Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS203737.roa
File:                     AS203737.roa (raw, json)
Hash identifier:          B+f11NAMWtd72dF0wrCt1TiOOqK7Trwbc6uIHtlWorw=
Subject key identifier:   34:69:E9:F2:02:F7:D9:48:28:2E:2F:E7:14:45:09:E3:FF:88:F4:0E
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       44A0FE5444031E17E426832C16C9B3E97957E9D2
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS203737.roa
Signing time:             Sat 08 Apr 2023 03:25:48 +0000
ROA not before:           Sat 08 Apr 2023 03:20:48 +0000
ROA not after:            Sat 06 Apr 2024 03:25:48 +0000
asID:                     203737
IP address blocks:        2a12:dd47:81b0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:a0:fe:54:44:03:1e:17:e4:26:83:2c:16:c9:b3:e9:79:57:e9:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:48 2023 GMT
            Not After : Apr  6 03:25:48 2024 GMT
        Subject: CN=3469E9F202F7D948282E2FE7144509E3FF88F40E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5d:36:17:9f:4d:aa:49:60:07:36:20:a1:a3:
                    cd:eb:10:10:77:48:70:70:1d:5f:84:67:80:b9:f3:
                    29:ce:1f:7c:19:61:68:db:38:97:ce:6c:e8:39:fd:
                    84:dd:02:08:19:6f:d8:05:49:5c:5d:7e:8a:78:19:
                    44:0f:08:fd:c9:25:fd:0c:a7:0a:98:78:a1:5b:dc:
                    cb:c8:0d:86:5d:c5:5d:c5:48:3a:e5:19:41:c4:0c:
                    b0:36:9a:81:29:a0:ac:b5:8f:76:e6:a4:1a:87:f9:
                    1a:63:11:e1:0b:ab:1f:5b:61:b8:87:15:20:5d:c6:
                    5d:7c:83:6c:05:a2:62:62:05:8e:bc:b8:14:03:83:
                    04:c3:96:29:fa:06:73:fa:a5:b1:0f:65:c4:b0:a0:
                    82:40:ad:7a:6b:a3:59:dd:75:b2:de:dc:8f:83:9c:
                    9f:2a:f8:6e:7c:20:a2:75:68:47:09:9b:46:75:23:
                    27:15:f6:35:4c:95:e5:6f:8f:03:a8:72:76:6a:69:
                    d9:a4:7f:19:42:b8:d3:e1:1a:49:d2:a6:a1:08:01:
                    78:c4:5e:51:7e:ae:1a:3f:06:92:6a:b2:b6:c0:b8:
                    32:28:d8:b5:87:fa:07:a7:11:ea:87:ed:81:4b:14:
                    1f:99:b2:27:6c:c7:9b:a6:d8:95:2a:49:11:d5:dc:
                    54:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:69:E9:F2:02:F7:D9:48:28:2E:2F:E7:14:45:09:E3:FF:88:F4:0E
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS203737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:81b0::/44

    Signature Algorithm: sha256WithRSAEncryption
         2d:de:d1:62:1c:70:c2:33:bf:be:4c:64:9a:ae:cd:90:50:c2:
         6d:14:cb:37:c6:5b:99:b9:df:54:52:50:ec:75:bf:bd:d5:35:
         20:9e:7a:6e:59:57:de:ea:42:80:91:a5:6e:bc:5b:7a:64:f8:
         a0:68:40:8f:c2:4c:d2:d9:b3:59:0b:c0:93:58:a8:96:f6:21:
         91:7c:ba:17:bd:f0:93:ff:59:5f:08:18:b8:17:f1:67:56:95:
         e2:05:64:ca:9d:d9:3e:79:7b:6b:e4:92:bd:98:b5:7a:9d:78:
         e0:a3:4c:79:2a:b0:70:d0:a6:21:49:d4:96:8c:56:e6:b2:61:
         db:67:89:b8:aa:ca:5a:3a:9e:7d:e2:59:d6:6f:51:81:51:31:
         c9:b5:27:60:91:42:2e:8d:ba:5d:15:f2:65:a3:57:13:4c:62:
         b5:b8:a2:c0:34:32:bf:ab:35:6a:1f:a9:19:35:e0:56:d9:05:
         22:e9:34:18:4f:88:49:de:ce:7d:3a:86:2a:36:9c:18:ab:7a:
         9b:1b:7b:54:9e:d0:6a:81:ff:b0:b4:e9:d4:0d:4d:41:b2:17:
         cb:ca:73:1f:e6:8b:4b:49:20:60:d5:61:fe:ed:bd:a7:40:8e:
         cb:66:f6:07:2d:6b:46:ab:d2:7b:a2:79:3e:64:10:83:49:b2:
         8b:e5:78:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----