Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS203470.roa
File:                     AS203470.roa (raw, json)
Hash identifier:          r0V70drGuZ4Sqk6yQ7MzvrlfGhDNJNen42GatN5Wasg=
Subject key identifier:   72:5B:E3:0D:92:99:57:7E:CE:36:19:8D:F0:8C:66:0B:D0:69:4A:DA
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       7D036330CBE390BF9C567AC2C2DC8EE2BE63D056
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS203470.roa
Signing time:             Sat 08 Apr 2023 03:25:42 +0000
ROA not before:           Sat 08 Apr 2023 03:20:42 +0000
ROA not after:            Sat 06 Apr 2024 03:25:42 +0000
asID:                     203470
IP address blocks:        2a12:dd47:80e8::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:03:63:30:cb:e3:90:bf:9c:56:7a:c2:c2:dc:8e:e2:be:63:d0:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:42 2023 GMT
            Not After : Apr  6 03:25:42 2024 GMT
        Subject: CN=725BE30D9299577ECE36198DF08C660BD0694ADA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:00:ef:7d:72:18:b4:a6:85:0f:04:6d:b5:40:
                    9c:fd:ff:b3:ff:ef:01:0b:ef:d9:9b:cc:f8:fe:63:
                    83:ef:69:b2:ba:93:d2:bf:2e:72:2f:d9:7c:55:93:
                    46:fd:67:3c:f9:56:51:db:d1:c3:3f:09:bb:68:e1:
                    2f:76:bd:f9:12:f6:30:c4:59:f0:b6:6e:37:92:dd:
                    06:e9:5f:3e:83:70:57:a0:1d:bc:72:6f:85:64:82:
                    56:93:7a:82:a2:43:5d:3f:30:7a:f2:89:b8:e0:1d:
                    c8:33:8c:d6:16:81:60:b4:85:d7:9b:11:82:6c:3e:
                    45:0d:89:88:c8:35:1d:62:04:ce:4b:a5:27:5c:df:
                    63:2d:3a:df:c1:f1:96:00:2d:f0:6b:25:f2:0d:94:
                    0b:d7:27:3a:0b:20:dd:a2:d5:6e:29:af:a0:0e:40:
                    9a:b4:a1:18:4b:60:2f:f9:d3:aa:69:01:0e:b4:d3:
                    48:b5:e9:1f:f5:9b:28:8f:03:ae:47:f6:3b:f4:0d:
                    42:f7:98:3a:5d:e0:d5:9d:76:77:8c:eb:8a:e7:13:
                    de:cf:da:aa:f1:6c:f0:2b:11:67:ae:dd:bf:8b:bd:
                    30:57:87:cd:d1:8e:d7:1d:00:92:44:75:1c:d4:8d:
                    8d:2d:78:ed:40:0e:a9:c8:1b:2d:9e:1f:b5:39:b0:
                    05:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:5B:E3:0D:92:99:57:7E:CE:36:19:8D:F0:8C:66:0B:D0:69:4A:DA
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS203470.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:80e8::/48

    Signature Algorithm: sha256WithRSAEncryption
         56:55:f9:85:ba:6a:d2:42:d7:ef:7e:9b:72:55:56:77:fc:5f:
         be:0f:0c:35:19:71:89:e1:0e:99:50:f9:53:27:e0:c5:44:9b:
         ae:c4:03:9d:d0:77:8e:a4:6a:9b:41:be:3b:bc:76:6d:9c:98:
         b0:9d:0c:47:06:92:8c:75:80:ca:4f:78:b4:fa:96:0e:ec:08:
         48:51:8e:9c:ca:ca:09:29:c9:14:61:ca:b2:75:48:bb:89:63:
         aa:e6:68:16:30:6f:0e:b6:7b:00:30:53:85:8e:2b:59:e3:64:
         90:1c:a2:2f:ac:71:0e:2b:9f:4b:d7:5d:3d:f2:96:3d:3a:95:
         06:41:c0:ca:ce:22:53:bd:3f:74:0a:32:87:39:d7:50:78:fa:
         ba:78:7c:80:80:7f:c2:50:f1:45:ef:55:5e:6b:48:e1:1e:12:
         0b:01:00:59:e4:75:49:bb:5a:ee:08:44:37:91:ac:f6:ed:58:
         8e:c8:f3:3b:80:51:ad:57:6e:16:6f:7e:eb:83:cc:35:db:57:
         78:dd:6a:3e:3c:70:50:73:94:f3:a1:41:a6:9a:2f:1a:f8:c3:
         09:85:3b:ee:ce:bc:5d:73:25:d6:30:0d:a0:8e:6c:66:6c:db:
         8e:55:b4:d0:88:e3:52:4d:26:10:88:07:96:ff:35:fa:40:a6:
         0b:41:8c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----