Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS207598.roa
File:                     AS207598.roa (raw, json)
Hash identifier:          MI7Bd36ttXa8swol8D9iSB/e17PlCD/2rcpv0G2JoWs=
Subject key identifier:   C1:4D:8B:AA:4B:96:F3:B8:0C:98:B3:06:E3:E6:FD:CD:FA:94:A1:33
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       290F3299E0B628E6A23871654EE53338BE2ED6B7
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS207598.roa
Signing time:             Sat 08 Apr 2023 03:25:31 +0000
ROA not before:           Sat 08 Apr 2023 03:20:31 +0000
ROA not after:            Sat 06 Apr 2024 03:25:31 +0000
asID:                     207598
IP address blocks:        2a12:dd47:8042::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:0f:32:99:e0:b6:28:e6:a2:38:71:65:4e:e5:33:38:be:2e:d6:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:31 2023 GMT
            Not After : Apr  6 03:25:31 2024 GMT
        Subject: CN=C14D8BAA4B96F3B80C98B306E3E6FDCDFA94A133
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:58:bf:7a:dd:48:3b:a0:a5:e2:2e:ef:35:46:
                    ad:11:b7:55:4d:64:30:78:83:c6:c8:33:2f:1f:5b:
                    11:de:e3:ce:0a:0c:aa:bc:32:7d:1a:06:83:3d:ae:
                    3d:f1:67:ca:0b:b9:d7:83:d0:d9:f0:2c:1a:a3:ff:
                    96:f2:16:ea:87:38:26:f9:9c:f3:0c:1c:11:a2:45:
                    c9:2f:5d:a9:67:d2:8a:44:de:ed:61:f3:e7:cc:6c:
                    77:ea:35:f4:30:37:a7:c7:1f:5a:76:c7:4a:ef:ec:
                    18:69:52:56:5a:0b:5f:f8:77:bc:0a:7c:08:c0:a6:
                    05:70:4f:04:c7:e5:a9:da:13:c3:18:67:e1:26:e3:
                    45:6f:f8:b0:eb:ec:29:58:fa:57:46:a9:34:83:fe:
                    9e:c5:23:8f:25:fd:c2:51:49:f5:21:2e:34:66:bf:
                    72:ca:99:15:65:32:9c:a7:1f:bc:95:c9:32:f6:dd:
                    e8:84:fe:9b:8c:66:17:6b:5c:b8:c6:31:f2:4d:bc:
                    34:99:55:d9:ba:cd:51:84:3c:3b:f6:33:ae:c1:72:
                    94:9f:6e:b6:66:14:f0:61:d3:34:f4:e8:97:01:0b:
                    4f:e1:5d:79:04:54:e7:dc:4c:5c:83:ab:fb:54:f2:
                    f0:fd:28:ab:2c:d3:6b:ba:a5:b9:5b:c6:53:99:27:
                    4c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:4D:8B:AA:4B:96:F3:B8:0C:98:B3:06:E3:E6:FD:CD:FA:94:A1:33
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS207598.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8042::/48

    Signature Algorithm: sha256WithRSAEncryption
         b4:ca:0a:82:9a:84:b2:f3:ee:b9:b2:1b:48:38:d1:02:22:14:
         12:46:1f:19:9d:2f:a2:85:52:b9:66:fd:f6:d8:66:7f:cb:82:
         50:39:2f:12:42:ed:10:28:49:39:82:96:20:dd:be:47:47:42:
         87:09:59:ec:78:54:67:c0:41:2b:2b:8b:f8:e8:f0:7c:3f:5f:
         ca:b9:8f:30:c1:f7:ac:9d:df:9b:86:c0:c7:14:53:78:d3:9e:
         65:09:53:95:27:e2:f0:5d:31:ef:49:9f:f1:1b:30:ae:be:b1:
         b0:72:50:c0:46:9c:b0:23:44:07:56:bc:b9:f3:63:c1:a9:c9:
         59:8e:54:89:00:68:c0:28:3b:05:db:73:02:3f:7c:ab:fa:9d:
         7f:b0:55:5e:60:aa:6e:55:c7:13:8e:58:67:77:50:ef:42:53:
         27:80:59:b1:54:33:5d:0b:a1:ec:21:29:45:1e:91:fb:f4:d6:
         0e:f1:9d:f8:b4:d4:95:06:da:16:4c:43:1a:a7:03:ed:74:f2:
         63:ba:77:79:70:38:9e:4f:81:e1:2e:64:27:82:da:40:7f:b8:
         b2:a9:be:ee:78:34:7c:68:c9:08:b8:5a:45:4b:74:8e:85:f3:
         16:d6:2f:66:ba:e3:eb:c4:4e:b3:c3:e1:9f:5d:a2:a8:3c:86:
         93:ac:76:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----