Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS203868.roa
File:                     AS203868.roa (raw, json)
Hash identifier:          wieEyvSrk28VphhLYiJh7kEzzi1AsAFqLfqaNR7qkPY=
Subject key identifier:   F0:4D:A1:A1:A0:89:2B:F3:BE:43:77:07:41:BD:D2:BD:3A:0E:80:0A
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       1BE8D9A594FE7DEA60413417CD53A0ABCD77DCEF
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS203868.roa
Signing time:             Sat 08 Apr 2023 03:25:35 +0000
ROA not before:           Sat 08 Apr 2023 03:20:35 +0000
ROA not after:            Sat 06 Apr 2024 03:25:35 +0000
asID:                     203868
IP address blocks:        2a12:dd47:8046::/48 maxlen: 48
                          2a12:dd47:8700::/40 maxlen: 48
                          2a12:dd47:d000::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:e8:d9:a5:94:fe:7d:ea:60:41:34:17:cd:53:a0:ab:cd:77:dc:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:35 2023 GMT
            Not After : Apr  6 03:25:35 2024 GMT
        Subject: CN=F04DA1A1A0892BF3BE43770741BDD2BD3A0E800A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:a2:50:9c:7d:d1:37:14:48:b8:07:87:e7:3c:
                    65:8e:b0:a3:66:84:03:74:a0:bf:a2:e8:a8:88:84:
                    cc:6a:29:0f:e8:00:f4:95:fb:db:fc:6b:85:2a:b4:
                    c1:a9:14:d8:5d:6b:a8:e0:0e:15:47:bd:11:50:98:
                    65:19:0f:8f:b4:e7:23:1c:79:4f:e8:c2:d3:29:59:
                    80:b8:7c:34:e5:45:84:98:ba:8a:26:72:7d:f1:72:
                    6a:6b:90:7f:36:44:f8:3f:f1:99:ee:38:72:a3:8b:
                    8b:c7:97:87:cc:2e:6f:a0:c8:62:dc:6d:58:49:5c:
                    f3:bb:b5:bc:a6:63:57:4f:32:08:74:02:d9:1d:6b:
                    7c:45:fb:74:4e:ff:07:eb:46:bf:8e:37:e4:d7:bd:
                    6e:93:57:5c:50:6f:2f:2a:d7:46:83:0b:4e:8f:16:
                    7b:52:7f:c0:3d:32:2c:b7:4d:0e:57:be:46:66:7a:
                    0d:5b:69:7a:a4:3e:97:a8:52:92:17:f9:93:57:f0:
                    fb:18:32:85:cd:17:8e:11:f3:40:8b:3c:21:83:83:
                    62:ec:9c:a7:a2:28:36:fa:a9:d9:db:e9:3c:54:68:
                    48:be:92:4c:a6:58:de:31:8b:2c:cd:1d:29:6e:f4:
                    f8:fa:3f:4d:42:ae:f8:4e:74:de:45:8a:17:f0:1d:
                    58:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:4D:A1:A1:A0:89:2B:F3:BE:43:77:07:41:BD:D2:BD:3A:0E:80:0A
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS203868.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8046::/48
                  2a12:dd47:8700::/40
                  2a12:dd47:d000::/40

    Signature Algorithm: sha256WithRSAEncryption
         18:8b:aa:4f:31:d7:68:f1:d9:90:dc:3a:be:cb:c6:e0:e0:0a:
         98:37:e2:e3:9d:68:1e:1d:b1:6b:af:a3:23:33:85:c9:8a:1f:
         f4:76:8a:b0:32:91:71:11:17:d8:9f:2e:8d:2e:d7:84:e0:9c:
         88:1d:4e:d9:c4:56:53:71:01:22:5f:fa:5d:f6:b4:36:92:62:
         65:02:0e:26:d4:4a:d7:b0:f0:c3:89:2b:f2:67:0f:68:b3:41:
         08:a0:bc:4d:cb:5e:b2:95:ab:0f:4e:db:63:91:67:3d:d9:cc:
         a1:de:46:d3:d6:5c:c0:6a:10:32:d9:9a:26:14:9a:10:fc:28:
         f3:a8:7d:a0:51:b8:76:97:ca:b6:8a:7d:ca:a9:c6:87:74:24:
         fc:52:f9:f6:dc:03:3b:21:80:f3:67:c5:8f:b8:88:d0:dd:ab:
         b8:1d:aa:46:e5:2f:18:d9:98:1e:ed:b3:82:d6:d4:96:7f:f9:
         52:5b:ca:23:dc:4c:ab:05:8b:d8:94:1f:b7:f0:b4:8e:3a:cc:
         f8:80:f9:29:3d:fc:c8:1c:5a:18:90:6d:46:49:03:6f:4d:54:
         4c:f9:b8:0f:f3:ef:8a:92:8e:82:47:79:b0:70:35:3c:fd:3a:
         c3:89:47:c1:c8:55:08:5f:99:96:9a:5c:fb:e7:79:5d:cf:51:
         d7:06:cd:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----