Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS202400.roa
File:                     AS202400.roa (raw, json)
Hash identifier:          lBVpYbXQP3kw84x4fq2+fCKFJwlSaITDrU6OmehrmRg=
Subject key identifier:   E7:55:29:CA:57:11:56:FD:35:49:FE:72:92:4E:BC:73:1E:E2:76:C6
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       137C1D49E58A4F1266E001349AA845FD02AF7FC3
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS202400.roa
Signing time:             Sat 08 Apr 2023 03:25:36 +0000
ROA not before:           Sat 08 Apr 2023 03:20:36 +0000
ROA not after:            Sat 06 Apr 2024 03:25:36 +0000
asID:                     202400
IP address blocks:        2a12:dd47:8380::/44 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:7c:1d:49:e5:8a:4f:12:66:e0:01:34:9a:a8:45:fd:02:af:7f:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:36 2023 GMT
            Not After : Apr  6 03:25:36 2024 GMT
        Subject: CN=E75529CA571156FD3549FE72924EBC731EE276C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:6c:63:7f:87:60:71:ba:e1:3b:ed:f4:db:ef:
                    29:b5:8c:bc:ca:b1:ed:52:f5:c0:0f:69:50:23:3f:
                    cb:45:10:65:5c:75:1a:0e:95:b3:39:f5:a8:a4:90:
                    f7:91:7b:9e:e6:40:c2:0a:16:8d:e5:cb:d0:99:5b:
                    b0:e7:41:17:e2:59:a2:73:5f:db:47:ce:2d:29:f9:
                    ec:b7:10:94:fc:95:51:e6:4e:ba:79:3b:1f:dc:06:
                    02:12:85:0f:37:e8:a7:33:71:1e:a9:7f:67:10:70:
                    0a:d2:84:a5:5d:ed:18:02:c4:f0:ec:06:ac:7c:d3:
                    5c:8b:ae:64:f6:ec:6a:03:c8:b6:e4:a1:79:8c:43:
                    e2:cc:14:0f:15:e8:57:75:d7:68:23:48:92:fc:2c:
                    8b:b2:29:3e:21:d1:cc:f8:87:c3:f2:c7:e4:97:63:
                    cb:f6:96:53:ad:5c:91:01:07:a5:d4:65:b4:ca:9a:
                    b8:ca:66:e0:09:8d:0f:d3:cf:7b:1c:d9:8e:76:6f:
                    b4:3e:47:39:1b:ba:34:0a:14:b0:d8:f3:ed:e3:e8:
                    3a:54:77:22:34:69:22:dd:1c:d7:1b:aa:02:78:7c:
                    e8:bf:8f:93:9f:b5:12:e5:14:9b:61:3b:6c:3a:64:
                    ad:40:df:b1:2c:d4:64:a1:ae:59:28:d7:41:e7:f2:
                    df:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:55:29:CA:57:11:56:FD:35:49:FE:72:92:4E:BC:73:1E:E2:76:C6
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS202400.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8380::/44

    Signature Algorithm: sha256WithRSAEncryption
         37:69:ce:d1:fe:91:76:fa:57:bb:88:f9:17:d7:f9:0c:54:7a:
         ff:b0:6c:16:bf:65:4e:f5:c2:db:29:a6:7b:86:fd:cf:b7:82:
         21:61:66:ce:1d:48:64:4a:f2:d4:d7:55:5f:93:72:77:97:5a:
         16:1a:b0:a3:88:c4:77:9d:b2:59:02:6b:ce:2f:e0:f2:e3:72:
         ff:7d:a3:2f:c9:52:10:c6:75:04:c9:f3:2c:33:f2:31:b1:0c:
         1b:d4:dc:d6:e4:b1:dd:0a:1d:b3:74:ca:38:5b:99:cd:71:2a:
         ce:02:de:ff:40:dd:f3:52:81:0c:e4:61:af:38:b7:74:f2:d1:
         e1:d7:89:e8:ed:74:a8:de:89:08:86:e6:38:39:c8:97:09:db:
         1d:96:c1:91:e4:b1:20:e9:9e:96:e7:7e:12:7c:d9:a7:d6:12:
         df:b0:5f:a9:7d:26:9a:f1:de:29:bd:96:e5:98:46:56:25:3b:
         dd:b7:a8:2d:dd:db:19:4c:8d:13:af:39:1e:73:ba:b2:20:77:
         bd:5e:4e:ea:cb:f9:0c:fd:77:4e:e4:79:86:41:ba:5b:92:d0:
         e4:5c:f1:bc:e3:7f:fe:73:c2:ff:94:f3:15:0e:e0:f9:4c:14:
         8c:6b:a0:6e:ff:ae:95:1f:d1:6d:48:17:e7:8a:6e:0a:0c:8d:
         f2:98:1a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----