Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS201658.roa
File:                     AS201658.roa (raw, json)
Hash identifier:          A1GfZoRlVcOkbzhklkiqP9T5P+F8nYhXVca8XUtIrE8=
Subject key identifier:   64:F8:6B:7F:4C:FD:3F:D9:EF:10:5A:21:74:56:64:67:61:6B:11:EC
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       2061B71CD1CEAB04FE2E4D747732EC27B7760CF9
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS201658.roa
Signing time:             Sat 08 Apr 2023 03:25:28 +0000
ROA not before:           Sat 08 Apr 2023 03:20:28 +0000
ROA not after:            Sat 06 Apr 2024 03:25:28 +0000
asID:                     201658
IP address blocks:        2a12:dd47:83b0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:61:b7:1c:d1:ce:ab:04:fe:2e:4d:74:77:32:ec:27:b7:76:0c:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:28 2023 GMT
            Not After : Apr  6 03:25:28 2024 GMT
        Subject: CN=64F86B7F4CFD3FD9EF105A2174566467616B11EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a9:d8:57:53:3f:33:0b:d9:08:f0:e5:8c:e4:
                    44:82:e5:a0:6d:1b:c2:ef:76:cb:a5:ee:65:8d:ab:
                    3e:82:bb:60:97:5f:bf:0e:d6:a6:0c:48:26:13:80:
                    17:e6:3b:ec:77:ae:4c:ba:f3:4b:97:c1:7f:06:a9:
                    ee:f1:68:98:74:77:88:f8:c6:43:d4:c7:80:60:7a:
                    5c:1f:6f:69:cf:cf:56:31:70:95:03:10:9b:77:a7:
                    a7:ec:fd:e0:17:69:55:37:a9:31:c5:60:07:f7:36:
                    28:d5:83:49:ee:e4:3f:04:3d:f3:8a:d7:1e:02:4a:
                    fe:eb:e6:fe:d9:47:4b:d5:2c:77:25:a8:50:42:29:
                    8f:34:b1:83:fc:e5:61:99:eb:aa:74:76:d3:2d:01:
                    27:61:61:4e:0c:54:64:77:91:fc:4e:d7:3d:a0:d8:
                    6f:e5:81:6b:b9:f1:88:52:56:50:20:ed:cb:17:7d:
                    54:1a:ad:61:a5:b9:f0:07:8d:81:0f:6f:8e:46:94:
                    e6:6c:1a:73:ca:24:cd:71:73:a1:52:bf:09:97:42:
                    67:06:07:ba:ab:96:81:7f:cf:2a:70:87:fe:7c:52:
                    c0:a4:85:43:80:e5:84:c1:83:1f:6a:13:67:b3:73:
                    5d:ad:47:01:8d:96:5f:5f:cd:e2:37:3e:01:3c:15:
                    4f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:F8:6B:7F:4C:FD:3F:D9:EF:10:5A:21:74:56:64:67:61:6B:11:EC
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS201658.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:83b0::/44

    Signature Algorithm: sha256WithRSAEncryption
         07:ae:62:5d:54:ad:7e:d3:1f:9b:26:d8:4a:ec:8b:41:88:30:
         e6:39:98:b8:3c:02:92:c9:69:2e:a6:05:22:f5:17:74:f5:96:
         a7:29:a9:94:ef:1f:ed:41:4d:c0:89:35:52:7a:fc:73:af:df:
         55:f2:5b:8f:6d:c8:8c:c3:de:e8:be:04:ee:64:f4:6d:7e:62:
         9f:a4:a8:74:54:e2:26:7c:00:25:00:ab:bc:c4:5f:d9:eb:d0:
         eb:94:3d:af:aa:1f:e4:90:49:29:0f:ef:5d:8e:04:a6:80:50:
         b9:96:13:c3:75:a7:3e:65:a3:e2:ab:8e:73:73:79:68:09:0e:
         34:a2:d4:c8:39:15:59:05:c1:c3:1b:27:94:3a:ba:17:3c:4b:
         1e:fa:14:ab:c1:ca:03:8e:ff:da:79:05:57:32:f3:c0:9b:bb:
         c0:1c:c4:fe:4e:6d:fe:b7:37:54:a9:c2:9a:e0:d8:60:00:ed:
         49:4d:88:d1:97:14:9f:99:e5:55:df:7e:34:33:57:46:47:55:
         98:33:e6:9b:af:50:ee:9d:b7:04:f7:eb:2a:0f:12:1c:1e:b7:
         d2:ca:9e:24:33:88:d3:42:43:6c:42:3d:6f:a2:a0:2b:d0:87:
         c8:89:62:05:9d:8b:ea:f4:b0:52:44:9a:96:ed:39:1b:bb:5c:
         b2:99:23:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----