Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS207320.roa
File:                     AS207320.roa (raw, json)
Hash identifier:          1ijghciGmMvut/IwTHoY/gUhOx7M4pciOUg1RZZW9lE=
Subject key identifier:   E0:FB:2D:3F:64:7E:BF:C6:6A:77:70:6A:08:66:3D:D4:74:2A:F2:F2
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       2D6547122996670BD21D21AB4B9F3B91A7558455
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS207320.roa
Signing time:             Sat 08 Apr 2023 03:25:38 +0000
ROA not before:           Sat 08 Apr 2023 03:20:38 +0000
ROA not after:            Sat 06 Apr 2024 03:25:38 +0000
asID:                     207320
IP address blocks:        2a12:dd47:82e0::/44 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:65:47:12:29:96:67:0b:d2:1d:21:ab:4b:9f:3b:91:a7:55:84:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:38 2023 GMT
            Not After : Apr  6 03:25:38 2024 GMT
        Subject: CN=E0FB2D3F647EBFC66A77706A08663DD4742AF2F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:bd:60:6a:75:df:2c:ed:08:ba:b6:20:5a:fd:
                    33:99:52:36:b0:b2:ab:de:62:dc:fd:86:97:1a:09:
                    73:36:af:fa:16:e5:5c:58:e6:2e:cb:b0:f6:52:a9:
                    03:17:76:08:e3:ef:77:56:81:90:88:b5:bc:a1:ca:
                    04:fd:68:e4:97:58:07:31:98:41:71:db:ed:43:3b:
                    9b:15:3e:f2:e9:77:9d:13:4b:4e:b7:b2:be:c2:a3:
                    09:5f:bf:48:2f:1a:bf:45:cf:52:46:1f:85:e2:42:
                    29:cc:28:36:5b:eb:f0:9e:cb:fe:bf:2d:7a:03:4b:
                    3e:9f:dc:e2:95:4f:20:d1:20:6c:6d:8d:0e:ca:a5:
                    ac:04:fa:5c:a0:fc:55:bd:a1:85:88:79:fc:68:59:
                    9a:68:31:18:a7:cd:f5:96:42:58:ed:be:70:cf:cc:
                    f6:00:5b:11:24:01:ac:74:81:33:6a:65:70:2c:a7:
                    5c:64:19:1c:eb:e1:f1:f5:1a:7a:00:bf:5e:cf:7a:
                    84:7a:ec:f3:bb:58:fc:e0:2b:4e:46:52:49:0e:ca:
                    17:2f:b9:8c:4c:5d:7c:83:f3:e9:4b:27:12:e7:dd:
                    47:b1:78:db:24:f4:0d:4e:dd:70:9f:4c:7c:2a:85:
                    50:f2:52:28:e6:ba:ea:03:31:2a:7a:bc:2c:3e:60:
                    b2:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:FB:2D:3F:64:7E:BF:C6:6A:77:70:6A:08:66:3D:D4:74:2A:F2:F2
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS207320.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:82e0::/44

    Signature Algorithm: sha256WithRSAEncryption
         b8:df:26:dc:dd:40:1f:d5:43:17:7a:7e:58:d9:22:35:64:45:
