Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS201445.roa
File:                     AS201445.roa (raw, json)
Hash identifier:          yNrHgUy9sKXKDjN28Wkrz01putNTOCsVhSckKh6QLvA=
Subject key identifier:   9B:83:94:76:62:C2:F5:BA:81:D0:1A:99:BE:74:2E:B9:E8:18:09:83
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       6E644ECD842EA02B469ECC332E779D1D26DC3AD5
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS201445.roa
Signing time:             Sat 08 Apr 2023 03:25:28 +0000
ROA not before:           Sat 08 Apr 2023 03:20:28 +0000
ROA not after:            Sat 06 Apr 2024 03:25:28 +0000
asID:                     201445
IP address blocks:        2a12:dd47:816f::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:64:4e:cd:84:2e:a0:2b:46:9e:cc:33:2e:77:9d:1d:26:dc:3a:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:28 2023 GMT
            Not After : Apr  6 03:25:28 2024 GMT
        Subject: CN=9B83947662C2F5BA81D01A99BE742EB9E8180983
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c9:77:e2:62:66:57:cd:dd:ec:57:66:f7:39:
                    c3:39:dd:73:70:e7:9c:88:85:bf:85:e4:e5:e7:08:
                    69:4e:b6:ea:33:20:fc:d8:81:7b:ff:ed:39:0c:17:
                    a6:68:02:32:ed:d7:08:60:de:5d:2f:c7:b8:b9:11:
                    69:21:b8:d3:07:e3:7f:50:ba:ff:35:37:6e:67:71:
                    a3:5d:e1:9e:8f:f1:1d:28:76:0f:06:75:08:40:69:
                    3e:df:10:d9:bf:20:2b:b4:00:91:84:11:67:5b:69:
                    0c:9c:9c:15:21:c0:2a:1e:ac:80:6f:a2:67:26:a1:
                    2c:29:aa:f9:77:3f:ed:11:8a:06:76:04:29:e8:f8:
                    c4:a7:03:9a:fe:0a:97:9f:bf:60:ad:f3:9d:65:b1:
                    ae:61:43:7d:e1:42:5f:a9:cf:b6:66:b3:66:07:fd:
                    55:21:72:bb:3b:58:82:5f:8a:21:e9:de:cc:66:09:
                    7e:93:4b:a3:ec:17:18:45:5d:ad:fb:f1:03:1b:eb:
                    80:34:79:ea:48:de:cc:1c:4b:19:3d:3c:d7:96:33:
                    90:72:ef:53:c4:fe:2f:be:c6:73:28:26:b7:af:4a:
                    a8:00:8e:aa:05:af:df:b9:0e:d6:e9:11:08:f7:26:
                    a6:01:cc:db:43:fb:41:20:d4:3a:da:a1:e8:71:43:
                    b2:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:83:94:76:62:C2:F5:BA:81:D0:1A:99:BE:74:2E:B9:E8:18:09:83
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS201445.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:816f::/48

    Signature Algorithm: sha256WithRSAEncryption
         8d:fd:57:51:49:78:7d:fb:f4:6e:50:93:18:20:7b:63:61:87:
         0c:e0:87:d9:81:bd:f5:0a:2d:52:f1:43:ce:da:e0:35:89:c0:
         ce:49:2b:0d:c0:97:35:9b:8c:19:d6:a7:50:8b:ae:e9:32:1a:
         e0:78:8e:a0:58:db:51:0d:3a:dd:3e:18:23:df:9c:f3:3a:b8:
         e3:f9:58:c0:b3:ac:78:84:2b:5e:66:fa:ca:a0:05:45:a2:40:
         59:19:b9:62:5b:da:02:87:83:d0:15:61:1a:0f:97:43:9c:3c:
         b2:d4:64:04:9a:eb:52:11:39:5f:60:2e:97:fd:11:06:5b:86:
         15:4f:ef:ee:10:04:6c:a0:a8:1b:75:ba:6d:2e:9b:bb:72:d4:
         ce:27:e4:d9:2e:96:48:5b:c7:86:1b:83:82:52:3c:9b:b4:e9:
         3a:98:64:95:74:b9:11:7b:96:cb:1d:10:6f:95:20:82:7a:d9:
         77:dc:9e:43:14:88:ad:0f:14:7e:25:89:dc:b3:e9:44:66:2e:
         9f:71:9e:11:4a:d2:6c:1a:be:5e:9d:ec:db:71:a5:ed:6d:50:
         7c:23:31:7d:35:6d:cb:86:bd:bc:36:64:3e:85:f8:0b:09:0a:
         10:55:14:47:3c:78:2b:db:34:61:61:71:b5:2c:c6:4e:27:52:
         cd:0d:6b:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----