Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS201242.roa
File:                     AS201242.roa (raw, json)
Hash identifier:          FxVDb1VD9oloqlD8A9bhg0Z4bfMcZKtG6jZla37o9vY=
Subject key identifier:   00:29:5E:B7:0F:D5:51:35:12:D0:F8:E8:28:92:51:56:FB:89:E7:92
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       0379A7A800B224BBDD1AE87B7030B1D40E668614
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS201242.roa
Signing time:             Sat 08 Apr 2023 03:25:46 +0000
ROA not before:           Sat 08 Apr 2023 03:20:46 +0000
ROA not after:            Sat 06 Apr 2024 03:25:46 +0000
asID:                     201242
IP address blocks:        2a12:dd47:80e1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:79:a7:a8:00:b2:24:bb:dd:1a:e8:7b:70:30:b1:d4:0e:66:86:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:46 2023 GMT
            Not After : Apr  6 03:25:46 2024 GMT
        Subject: CN=00295EB70FD5513512D0F8E828925156FB89E792
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:56:81:9b:0e:17:64:eb:36:11:72:92:b5:e9:
                    4a:37:e6:0a:1f:bf:48:f1:09:8e:36:48:71:55:d1:
                    85:c2:3c:ad:1a:32:9a:1e:20:ee:88:bb:32:1f:b2:
                    f1:89:0d:eb:f7:d3:3c:f7:00:66:18:b8:ad:6a:4f:
                    fc:de:ec:2d:42:06:a6:58:3f:30:70:ee:55:7d:57:
                    2e:20:76:a6:72:09:bf:bf:aa:25:9a:4f:d1:23:42:
                    0c:c1:ff:94:90:50:92:b0:37:3c:fe:b9:0b:42:16:
                    1f:b2:e9:17:4f:99:1e:52:a8:28:18:0f:90:98:0e:
                    66:9b:3a:8e:fe:97:9f:3d:d6:45:70:e1:ee:64:e9:
                    45:d6:8a:e4:df:73:b7:63:33:cf:d7:c6:94:9d:e6:
                    82:f8:4d:ee:9d:ff:61:e3:76:09:bb:6c:6a:2f:67:
                    0a:40:88:c5:78:f9:77:f9:bc:f2:b0:9c:87:ba:f6:
                    98:20:a4:39:a3:ce:f9:d8:a9:94:a4:99:78:9d:c9:
                    6f:7d:3e:0e:06:b2:7f:16:4a:34:8a:87:52:0b:40:
                    db:04:cb:98:ac:c4:14:5e:58:8c:8b:13:3a:bd:54:
                    10:01:c2:6d:71:a3:41:fd:36:2a:de:1e:ed:fd:8c:
                    39:81:39:39:66:aa:bd:cc:2c:57:9c:83:1e:6a:81:
                    e2:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:29:5E:B7:0F:D5:51:35:12:D0:F8:E8:28:92:51:56:FB:89:E7:92
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS201242.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:80e1::/48

    Signature Algorithm: sha256WithRSAEncryption
         61:92:58:c5:af:53:40:81:c6:b9:ec:68:b7:70:f1:a1:ab:56:
         2e:e0:8b:c7:46:b9:e5:da:b0:92:ca:1c:e5:5c:43:83:cf:49:
         70:2b:83:76:20:1e:aa:13:c0:51:b6:59:ea:71:3f:a7:72:55:
         f8:1d:e0:63:b5:00:dd:12:e3:9c:06:4f:58:a5:10:0c:7d:7d:
         6c:f4:4b:ed:3b:1c:03:54:f9:ce:d3:30:39:76:3f:86:4c:36:
         01:c0:2e:65:3b:64:bd:1b:0d:90:9c:21:31:0b:0b:a3:39:84:
         d8:a8:e2:46:63:96:e1:77:92:8b:2f:f5:04:b1:84:11:95:bb:
         0f:32:2c:57:5e:b2:4f:17:ef:46:fe:ca:6b:2d:74:01:81:64:
         ca:97:4b:10:cb:54:37:71:e3:6b:78:0b:3d:e9:e7:6e:14:99:
         a7:90:bd:5e:80:a6:07:0d:7c:8b:80:c5:78:d4:ba:67:2c:77:
         3d:83:e5:fb:6f:0a:3e:9a:b5:cd:de:e1:4a:dd:c1:5c:c5:a1:
         cc:fd:39:ce:e8:a4:83:c3:87:75:42:df:1a:85:6e:e1:e6:22:
         fe:75:5e:87:8b:04:88:65:88:a4:93:1b:38:89:1a:16:e0:42:
         25:3c:96:31:32:54:1d:78:e2:56:c8:d0:b6:27:f6:8e:de:17:
         cb:94:98:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----