         98:c3:f7:e3:0c:be:82:b7:b8:99:52:e9:b3:e4:88:57:1c:9c:
         fd:74:cf:a0:74:1d:cc:ba:01:bf:41:b2:96:db:52:92:45:10:
         2b:ab:38:d2:8c:e3:9e:c9:a9:c0:3d:3c:08:70:9f:96:78:57:
         11:dc:ab:22:f8:ba:ee:8b:b2:77:a4:cc:43:09:1a:0a:30:14:
         df:6d:89:af:cc:84:27:61:49:92:b7:99:7d:09:84:0f:5e:6d:
         a6:1e:74:5d:51:64:a7:3d:c4:0e:9d:ef:8f:2a:8c:7a:83:fe:
         7e:f7:14:3b:03:20:c5:bb:7c:7f:0b:e8:4e:44:07:9e:a6:5b:
         a4:21:ce:64:da:2b:c7:7c:f5:ed:91:a3:99:f5:2e:79:68:3d:
         ab:5c:7a:83:8a:13:ea:e7:b5:04:d2:d8:ca:79:86:94:47:0e:
         ea:c2:f5:6c:9b:57:30:03:d0:3e:4b:a8:3c:3f:71:d1:2f:e3:
         eb:6a:a9:b2:4e:bb:ce:63:b2:c3:56:32:48:ae:e6:52:38:75:
         93:50:13:21:bd:0e:0e:60:48:c2:2f:02:e3:c8:cb:48:38:7d:
         7e:0b:13:d2:09:48:ff:5f:99:12:62:36:47:61:e1:e9:4f:d0:
         66:25:98:89
-----BEGIN CERTIFICATE-----
MIIEjzCCA3egAwIBAgIULWVHEimWZwvSHSGrS587kadVhFUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjU3ZGNiYTlmYzdiMGVmMWYzY2M4MGExYWVlMjJjMDAx
OThlNzY3YTAeFw0yMzA0MDgwMzIwMzhaFw0yNDA0MDYwMzI1MzhaMDMxMTAvBgNV
BAMTKEUwRkIyRDNGNjQ3RUJGQzY2QTc3NzA2QTA4NjYzREQ0NzQyQUYyRjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuvWBqdd8s7Qi6tiBa/TOZUjaw
sqveYtz9hpcaCXM2r/oW5VxY5i7LsPZSqQMXdgjj73dWgZCItbyhygT9aOSXWAcx
mEFx2+1DO5sVPvLpd50TS063sr7Cowlfv0gvGr9Fz1JGH4XiQinMKDZb6/Cey/6/
LXoDSz6f3OKVTyDRIGxtjQ7KpawE+lyg/FW9oYWIefxoWZpoMRinzfWWQljtvnDP
zPYAWxEkAax0gTNqZXAsp1xkGRzr4fH1GnoAv17PeoR67PO7WPzgK05GUkkOyhcv
uYxMXXyD8+lLJxLn3UexeNsk9A1O3XCfTHwqhVDyUijmuuoDMSp6vCw+YLJvAgMB
AAGjggGZMIIBlTAdBgNVHQ4EFgQU4PstP2R+v8Zqd3BqCGY91HQq8vIwHwYDVR0j
BBgwFoAUtX3Lqfx7DvHzzIChruIsABmOdnowDgYDVR0PAQH/BAQDAgeAMFkGA1Ud
HwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5jby9yZXBvL0hZU1AvNi9CNTdEQ0JB
OUZDN0IwRUYxRjNDQzgwQTFBRUUyMkMwMDE5OEU3NjdBLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvdFgzTHFmeDdEdkh6eklDaHJ1SXNBQm1PZG5vLmNlcjBEBggr
BgEFBQcBCwQ4MDYwNAYIKwYBBQUHMAuGKHJzeW5jOi8vcnBraS5jby9yZXBvL0hZ
U1AvNi9BUzIwNzMyMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoS3UeC4DANBgkqhkiG9w0BAQsFAAOC
AQEAuN8m3N1AH9VDF3p+WNkiNWRFmMP34wy+gre4mVLps+SIVxyc/XTPoHQdzLoB
v0GylttSkkUQK6s40ozjnsmpwD08CHCflnhXEdyrIvi67ouyd6TMQwkaCjAU322J
r8yEJ2FJkreZfQmED15tph50XVFkpz3EDp3vjyqMeoP+fvcUOwMgxbt8fwvoTkQH
nqZbpCHOZNorx3z17ZGjmfUueWg9q1x6g4oT6ue1BNLYynmGlEcO6sL1bJtXMAPQ
PkuoPD9x0S/j62qpsk67zmOyw1YySK7mUjh1k1ATIb0ODmBIwi8C48jLSDh9fgsT
0glI/1+ZEmI2R2Hh6U/QZiWYiQ==
-----END CERTIFICATE-----