Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS205432.roa
File:                     AS205432.roa (raw, json)
Hash identifier:          y0/6BXL8UeQBc7DNq9Ya2CphoL+NlRy82oi47ESFoLA=
Subject key identifier:   F6:86:39:B3:DE:60:D5:BB:C5:F0:A6:E2:80:9E:66:6F:5F:72:EF:9B
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       4EF0C47349C3D29195C30354795E005F5D32ACD1
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS205432.roa
Signing time:             Sat 08 Apr 2023 03:25:46 +0000
ROA not before:           Sat 08 Apr 2023 03:20:46 +0000
ROA not after:            Sat 06 Apr 2024 03:25:46 +0000
asID:                     205432
IP address blocks:        2a12:dd47:84fe::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:f0:c4:73:49:c3:d2:91:95:c3:03:54:79:5e:00:5f:5d:32:ac:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:46 2023 GMT
            Not After : Apr  6 03:25:46 2024 GMT
        Subject: CN=F68639B3DE60D5BBC5F0A6E2809E666F5F72EF9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:39:1d:80:f4:82:1c:3c:2f:8e:32:01:05:3c:
                    ed:6d:d1:f7:a4:d5:f0:43:8f:6b:88:75:83:fd:d7:
                    46:94:21:d4:1e:76:b2:30:aa:91:05:46:2c:6e:71:
                    7b:24:9e:a4:b8:c6:b0:12:17:fb:8e:6e:1e:a5:5e:
                    fd:85:6c:29:7b:28:29:63:a0:7b:a2:bf:d9:3c:45:
                    76:e3:02:75:88:16:72:38:2d:be:af:7b:1f:64:60:
                    a3:b4:20:f7:1e:8f:9a:1b:e6:25:47:47:da:75:fb:
                    66:d9:1e:d4:5c:ce:8f:33:9e:b3:ee:ed:e9:7a:73:
                    ed:d0:ce:cc:8b:a6:98:31:aa:9f:b5:50:0d:c1:7e:
                    dd:58:bc:4c:6f:53:7f:d5:c4:57:8c:41:62:2c:4c:
                    cd:de:92:f1:2e:8a:ba:59:fb:a4:20:01:50:08:10:
                    dc:ce:e0:74:8e:81:13:4e:6c:bd:33:1a:79:d2:56:
                    4b:fd:04:36:6f:9f:f0:59:79:52:96:48:14:e2:5e:
                    9e:30:3f:73:fb:f5:7b:87:8c:68:70:d9:40:66:38:
                    9e:b5:55:f8:c8:73:71:6f:af:ea:6d:59:0f:a8:33:
                    4b:7b:36:39:64:40:f4:cf:e2:0c:36:1d:d9:4c:18:
                    04:5d:24:df:b7:c2:21:3c:2f:6f:a3:70:96:71:69:
                    c1:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:86:39:B3:DE:60:D5:BB:C5:F0:A6:E2:80:9E:66:6F:5F:72:EF:9B
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS205432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:84fe::/48

    Signature Algorithm: sha256WithRSAEncryption
         63:d5:08:dc:0e:63:d3:8b:c5:42:ea:1e:83:0d:e1:c2:f7:33:
         2b:2d:95:6a:52:e6:34:b4:2d:76:9d:2e:f5:9f:4c:fa:0c:60:
         48:47:6a:ed:67:1d:5e:4c:bb:b2:87:73:5e:51:4f:17:52:b7:
         73:af:92:86:2d:5d:97:64:c6:d6:04:17:e9:5b:93:2b:bc:ea:
         44:7c:90:22:e3:da:cd:66:76:43:d0:9a:00:df:9f:77:53:ec:
         cf:39:d3:57:00:ea:c8:13:0a:e2:06:32:7a:86:f3:37:7b:ba:
         8e:f7:0e:13:d2:fc:2f:01:90:48:b2:34:ad:cc:0c:6b:6a:f8:
         a9:7d:ef:32:47:be:7e:ec:5d:58:a2:4c:5b:53:b6:62:2b:99:
         f5:cc:d9:a5:64:2d:ed:f0:55:78:5d:95:2d:7b:87:5b:89:96:
         85:80:58:9f:68:af:57:72:2d:92:21:20:66:0a:0c:b6:83:9c:
         76:63:08:00:24:90:17:d0:13:2b:a8:4d:a7:b8:6c:32:70:20:
         32:1d:42:f3:b8:81:93:df:72:a1:32:3d:f0:d7:c2:55:f2:9e:
         b3:10:27:72:21:44:00:41:1d:ba:82:4b:c2:f6:bd:b9:53:03:
         6a:a7:4e:b9:7c:b1:03:1d:15:60:fb:2a:54:43:32:b2:50:47:
         c9:d0:02:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----