Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS207142.roa
File:                     AS207142.roa (raw, json)
Hash identifier:          5HMh+5GmUWngDdYnmKSRyjOnpfK01eViLt+HeyOR4b0=
Subject key identifier:   4F:7B:01:72:E0:3A:D0:80:8F:D6:51:52:24:D6:C2:81:30:1A:6D:54
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       5A95550ED3A285F5B8124AB668A88A44F99784F4
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS207142.roa
Signing time:             Sat 08 Apr 2023 03:25:43 +0000
ROA not before:           Sat 08 Apr 2023 03:20:43 +0000
ROA not after:            Sat 06 Apr 2024 03:25:43 +0000
asID:                     207142
IP address blocks:        2a12:dd47:8090::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:95:55:0e:d3:a2:85:f5:b8:12:4a:b6:68:a8:8a:44:f9:97:84:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:43 2023 GMT
            Not After : Apr  6 03:25:43 2024 GMT
        Subject: CN=4F7B0172E03AD0808FD6515224D6C281301A6D54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:fd:b9:9f:2d:96:46:23:4d:e9:bd:5d:c0:37:
                    3e:75:79:24:ea:66:bf:ba:dd:e9:d7:66:a7:1d:68:
                    db:d5:42:18:d3:30:45:9e:97:c1:94:d8:e8:7c:0d:
                    13:15:b8:55:a3:f9:26:0b:e0:ab:10:98:40:42:fc:
                    14:a0:57:5e:8a:a0:2e:e2:98:8f:1d:1a:cc:9b:73:
                    82:59:f6:a1:a4:4c:61:77:01:6c:51:a0:ef:2b:77:
                    a0:5b:12:5d:4c:5c:2d:b8:0c:17:4f:bc:f1:2d:a5:
                    2a:5f:c8:77:9f:74:67:a1:0d:82:29:22:76:1f:dc:
                    63:4d:19:db:bd:31:dc:6b:11:e8:41:b9:d4:d9:6b:
                    44:86:0e:df:9a:99:0c:16:55:b1:65:ea:ec:ca:b1:
                    90:ad:0e:3f:96:11:ac:5c:b4:46:f6:d5:45:dc:2c:
                    fb:71:3c:78:35:9a:5a:49:97:6c:7a:20:b5:1e:0c:
                    b7:1e:af:ed:01:89:4d:b1:ae:fa:a5:2b:2a:3b:6f:
                    91:20:e8:58:f7:27:b4:ed:b2:de:a3:c2:90:47:68:
                    78:11:02:b0:87:f7:e8:6f:50:e6:0e:15:55:e5:b9:
                    93:13:8c:4d:37:39:49:11:ca:85:87:99:f5:d6:e2:
                    43:ae:9f:7c:14:54:6b:62:5a:e4:68:b1:67:b2:d8:
                    5d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:7B:01:72:E0:3A:D0:80:8F:D6:51:52:24:D6:C2:81:30:1A:6D:54
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS207142.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8090::/44

    Signature Algorithm: sha256WithRSAEncryption
         66:b3:43:7b:a8:3c:87:01:64:74:4b:22:eb:e3:de:d7:c9:a4:
         e3:4b:68:1f:7b:85:01:5b:40:56:3f:d7:a8:f7:2c:bf:a0:ff:
         76:c7:9a:20:11:04:fe:f2:89:7a:ef:78:92:98:5f:6a:46:57:
         c2:19:52:b0:4b:cd:00:4e:0c:5e:12:97:a1:06:be:6e:78:87:
         2e:79:5e:cc:13:cf:d5:5a:f9:d6:bf:fd:28:31:e0:64:fd:de:
         0a:77:fc:df:20:fa:aa:16:19:dc:44:2e:80:22:1d:34:c8:5d:
         b3:de:00:42:c5:51:34:94:b7:b6:56:81:15:c8:a3:f1:fc:3c:
         74:c3:b0:02:e1:5b:a0:a1:18:81:49:eb:82:c0:1d:37:7b:ae:
         b3:89:b8:e4:20:fd:4b:e2:d8:9b:d8:31:d6:69:e5:18:2c:44:
         43:ba:8c:91:18:cf:a4:f8:e2:f2:f1:b6:b5:18:60:e8:8d:d8:
         4d:53:65:93:8b:0f:4d:ed:a4:d6:33:29:db:f4:c1:3c:47:bd:
         6e:f7:06:2a:46:1c:0a:f0:a1:fe:a2:6a:f9:ed:be:15:34:58:
         76:8b:14:6f:a3:32:59:33:c7:d0:df:61:22:84:ba:00:d4:8f:
         29:5b:1a:8b:fc:a9:a9:48:45:05:eb:4e:f9:77:a2:db:e8:fc:
         81:54:c3:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----