Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS202911.roa
File:                     AS202911.roa (raw, json)
Hash identifier:          srhJk9YKGQNOLciFouVcmjegpJu8njkkbSBYYwxRevc=
Subject key identifier:   CB:A6:8F:EF:45:48:69:B1:FB:37:8B:EC:0A:F6:8C:2E:B3:AC:3A:BA
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       4BA9C53EE04E55D565BECA9DC93CC0330201D462
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS202911.roa
Signing time:             Sat 08 Apr 2023 03:25:46 +0000
ROA not before:           Sat 08 Apr 2023 03:20:46 +0000
ROA not after:            Sat 06 Apr 2024 03:25:46 +0000
asID:                     202911
IP address blocks:        2a12:dd47:8210::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:a9:c5:3e:e0:4e:55:d5:65:be:ca:9d:c9:3c:c0:33:02:01:d4:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:46 2023 GMT
            Not After : Apr  6 03:25:46 2024 GMT
        Subject: CN=CBA68FEF454869B1FB378BEC0AF68C2EB3AC3ABA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d5:12:db:8a:d8:2c:43:93:97:33:95:be:d4:
                    73:fd:90:f1:a1:b3:38:4e:d5:40:95:1a:59:e6:8a:
                    fa:4a:2d:15:6c:71:2b:6e:91:e8:65:ec:fa:53:0b:
                    23:c6:bf:00:5a:08:0e:50:d6:80:87:1a:5c:24:20:
                    36:fa:26:9c:92:98:96:39:7d:bd:af:83:45:d2:a8:
                    87:20:e0:db:da:67:27:c6:3a:b3:bb:d2:4e:b0:ec:
                    af:45:ca:f7:40:c0:d9:5e:7a:82:da:44:a6:6a:bc:
                    bc:d6:b3:83:e1:8f:48:67:d7:35:63:1f:85:d1:87:
                    05:31:32:66:b3:40:9a:bb:7c:8d:5e:d4:1e:88:60:
                    b2:1b:3b:52:d4:a4:a4:94:7a:7b:cb:0f:89:c3:d2:
                    60:c9:34:fe:46:41:12:83:69:f8:99:98:01:c2:0c:
                    13:68:21:1f:dc:2d:ca:ef:8c:30:4e:9e:51:37:e5:
                    5e:5d:61:83:5c:6b:19:c8:bb:22:74:1c:32:01:7b:
                    22:06:39:71:3d:26:95:5d:98:4f:d3:a6:00:1f:78:
                    ed:03:52:63:f7:68:a4:2e:a0:97:4a:d6:4e:8d:62:
                    8a:b3:3e:38:11:2e:d0:c6:b8:61:a9:e5:3a:1b:ce:
                    e8:f1:73:08:9b:93:48:ff:f4:2c:b9:e5:4f:59:48:
                    09:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:A6:8F:EF:45:48:69:B1:FB:37:8B:EC:0A:F6:8C:2E:B3:AC:3A:BA
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS202911.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8210::/44

    Signature Algorithm: sha256WithRSAEncryption
         82:6b:d9:bf:2a:d0:67:62:f6:6d:1f:67:c9:bf:83:c6:c8:0a:
         e1:4d:cd:ae:e2:7c:9d:f2:a8:dd:d5:76:d8:c3:96:9c:c0:89:
         8f:53:e8:53:4e:dc:0c:10:99:63:fd:73:d1:3c:cf:b3:35:ab:
         1b:d9:11:b3:b4:e1:ed:de:7c:7b:0b:e4:f2:5c:e5:ae:07:3f:
         55:b4:d6:03:3a:bd:e5:76:5c:db:45:14:b8:f9:65:b7:31:6d:
         cc:c6:62:8e:ba:d5:f9:bb:d8:13:b7:b2:c3:75:ae:4f:dd:13:
         f0:e7:e9:16:b8:14:5b:6b:ee:4c:22:2e:1d:a9:01:2a:e1:c6:
         8b:5c:f6:e1:b1:f8:ff:f2:fe:d5:78:35:19:da:f3:74:69:73:
         da:7b:78:cb:4f:6c:f0:d4:6c:dc:b6:31:38:cc:86:1b:9b:8f:
         55:bb:2d:8f:41:6e:14:77:8b:4e:69:33:fa:4b:33:2e:07:9d:
         4b:29:e0:d3:a9:09:41:8b:69:8c:d3:30:48:7a:58:00:e3:9f:
         4d:1c:e1:c3:90:40:e6:76:0c:58:50:2e:d4:98:85:76:96:89:
         2b:bf:d0:7f:1a:c5:d3:07:8d:fb:4f:f8:58:e2:03:aa:62:69:
         01:09:c6:ee:8b:e9:f1:f2:89:57:99:80:31:01:5a:16:84:0a:
         85:21:7c:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----