Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS202828.roa
File:                     AS202828.roa (raw, json)
Hash identifier:          kZOWKwN9oGVgktYAFXC8I3wr5nAjfRwaEg+1G0oWK2k=
Subject key identifier:   B5:1C:FC:8F:D2:7E:C9:27:80:BA:7A:D8:C6:F5:CD:4D:A7:32:ED:21
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       1A9AFEC189CDE6F77EDD8001C2CD50F50889A334
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS202828.roa
Signing time:             Sat 08 Apr 2023 03:25:29 +0000
ROA not before:           Sat 08 Apr 2023 03:20:29 +0000
ROA not after:            Sat 06 Apr 2024 03:25:29 +0000
asID:                     202828
IP address blocks:        2a12:dd47:804c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:9a:fe:c1:89:cd:e6:f7:7e:dd:80:01:c2:cd:50:f5:08:89:a3:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:29 2023 GMT
            Not After : Apr  6 03:25:29 2024 GMT
        Subject: CN=B51CFC8FD27EC92780BA7AD8C6F5CD4DA732ED21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:33:65:e9:f7:3b:21:f0:3a:b0:e6:2b:6a:a8:
                    f0:d9:6e:26:54:c3:89:54:e8:36:d1:2c:78:e6:b9:
                    70:43:b4:6c:8c:bf:98:c4:23:7b:c9:26:ad:25:63:
                    96:aa:78:46:00:9c:b2:6b:dd:7e:0e:51:4c:2c:57:
                    90:f3:71:ce:11:b0:5f:a6:d6:03:da:ca:f5:17:4d:
                    0b:88:0f:21:57:73:88:ef:5a:d5:4d:8a:96:19:5f:
                    93:68:da:89:c1:f5:fd:c1:dc:63:9f:98:53:f9:91:
                    76:4f:14:8e:41:97:82:a0:26:1f:4e:b5:55:36:81:
                    0d:44:43:64:cd:86:4d:75:80:88:e0:83:d2:c4:9f:
                    69:7b:57:7f:ce:ee:08:53:40:7b:2f:7c:6b:92:8b:
                    8f:8d:2b:37:de:94:d7:7e:de:ca:15:12:51:2f:f8:
                    c2:47:84:3d:b9:21:95:ed:99:33:86:25:49:97:f4:
                    70:92:cc:49:5b:21:60:fe:17:56:70:b8:ec:a6:f2:
                    76:d6:4c:73:46:58:4f:6c:83:65:c1:f6:82:f4:b4:
                    42:d4:a6:26:08:26:f5:e8:3b:9c:85:2a:85:4d:22:
                    55:9f:ec:65:74:71:9f:98:a2:6c:da:27:35:37:87:
                    7f:60:f0:fa:64:01:ff:91:e0:b4:89:01:cb:44:44:
                    1d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:1C:FC:8F:D2:7E:C9:27:80:BA:7A:D8:C6:F5:CD:4D:A7:32:ED:21
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS202828.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:804c::/48

    Signature Algorithm: sha256WithRSAEncryption
         34:19:2b:eb:57:75:02:b5:be:9e:90:97:4e:ec:f5:c1:98:65:
         d2:63:0d:db:17:29:9d:4d:3d:61:15:a1:a2:97:e8:51:7b:eb:
         d0:26:76:e7:f3:a7:9d:74:d9:8a:dd:20:74:e3:ea:bd:e4:16:
         45:17:f1:51:46:81:62:a8:9c:01:65:5b:92:e2:2b:e9:af:18:
         81:a1:c9:e3:dd:10:a4:8a:33:2e:6d:92:c9:33:50:1a:a1:6b:
         ee:41:33:c6:86:02:7e:48:51:2f:05:8f:d7:27:e7:31:33:8b:
         ab:17:d8:d5:89:0c:93:35:b3:b4:9c:d9:21:fa:89:88:f9:e1:
         1f:41:df:af:c8:55:7c:5c:62:ec:fb:92:5b:fe:f8:cc:35:f3:
         ab:1a:d2:47:47:b9:18:b7:79:87:81:fd:9c:ea:78:37:18:d9:
         23:b0:09:a5:45:d5:08:8e:3c:aa:60:d9:38:9e:c3:66:76:4c:
         45:61:b5:11:01:cf:23:b5:a4:56:1d:c8:92:c4:29:b3:51:e0:
         1e:45:53:21:91:19:b7:cd:57:69:1b:e5:46:d9:2b:48:b4:0e:
         45:66:c8:a4:ba:79:3e:ca:08:e4:77:25:84:6b:e9:02:b5:bd:
         e2:70:61:89:d1:2a:b0:01:a0:18:cb:ac:cc:c6:fd:6f:a9:8a:
         d3:3a:71:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----