Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS202222.roa
File:                     AS202222.roa (raw, json)
Hash identifier:          3U5cayvX+qoWHN+RBqNYPsFU5079THJSxEMjp5/0NBg=
Subject key identifier:   FB:39:0E:4A:27:63:CD:6E:8D:50:68:B6:75:1D:B4:A8:27:88:8D:9B
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       5955D12E98D3E76827DD38403F066A65A0100275
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS202222.roa
Signing time:             Sat 08 Apr 2023 03:25:33 +0000
ROA not before:           Sat 08 Apr 2023 03:20:33 +0000
ROA not after:            Sat 06 Apr 2024 03:25:33 +0000
asID:                     202222
IP address blocks:        2a12:dd47:8166::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:55:d1:2e:98:d3:e7:68:27:dd:38:40:3f:06:6a:65:a0:10:02:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:33 2023 GMT
            Not After : Apr  6 03:25:33 2024 GMT
        Subject: CN=FB390E4A2763CD6E8D5068B6751DB4A827888D9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:fc:d3:fa:f4:69:52:ef:81:b9:0c:2b:40:8e:
                    84:a4:d2:4d:4c:b8:50:86:a8:97:72:06:ff:63:8c:
                    28:0f:0b:38:cf:d5:0e:62:e1:d9:21:23:cd:0a:46:
                    0f:66:a7:72:b4:b5:16:11:21:ee:5e:a4:2a:fc:31:
                    58:b1:d1:fd:34:46:1e:46:96:ae:16:67:0f:25:a8:
                    9c:00:d5:17:4e:16:38:ce:30:5e:ca:f5:9b:a1:07:
                    dd:83:da:10:8e:47:05:99:05:e8:b3:49:6c:50:cb:
                    7c:b9:db:ea:d1:be:a1:cf:e8:27:9d:23:3f:2c:b6:
                    54:2f:3b:24:d7:35:06:aa:e9:03:39:75:5d:1b:32:
                    68:35:1e:19:49:16:ae:d2:06:dd:38:1a:c1:10:c2:
                    bc:da:b8:33:15:f7:7a:12:6c:d9:af:6d:c6:3d:20:
                    25:2e:25:80:d5:68:37:a5:7d:15:6d:e4:9e:b4:3c:
                    69:ab:e3:89:33:58:bd:34:fc:cb:42:85:76:18:b2:
                    b3:ef:73:e3:08:50:12:2c:e5:40:56:0f:d7:ad:49:
                    b8:f7:70:50:33:3d:3d:e2:16:4f:4c:41:bd:1f:4f:
                    16:84:7e:90:c1:6a:07:89:9a:93:06:69:56:9e:7c:
                    63:5d:fb:97:5f:df:d3:e2:94:39:4d:bd:2a:2b:16:
                    b6:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:39:0E:4A:27:63:CD:6E:8D:50:68:B6:75:1D:B4:A8:27:88:8D:9B
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS202222.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8166::/48

    Signature Algorithm: sha256WithRSAEncryption
         3b:2f:f5:60:a2:cf:e9:71:d5:9c:36:a8:04:1b:f5:58:ab:2b:
         65:5e:fd:1b:34:f7:a7:2d:82:3b:42:69:f0:f4:5c:a1:ea:b1:
         a0:a2:bf:00:38:32:01:a5:dd:71:74:ee:87:d1:6f:d1:bb:a2:
         19:12:86:9c:bd:33:54:54:d1:b4:15:7a:56:cf:ad:6a:a1:48:
         fa:00:f3:1b:93:cd:58:a0:56:20:f3:cb:e3:d3:f9:12:a0:03:
         90:a8:7e:1e:9f:a2:02:ff:6c:92:f5:59:45:0a:44:de:a3:e4:
         3e:e6:c9:1f:63:4e:94:8e:b9:ce:66:71:57:5a:7b:c3:a4:b1:
         ac:58:5e:50:a7:47:ba:d5:7b:8c:d4:6d:61:30:d4:ac:0d:ed:
         86:b1:d6:fa:cf:d9:7d:32:7d:fc:38:a5:e6:5f:ab:29:d4:de:
         a4:a3:d0:0f:c6:e3:c2:4a:71:b9:f0:86:1d:9f:c5:d5:5a:86:
         a7:52:10:f6:96:ea:9c:b5:47:ed:34:30:14:8c:b4:16:dc:fd:
         d8:eb:13:2c:8a:3c:76:d1:d0:48:d5:ac:6b:28:c1:97:4d:dd:
         52:bd:49:c0:f9:5a:98:b4:be:16:db:8f:26:c5:d4:1d:bd:9a:
         8a:42:40:99:18:12:6a:c1:e4:1d:60:5e:87:17:08:80:c5:39:
         3a:ac:f1:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----