Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS206368.roa
File:                     AS206368.roa (raw, json)
Hash identifier:          W/DivitL4oQ7mi4vKJREpjCIEr8/ex0afpWtzOYQvFA=
Subject key identifier:   03:C3:53:FA:F2:C2:A2:EC:56:19:6C:0B:9D:AD:83:D4:79:06:BD:18
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       0CF9E4C8D344BF8F79F7EFE892C3638B0348113A
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS206368.roa
Signing time:             Sat 08 Apr 2023 03:25:41 +0000
ROA not before:           Sat 08 Apr 2023 03:20:41 +0000
ROA not after:            Sat 06 Apr 2024 03:25:41 +0000
asID:                     206368
IP address blocks:        2a12:dd47:80f0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:f9:e4:c8:d3:44:bf:8f:79:f7:ef:e8:92:c3:63:8b:03:48:11:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:41 2023 GMT
            Not After : Apr  6 03:25:41 2024 GMT
        Subject: CN=03C353FAF2C2A2EC56196C0B9DAD83D47906BD18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:ea:58:83:ed:64:6e:1a:a3:48:55:2a:11:fa:
                    23:2c:26:34:6d:78:5d:a1:d5:02:3c:b9:67:66:27:
                    6b:88:e8:b2:7b:54:4c:bf:55:d3:05:4c:42:cc:ed:
                    7f:52:49:31:26:38:bb:ce:a9:17:09:26:37:b3:00:
                    55:44:7a:3f:15:70:82:78:7f:0c:01:d2:86:18:02:
                    0c:53:e2:54:f3:b3:8e:ee:32:57:88:e7:1f:6e:fe:
                    43:f6:f3:8f:df:29:99:70:b5:3d:37:ab:bb:cd:b9:
                    fc:c3:1a:2a:04:78:25:b7:56:17:7d:ea:d2:ca:79:
                    66:c0:2d:44:56:e1:b9:d5:51:03:1e:19:43:3b:42:
                    6f:de:7d:23:1f:d7:1f:49:15:86:7b:8a:ab:cd:6b:
                    68:b6:f6:5d:14:47:cc:30:c1:76:e4:00:28:a3:ca:
                    03:76:5d:fa:17:77:f6:79:a7:78:b0:23:9c:b9:33:
                    0e:22:5b:29:ad:49:e8:1a:5f:dc:68:0c:65:5d:70:
                    bf:58:f2:75:c7:30:ae:e4:bf:8c:f0:5f:38:28:79:
                    6d:63:e5:3b:c5:be:d2:34:0b:b0:9e:86:fb:bb:48:
                    78:30:ae:f6:41:38:2a:60:19:bb:ab:69:75:47:16:
                    dc:4b:0c:bf:18:be:7d:a9:31:ff:d4:a0:0f:cb:8b:
                    73:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:C3:53:FA:F2:C2:A2:EC:56:19:6C:0B:9D:AD:83:D4:79:06:BD:18
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS206368.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:80f0::/44

    Signature Algorithm: sha256WithRSAEncryption
         02:ef:fd:d1:f7:e5:be:c7:1b:e3:de:4a:1f:f8:e8:ca:d8:92:
         50:fc:91:80:c6:b4:1b:9b:33:e2:97:b6:b6:1d:ca:f0:bf:4b:
         9e:ac:c8:6f:59:65:2b:fd:c3:6b:7f:f6:19:7e:c1:ee:8c:76:
         1b:2e:8d:6a:bb:d1:57:7a:e7:8b:a3:f2:93:36:b4:cf:26:8f:
         29:e2:d2:70:6c:7d:6e:16:97:4b:bc:6d:89:1a:56:c7:dd:6b:
         82:90:15:28:93:b5:a0:43:c4:fe:68:24:ee:97:aa:ac:79:bb:
         03:cd:2e:8a:c1:a6:73:b8:f7:9a:23:38:e0:7b:2d:20:d1:86:
         72:c9:ff:88:7f:48:e2:d2:29:8c:83:5f:2d:13:ba:d1:70:6f:
         a1:91:5c:13:1f:6a:58:4f:43:fb:bb:23:fb:63:c3:4a:c1:e4:
         94:fa:86:bb:75:eb:6b:83:50:c1:58:6e:39:ee:3a:aa:26:e8:
         07:28:a8:13:07:4b:2c:e0:16:55:d0:8b:c4:d9:ce:b2:59:75:
         de:a9:e7:c9:dc:cb:3a:a8:bd:c7:1b:f0:8c:fe:0c:55:ec:89:
         f5:b7:4c:d0:41:a9:3a:d3:cf:73:f7:19:5c:be:84:35:7d:6a:
         b6:da:76:14:1a:8e:df:a2:f4:c0:73:25:c8:50:03:35:2d:d6:
         9a:9b:1d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----