Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS211233.roa
File:                     AS211233.roa (raw, json)
Hash identifier:          79xdEyy1Dzdg7H/+dENo6hEgk6NwW+h6ortTLkC1nZg=
Subject key identifier:   F4:41:BC:EA:46:3C:C5:4A:85:34:70:7F:0D:53:7B:5F:7F:02:DB:E5
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       6E4F698E058E447B00BEF22556BAA67EA5149C8B
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS211233.roa
Signing time:             Sat 08 Apr 2023 03:25:43 +0000
ROA not before:           Sat 08 Apr 2023 03:20:43 +0000
ROA not after:            Sat 06 Apr 2024 03:25:43 +0000
asID:                     211233
IP address blocks:        2a12:dd47:8050::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:4f:69:8e:05:8e:44:7b:00:be:f2:25:56:ba:a6:7e:a5:14:9c:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:43 2023 GMT
            Not After : Apr  6 03:25:43 2024 GMT
        Subject: CN=F441BCEA463CC54A8534707F0D537B5F7F02DBE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:8a:ee:11:6d:90:ba:9a:18:b8:77:32:de:ee:
                    5d:07:2e:8d:0d:48:7f:aa:53:56:ff:91:75:85:a0:
                    66:ed:66:61:96:63:12:ae:9f:0f:61:00:fb:7f:a6:
                    4e:d7:7b:96:fc:a1:5b:e8:7e:32:f4:7f:8b:fb:ee:
                    bf:d3:86:e0:70:4c:1e:ff:8d:71:62:07:dc:2e:01:
                    44:6c:4f:d3:a3:71:f0:38:29:1a:7f:65:17:25:6b:
                    c8:a3:98:25:75:46:96:a0:17:5c:56:aa:7c:d7:f2:
                    06:40:e7:90:ef:78:67:2a:85:60:6e:de:79:d8:77:
                    7a:f2:76:48:de:e6:13:15:fd:4e:26:5a:da:e4:51:
                    01:81:be:8d:dc:11:c4:25:91:ba:69:8d:a8:05:f8:
                    2d:94:b6:b3:43:e2:f6:92:9d:c4:6f:e1:4a:63:1a:
                    9d:3c:36:9d:ee:86:57:3d:8b:c7:16:d4:87:3d:0d:
                    c5:a7:1d:25:ea:b0:27:f8:b5:88:c1:b6:af:07:f3:
                    5a:a2:ff:d2:e7:d6:85:a3:f7:25:43:36:6a:5b:cc:
                    e7:b7:14:48:5b:7f:f2:7c:6a:af:ac:1e:5d:40:c7:
                    1d:e0:71:41:46:e0:59:c7:9b:55:0b:06:c3:df:ca:
                    53:98:e9:1e:db:bb:77:29:fe:90:64:cb:e4:56:33:
                    65:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:41:BC:EA:46:3C:C5:4A:85:34:70:7F:0D:53:7B:5F:7F:02:DB:E5
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS211233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8050::/44

    Signature Algorithm: sha256WithRSAEncryption
         62:28:8f:b3:0f:48:79:1a:45:bc:f7:76:8f:b4:bb:d3:cf:56:
