Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS201217.roa
File:                     AS201217.roa (raw, json)
Hash identifier:          4EOvRmmJgKPTsWwEeb53+L/MN6+9KK+grgaP0znmPsI=
Subject key identifier:   4C:7B:FC:B2:FD:4D:41:79:59:0B:CA:83:06:AF:68:50:9F:CF:AC:61
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       06A12B92230A6E0EB465F9FC65D6D5FF3EA0CACC
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS201217.roa
Signing time:             Sat 08 Apr 2023 03:25:37 +0000
ROA not before:           Sat 08 Apr 2023 03:20:37 +0000
ROA not after:            Sat 06 Apr 2024 03:25:37 +0000
asID:                     201217
IP address blocks:        2a12:dd47:8e70::/44 maxlen: 48
                          2a12:dd47:f000::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:a1:2b:92:23:0a:6e:0e:b4:65:f9:fc:65:d6:d5:ff:3e:a0:ca:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:37 2023 GMT
            Not After : Apr  6 03:25:37 2024 GMT
        Subject: CN=4C7BFCB2FD4D4179590BCA8306AF68509FCFAC61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:99:c1:c4:c8:66:b5:af:99:ad:2f:24:c6:db:
                    8b:81:72:81:6e:a5:b1:08:18:04:1e:34:2f:8c:d0:
                    ac:c1:2c:23:4f:4b:02:65:45:ef:4a:6e:37:03:90:
                    92:34:6a:d0:77:dc:4e:05:49:04:4c:94:e7:4b:69:
                    39:69:30:65:fc:0d:3a:73:9c:32:fc:20:b0:05:4c:
                    62:df:24:3b:d6:fe:39:ff:33:0c:a3:cc:86:23:32:
                    3f:e3:ec:6f:bb:a8:89:b7:90:69:85:d5:c7:23:b6:
                    d9:4b:6d:1d:56:d8:dc:d1:6b:ee:d8:d6:64:a9:32:
                    55:fc:a1:ea:c6:ca:f7:bb:56:77:28:3e:4c:05:c4:
                    d7:fb:a4:10:f2:c6:c5:0e:8f:2b:f4:15:bb:e2:11:
                    21:f1:37:4f:dc:fb:fa:97:cc:82:43:ef:92:fe:fe:
                    58:d1:94:50:c1:aa:3b:15:eb:86:b8:69:70:16:da:
                    f2:fd:91:33:b6:ee:65:e3:25:bc:07:76:c1:d5:60:
                    b8:63:d5:a4:fa:1e:ba:6c:a6:d5:eb:ee:e7:76:e4:
                    cd:c8:b8:4e:a9:97:b0:e4:e1:df:4b:85:82:32:d6:
                    ee:51:c9:a5:f2:fd:62:4f:5a:44:8b:ef:b5:98:09:
                    71:f9:4b:13:f6:41:14:27:6d:31:81:92:f4:ba:35:
                    18:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:7B:FC:B2:FD:4D:41:79:59:0B:CA:83:06:AF:68:50:9F:CF:AC:61
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS201217.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8e70::/44
                  2a12:dd47:f000::/40

    Signature Algorithm: sha256WithRSAEncryption
         b9:32:5f:5b:21:2e:2a:84:40:0c:4a:d4:c7:0a:c3:86:dc:e8:
         63:1f:ed:4f:ca:61:6f:f7:f6:33:b7:9a:30:ca:ee:63:13:90:
         af:4a:91:da:73:dd:47:b0:66:1b:9f:b1:26:0e:95:15:f7:17:
         21:52:2c:c3:32:36:ea:4e:09:7c:e7:d5:fb:17:67:5f:c2:5d:
         6a:0a:c4:5d:a5:a4:95:df:90:80:7a:6a:26:12:04:02:40:df:
         77:e1:31:10:3d:84:0b:b9:3e:7c:ad:5e:0e:40:3f:49:96:67:
         5b:37:aa:34:ef:44:90:ae:f4:c5:5f:f8:72:a6:37:57:4b:9d:
         c3:ab:04:8d:65:93:be:05:d9:60:ce:82:70:7d:5c:4b:2a:7c:
         64:6a:ab:e1:f0:7d:4f:51:d4:de:e7:fa:ca:85:ba:8c:ba:6d:
         5b:56:6d:37:15:96:33:4a:8b:b4:4a:ce:02:26:da:41:9e:94:
         ca:4e:fe:f4:98:d3:22:49:52:43:43:72:74:cc:15:ec:81:51:
         bd:6e:13:93:5c:9e:b3:04:67:01:91:21:14:f9:65:94:7a:a8:
         29:c8:33:15:ff:ba:ab:89:d4:1c:db:75:b0:51:b7:ce:8f:12:
         64:81:43:22:8a:de:0b:eb:51:70:3b:58:b0:79:9b:ca:3c:1f:
         d9:89:0a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----