:f8:99:dc:f5:bd:3c:1e:4f:81:
         da:fa:70:55:8c:19:ff:fb:77:e9:3d:7a:7c:93:ea:40:ae:4e:
         50:b6:73:95:f9:90:72:e5:6e:01:45:68:2d:79:3e:42:92:d2:
         19:71:98:af:5e:50:40:41:92:5a:14:49:47:23:c1:05:84:a3:
         99:86:e4:ad:02:7c:52:36:be:4d:59:b0:6c:78:95:73:0a:5d:
         f6:8d:6c:1f:1a:52:fc:13:8f:02:ea:fb:b6:4f:1a:67:ea:d9:
         2a:02:82:7c:41:52:55:51:b6:b9:c6:b7:72:a5:c9:6b:26:d4:
         89:bc:a4:18:4f:a5:e7:11:66:47:83:59:4c:4c:b3:a7:53:92:
         ab:e3:b4:d0:71:a4:f2:82:cb:1b:e2:38:00:47:91:59:d8:3f:
         16:1d:db:b3:4b:d3:70:37:0f:12:90:50:b4:39:f0:33:af:ec:
         c8:16:db:32:bb:05:a2:6b:15:36:b5:3f:4f:8e:8c:31:13:40:
         bc:99:ad:bd:ca:70:24:82:e0:62:7b:55:39:48:46:41:e6:bd:
         47:a3:6a:8b:ec:b9:8f:b8:4d:28:33:72:bf:b2:d0:8d:d6:b7:
         98:92:b4:43:a1:92:63:cd:a8:af:7b:41:91:8a:db:12:96:9b:
         ab:ca:e7:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----