Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS202732.roa
File:                     AS202732.roa (raw, json)
Hash identifier:          1RznjiGDm4FbrBUOYwUtkVqBWkYEhknzGOvghKI2iZ4=
Subject key identifier:   60:D9:8F:32:67:09:90:8A:45:54:CD:F4:C0:53:DB:0F:4A:B4:6A:83
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       5CF9E8FE8DC67B46971FF4FBCA08D2C476697A2A
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS202732.roa
Signing time:             Sat 08 Apr 2023 03:25:39 +0000
ROA not before:           Sat 08 Apr 2023 03:20:39 +0000
ROA not after:            Sat 06 Apr 2024 03:25:39 +0000
asID:                     202732
IP address blocks:        2a12:dd47:8290::/44 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:f9:e8:fe:8d:c6:7b:46:97:1f:f4:fb:ca:08:d2:c4:76:69:7a:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:39 2023 GMT
            Not After : Apr  6 03:25:39 2024 GMT
        Subject: CN=60D98F326709908A4554CDF4C053DB0F4AB46A83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:60:fa:33:b8:61:ef:fa:94:79:17:73:eb:06:
                    70:12:1d:1a:62:15:88:b3:e5:50:d3:ca:36:8f:bf:
                    94:71:f0:52:81:47:f9:30:b7:d2:04:e9:da:0c:13:
                    0d:15:6c:5a:b6:a0:fb:4b:11:32:e1:25:d4:4a:24:
                    07:c5:c0:cd:41:04:3f:4d:6d:8a:7c:e2:4c:1b:7f:
                    cf:69:ff:cb:a2:e7:f0:3f:ca:7f:bd:bd:f0:54:c3:
                    e2:7b:aa:75:cc:da:9b:52:be:bd:ea:f4:9b:6b:b3:
                    7b:c4:0b:ee:dc:3c:9b:a7:0b:9c:8d:e5:69:d8:7c:
                    46:fc:95:7a:de:c7:86:c7:dd:26:f6:90:f8:7a:ac:
                    05:f7:6f:cf:f0:66:5b:6c:56:24:15:f0:8c:56:49:
                    91:f5:e4:71:e0:5d:b4:63:9c:39:a1:1b:09:38:45:
                    e2:4d:a7:d6:85:28:15:47:09:cf:d0:24:1f:a3:bb:
                    0e:7b:2f:f7:15:5b:a8:11:ef:f1:0b:4d:9b:c4:9a:
                    5e:83:29:84:a0:b1:82:3e:b4:46:85:47:9b:e8:c3:
                    fa:ac:fd:1f:17:9c:91:ec:22:bf:11:4a:92:3c:81:
                    f2:11:db:4f:3a:c8:fa:81:6d:b5:64:21:f2:9c:a9:
                    3a:92:91:0b:6a:e4:0f:68:a1:49:ff:34:bc:b8:b6:
                    b6:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:D9:8F:32:67:09:90:8A:45:54:CD:F4:C0:53:DB:0F:4A:B4:6A:83
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS202732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8290::/44

    Signature Algorithm: sha256WithRSAEncryption
         56:22:33:5e:fb:8a:ad:e7:14:d3:a2:8b:0c:ce:b8:7e:ea:a2:
         2d:53:87:3c:b2:3d:f9:6d:70:13:f5:bb:20:96:67:f1:b6:fc:
         4c:68:81:08:95:8c:4b:16:ce:5a:26:dd:71:25:c8:f0:5f:0c:
         68:85:35:3f:38:18:27:26:7d:f1:a7:b0:9f:15:28:15:09:41:
         3b:43:91:2a:b7:ad:d5:fe:51:3a:47:6d:2d:d9:03:5d:83:63:
         6e:0e:3c:80:f5:66:c0:41:ae:94:1c:b8:7e:cf:7b:53:9f:69:
         05:1b:bb:04:d9:5a:dc:42:43:c8:f9:fb:45:3c:26:73:18:40:
         5d:67:06:57:71:2b:de:0f:68:5c:00:d9:82:05:ad:f4:65:df:
         fe:43:37:d9:3d:2c:1d:27:6c:1e:4c:98:00:8d:5a:9d:a6:34:
         90:b9:f1:7a:57:18:e4:0a:29:14:3f:37:b6:4c:50:a8:27:bf:
         95:92:26:0a:59:cd:8a:fe:e7:31:38:3d:52:55:9b:67:98:f3:
         d0:60:1d:49:1e:84:70:61:e4:4f:ae:65:83:26:35:c5:e3:5b:
         04:76:97:0b:1e:99:26:c4:79:c2:99:80:4b:21:f7:78:d9:f6:
         64:db:88:98:50:f4:44:cc:7f:78:a6:8b:42:5c:c1:aa:08:ce:
         bd:93:fa:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----