Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS204611.roa
File:                     AS204611.roa (raw, json)
Hash identifier:          Nsjr3fiT5W1IEO69ZDVoiiIWChDIyGeolFcQ0NKUlag=
Subject key identifier:   0A:0F:8E:92:7E:9B:A6:02:D1:D5:59:5D:25:3A:AE:13:45:6A:59:52
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       0652A95324514982353AE32E6EAA177FEC01D2B8
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS204611.roa
Signing time:             Sat 08 Apr 2023 03:25:42 +0000
ROA not before:           Sat 08 Apr 2023 03:20:42 +0000
ROA not after:            Sat 06 Apr 2024 03:25:42 +0000
asID:                     204611
IP address blocks:        2a12:dd47:83f0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:52:a9:53:24:51:49:82:35:3a:e3:2e:6e:aa:17:7f:ec:01:d2:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:42 2023 GMT
            Not After : Apr  6 03:25:42 2024 GMT
        Subject: CN=0A0F8E927E9BA602D1D5595D253AAE13456A5952
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:da:31:13:f9:75:b8:8d:5d:98:4e:32:39:89:
                    53:84:2d:20:f6:ef:7f:81:1e:0b:e3:e3:95:56:08:
                    05:8e:a2:3f:83:c6:37:70:8a:a2:4a:9e:a7:b1:f3:
                    e0:6b:df:ad:ff:19:47:4d:96:55:cf:98:41:1b:1f:
                    bc:28:7e:5f:a6:05:cd:d1:7c:03:92:f0:e8:8c:2d:
                    ec:b4:d8:3f:4b:3c:4c:f4:91:3f:0c:96:05:bf:15:
                    db:0b:99:82:7b:cc:23:d5:8c:b0:fe:92:80:a5:c7:
                    d9:86:a4:d3:4a:9a:5f:a7:63:79:46:34:0f:7f:ff:
                    29:bc:6c:ce:5d:eb:e6:62:45:eb:bb:36:18:07:c5:
                    43:d1:3d:4f:f4:6a:35:a4:4c:e3:74:c9:29:cd:fd:
                    a3:45:32:75:be:05:e0:a8:3a:ee:02:de:42:e7:8c:
                    54:29:82:c9:ec:2d:d1:1d:9c:69:c1:e2:18:48:5b:
                    63:37:34:be:b3:a3:60:16:81:8e:14:75:a5:9e:88:
                    33:05:48:b1:71:8d:97:0c:c1:a3:7d:ec:68:54:89:
                    ba:58:9c:09:b9:30:1f:ba:6d:6b:5c:2f:31:c3:bd:
                    e5:f3:ac:ed:11:30:c6:73:89:8e:45:1b:f8:41:9a:
                    5a:87:98:5e:ff:25:4d:59:0c:53:34:62:d4:8a:ff:
                    75:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:0F:8E:92:7E:9B:A6:02:D1:D5:59:5D:25:3A:AE:13:45:6A:59:52
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS204611.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:83f0::/44

    Signature Algorithm: sha256WithRSAEncryption
         74:18:6b:b0:ed:bc:88:4c:14:30:75:bf:21:b8:fc:cd:42:cd:
         c5:8c:37:ea:a4:e7:e8:1e:42:ea:47:8b:ba:f4:a0:77:de:a6:
         41:66:8c:25:97:e0:c4:0a:a9:1c:48:1a:d3:b4:be:8c:0d:8c:
         35:10:a4:ba:ac:c7:5a:1c:34:51:78:67:2f:c2:67:e4:48:ef:
         d8:42:fd:b6:a9:d3:6b:9b:18:dd:f8:c8:b1:02:d4:78:9b:a5:
         2e:03:4b:27:34:67:e4:a4:53:a2:3f:4e:1b:6d:4c:8e:eb:d5:
         b7:4a:d7:ef:c4:ae:59:5f:97:a3:49:91:2b:a9:c5:58:0c:22:
         8c:13:3f:3b:30:74:7e:a7:f6:01:94:b8:97:4b:17:eb:27:82:
         c2:01:2d:f9:f8:a3:a3:ae:9f:b3:4c:1c:2e:59:a8:5c:03:ec:
         17:8f:df:9d:2b:e8:f3:a5:3c:ea:bb:75:9f:bb:82:e0:ee:5f:
         bc:b2:6c:92:27:d4:71:c8:39:6f:3e:77:ae:21:87:bc:44:ec:
         fb:72:b2:ac:05:94:47:c5:b4:dc:72:1c:12:a8:6b:77:21:97:
         9c:a9:30:2a:ff:85:8c:b4:d3:6a:4f:16:2e:b2:9a:10:6f:ad:
         d4:82:1f:49:4f:62:e1:64:b3:7e:b5:f8:8f:61:ba:04:e0:f9:
         b0:97:4e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----