Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS204466.roa
File:                     AS204466.roa (raw, json)
Hash identifier:          egyZlRnYMRki5i8GjZalrDLbaONj+IAoCdIRV7+l9JI=
Subject key identifier:   FD:4F:F3:11:8D:B2:0D:12:38:9F:6D:AB:7A:A6:81:C0:AB:C8:00:65
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       0976F07098A39012865D283640BF90CCBF83EC27
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS204466.roa
Signing time:             Sat 08 Apr 2023 03:25:35 +0000
ROA not before:           Sat 08 Apr 2023 03:20:35 +0000
ROA not after:            Sat 06 Apr 2024 03:25:35 +0000
asID:                     204466
IP address blocks:        2a12:dd47:8040::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:76:f0:70:98:a3:90:12:86:5d:28:36:40:bf:90:cc:bf:83:ec:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:35 2023 GMT
            Not After : Apr  6 03:25:35 2024 GMT
        Subject: CN=FD4FF3118DB20D12389F6DAB7AA681C0ABC80065
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:61:89:b7:25:70:b1:b1:9e:f7:51:d3:fb:0a:
                    a2:5a:0b:e6:a3:4c:44:9c:5d:ca:50:b4:a9:6c:0b:
                    27:1e:1d:ff:45:55:32:de:27:86:c7:4f:8d:69:31:
                    0d:da:1d:54:4f:fa:d5:bc:84:be:df:fe:80:51:9c:
                    83:61:95:58:1f:74:ae:e5:e7:90:85:a2:09:2b:93:
                    46:00:d5:c6:69:b9:c2:4e:fe:e6:56:9d:1a:ef:5d:
                    89:d9:50:9e:bd:ec:bc:45:42:a1:33:1d:98:60:ef:
                    78:66:44:5f:f8:1e:3e:a3:23:c0:b9:92:6c:31:b5:
                    fa:e0:8a:cc:0c:e8:a8:06:30:08:80:99:5b:14:5c:
                    df:6c:67:fe:d7:2f:9d:7c:2a:34:4e:77:fb:e2:cd:
                    9e:23:93:92:6d:a5:7c:54:01:79:2b:35:09:c9:f4:
                    02:91:f7:8e:8f:e4:51:db:f9:75:35:b1:ef:23:ab:
                    04:f4:0f:31:ed:90:f1:ec:ac:6f:44:0f:f2:26:29:
                    5c:9a:c4:16:98:94:3f:2e:85:39:e6:31:94:3e:2a:
                    b8:fe:06:a3:42:08:bb:24:1d:2c:fd:35:f5:65:7d:
                    d2:2e:f0:ee:15:79:ae:34:54:6a:0f:bf:00:6e:ec:
                    9e:79:bc:31:57:ba:46:c5:43:29:13:08:e2:f1:88:
                    1a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:4F:F3:11:8D:B2:0D:12:38:9F:6D:AB:7A:A6:81:C0:AB:C8:00:65
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS204466.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8040::/48

    Signature Algorithm: sha256WithRSAEncryption
         a8:04:19:9b:99:ec:d3:22:b3:f6:d2:a3:1c:bd:3e:40:43:8e:
         fd:bc:ec:bf:ab:9c:92:11:0c:7f:65:e2:fb:3b:88:2b:c9:25:
         bf:4e:55:36:28:2c:32:10:5d:61:e0:61:dd:77:7a:0c:93:3a:
         0b:86:33:c5:6b:d6:55:34:30:ef:60:3c:d7:a9:1f:3c:59:da:
         06:e6:c4:06:f0:84:68:4a:ad:3e:7d:12:7b:f3:db:5c:b1:3c:
         58:c8:79:d9:49:1a:e2:c8:29:8e:89:00:a8:95:eb:5c:62:f6:
         3a:f5:94:03:88:03:09:b1:57:53:36:cb:93:68:c5:7c:47:19:
         e8:60:00:ac:ff:83:7f:7e:fa:94:45:ec:88:2f:9e:a3:d1:6b:
         49:a2:0d:25:6a:b7:d8:e2:75:e2:79:a5:38:a6:cf:71:1f:be:
         ca:93:a3:32:3e:61:81:f0:e8:97:b5:6d:fb:08:1e:4b:ff:a2:
         62:f1:38:0f:d2:00:d6:67:7c:07:ca:a0:4a:34:3d:b4:10:c1:
         d0:5c:ec:b4:48:a3:d7:51:97:08:d8:26:ab:ae:db:48:a2:28:
         c0:2b:2a:48:72:83:2c:d4:ca:d6:1b:cd:dc:4d:d3:5a:bf:26:
         bc:70:47:d6:d5:a8:ed:77:fb:83:11:7f:18:94:a5:6c:f3:80:
         cd:d0:43:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----