Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS211940.roa
File:                     AS211940.roa (raw, json)
Hash identifier:          rbNGPqSuk/QpTEMiqipBmw0lkfuHxABb4yYnj/swPno=
Subject key identifier:   4A:8D:72:7D:FF:6E:17:4C:E2:E7:7E:48:C1:BE:B8:58:17:7C:F1:D8
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       3DE045D44B91AF0D981BB206E32A60F0779FBBF4
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS211940.roa
Signing time:             Sat 08 Apr 2023 03:25:22 +0000
ROA not before:           Sat 08 Apr 2023 03:20:22 +0000
ROA not after:            Sat 06 Apr 2024 03:25:22 +0000
asID:                     211940
IP address blocks:        2a12:dd47:5001::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:e0:45:d4:4b:91:af:0d:98:1b:b2:06:e3:2a:60:f0:77:9f:bb:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:22 2023 GMT
            Not After : Apr  6 03:25:22 2024 GMT
        Subject: CN=4A8D727DFF6E174CE2E77E48C1BEB858177CF1D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0c:5c:d2:3d:7e:6d:0c:97:fd:4b:48:af:5e:
                    b6:91:34:a8:2a:87:82:fc:1b:82:d9:82:32:13:0e:
                    b8:39:20:cf:e4:2b:e8:60:96:6b:15:8e:68:ef:31:
                    ee:2a:70:76:e8:a3:b0:f4:2c:f6:ae:66:fe:4c:43:
                    a7:d8:1f:ae:c0:22:71:59:6d:c0:49:6d:82:a9:32:
                    d1:9c:82:18:7b:66:4a:bc:6d:d7:e9:30:83:fd:6b:
                    3c:96:f8:bb:d4:aa:f7:b0:8d:67:42:6e:30:5d:7c:
                    a1:9e:27:3a:5d:d8:70:88:82:a0:33:07:e5:34:e1:
                    75:07:e6:a3:68:8b:3b:bc:55:5d:9c:25:02:3b:b2:
                    13:2f:29:93:a1:43:42:66:8e:27:8c:1b:8d:c5:76:
                    b7:cf:33:67:30:5b:76:88:d1:93:d2:23:d3:5b:1c:
                    a9:de:8d:b0:26:b2:01:08:88:8b:cc:cf:b2:f6:3c:
                    34:85:35:ce:cc:e4:b9:52:5c:88:cf:95:a0:e0:0a:
                    66:4d:b7:7c:70:79:c9:76:fd:51:71:9a:c7:93:cf:
                    f1:50:9d:d7:e0:dd:a3:b0:03:24:70:a2:43:df:3b:
                    7e:e7:fd:dd:79:4d:49:15:06:fd:05:40:8f:20:96:
                    44:62:bf:43:99:76:19:01:0f:96:b8:24:6a:3d:2e:
                    3c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:8D:72:7D:FF:6E:17:4C:E2:E7:7E:48:C1:BE:B8:58:17:7C:F1:D8
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS211940.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:5001::/48

    Signature Algorithm: sha256WithRSAEncryption
         2a:51:52:34:2a:1a:7b:b4:d2:e0:fe:71:aa:7e:b8:cf:12:b8:
         77:ff:7f:90:32:18:7e:ee:8e:7c:58:06:3c:77:0f:b7:83:86:
         7f:43:4b:28:04:5b:df:f9:46:ad:89:4c:f0:ad:9c:07:b7:fc:
         7a:ce:db:5a:67:8f:aa:b1:6e:82:b3:02:c0:dd:3a:99:54:dd:
         0e:db:ea:8a:97:be:eb:b7:86:6d:70:bb:18:06:14:9f:36:bb:
         63:a0:2e:9f:ee:31:b5:5b:9d:f5:7b:db:77:7e:32:e1:cd:7f:
         3a:04:ff:ab:13:b1:57:ce:26:39:fd:06:4a:79:a3:63:92:e9:
         9e:91:35:17:19:17:47:f2:9c:3a:93:5c:9f:bd:2f:89:21:d6:
         2f:21:be:53:97:12:3c:0a:7b:01:d2:2d:af:19:fc:8a:aa:09:
         7b:da:64:bb:67:e8:b6:75:58:81:3b:7c:e8:d5:8c:c5:5b:a9:
         d4:79:32:93:50:18:64:f7:ea:6a:ee:c0:a5:1e:2f:70:49:57:
         14:b8:63:87:2f:f1:be:65:fd:19:ac:e3:2f:6a:da:8a:0a:d6:
         04:4a:1c:d7:48:be:d9:0d:7f:88:f7:2c:c0:a1:ce:6e:c2:6b:
         9b:7f:38:e1:55:22:cf:d8:b5:80:f0:be:6a:41:b3:df:de:3b:
         54:a4:f0:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----