         55:8b:4a:4e:3d:ba:5c:57:01:2a:92:6f:62:2d:60:33:4d:1b:
         b9:a0:3a:3b:58:88:61:3f:fd:42:93:38:48:f9:e0:77:b2:61:
         6f:e8:e7:1e:92:90:fa:45:9a:53:af:86:21:99:51:0f:82:e3:
         5e:c1:91:ad:55:32:89:b8:34:7a:13:2f:b9:d8:0e:ce:61:57:
         89:c7:f0:8d:71:03:2b:ca:96:03:a5:f8:52:44:ec:c4:31:d5:
         e5:85:59:82:1f:e5:0a:a3:4f:bc:20:f2:81:f3:60:ac:34:4a:
         ec:fe:05:db:3b:cc:ba:5f:ee:c3:32:b3:18:3e:7e:72:42:ef:
         49:0e:e6:1d:d8:25:b5:e4:a7:be:e2:34:c2:eb:7d:f9:5c:31:
         f1:b8:d7:51:d5:06:f5:09:fe:a9:73:e6:7f:f7:48:1f:c7:b0:
         77:85:c9:fb:bc:39:c9:1d:ea:29:af:fb:77:3a:f0:70:2c:58:
         6e:0c:39:50:e0:a6:7a:68:29:61:c1:33:4e:86:73:f4:ce:6e:
         46:39:9a:ac:e9:d6:4f:bd:20:64:04:4b:53:a8:37:49:dd:36:
         ea:7c:b8:1d:b0:dc:34:d9:d1:fc:1d:e9:95:bf:a2:eb:2e:2f:
         94:12:f2:62
-----BEGIN CERTIFICATE-----
MIIEjzCCA3egAwIBAgIUbk9pjgWORHsAvvIlVrqmfqUUnIswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjU3ZGNiYTlmYzdiMGVmMWYzY2M4MGExYWVlMjJjMDAx
OThlNzY3YTAeFw0yMzA0MDgwMzIwNDNaFw0yNDA0MDYwMzI1NDNaMDMxMTAvBgNV
BAMTKEY0NDFCQ0VBNDYzQ0M1NEE4NTM0NzA3RjBENTM3QjVGN0YwMkRCRTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIiu4RbZC6mhi4dzLe7l0HLo0N
SH+qU1b/kXWFoGbtZmGWYxKunw9hAPt/pk7Xe5b8oVvofjL0f4v77r/ThuBwTB7/
jXFiB9wuAURsT9OjcfA4KRp/ZRcla8ijmCV1RpagF1xWqnzX8gZA55DveGcqhWBu
3nnYd3rydkje5hMV/U4mWtrkUQGBvo3cEcQlkbppjagF+C2UtrND4vaSncRv4Upj
Gp08Np3uhlc9i8cW1Ic9DcWnHSXqsCf4tYjBtq8H81qi/9Ln1oWj9yVDNmpbzOe3
FEhbf/J8aq+sHl1Axx3gcUFG4FnHm1ULBsPfylOY6R7bu3cp/pBky+RWM2WfAgMB
AAGjggGZMIIBlTAdBgNVHQ4EFgQU9EG86kY8xUqFNHB/DVN7X38C2+UwHwYDVR0j
BBgwFoAUtX3Lqfx7DvHzzIChruIsABmOdnowDgYDVR0PAQH/BAQDAgeAMFkGA1Ud
HwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5jby9yZXBvL0hZU1AvNi9CNTdEQ0JB
OUZDN0IwRUYxRjNDQzgwQTFBRUUyMkMwMDE5OEU3NjdBLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvdFgzTHFmeDdEdkh6eklDaHJ1SXNBQm1PZG5vLmNlcjBEBggr
BgEFBQcBCwQ4MDYwNAYIKwYBBQUHMAuGKHJzeW5jOi8vcnBraS5jby9yZXBvL0hZ
U1AvNi9BUzIxMTIzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoS3UeAUDANBgkqhkiG9w0BAQsFAAOC
AQEAYiiPsw9IeRpFvPd2j7S7089WVYtKTj26XFcBKpJvYi1gM00buaA6O1iIYT/9
QpM4SPngd7Jhb+jnHpKQ+kWaU6+GIZlRD4LjXsGRrVUyibg0ehMvudgOzmFXicfw
jXEDK8qWA6X4UkTsxDHV5YVZgh/lCqNPvCDygfNgrDRK7P4F2zvMul/uwzKzGD5+
ckLvSQ7mHdglteSnvuI0wut9+Vwx8bjXUdUG9Qn+qXPmf/dIH8ewd4XJ+7w5yR3q
Ka/7dzrwcCxYbgw5UOCmemgpYcEzToZz9M5uRjmarOnWT70gZARLU6g3Sd026ny4
HbDcNNnR/B3plb+i6y4vlBLyYg==
-----END CERTIFICATE-----