Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS212598.roa
File:                     AS212598.roa (raw, json)
Hash identifier:          tRspvj8B7Jryn41TEJnWujoyrsIrszl3hQHt29xoOm0=
Subject key identifier:   1D:32:01:21:CD:3D:CA:78:23:0D:11:6C:E0:F9:7A:56:09:07:FC:6C
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       61BE4EE01DE637B5853CD2890EDFCABB27B419ED
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS212598.roa
Signing time:             Sat 08 Apr 2023 03:25:23 +0000
ROA not before:           Sat 08 Apr 2023 03:20:23 +0000
ROA not after:            Sat 06 Apr 2024 03:25:23 +0000
asID:                     212598
IP address blocks:        2a12:dd47:8320::/44 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:be:4e:e0:1d:e6:37:b5:85:3c:d2:89:0e:df:ca:bb:27:b4:19:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:23 2023 GMT
            Not After : Apr  6 03:25:23 2024 GMT
        Subject: CN=1D320121CD3DCA78230D116CE0F97A560907FC6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:17:85:df:9c:4e:de:66:c2:16:0b:4e:1a:7b:
                    47:10:25:bd:52:b2:ed:9e:dd:ea:df:47:93:97:8f:
                    90:27:bf:a7:dd:b5:c4:f6:13:67:2f:4d:45:0a:89:
                    f2:75:96:f0:da:ff:da:ec:93:48:ec:6f:3f:01:6f:
                    e5:4a:e3:20:24:67:ec:61:a8:b8:cd:ca:b3:0a:76:
                    7e:32:3d:6e:4b:86:81:84:cc:c0:35:01:6b:ab:c2:
                    a1:88:ea:7e:0a:14:d3:7c:23:f3:eb:a7:31:e5:85:
                    cc:f9:3b:62:48:38:34:74:52:e9:83:1f:8c:91:1d:
                    50:2a:e1:e6:28:5f:c2:1d:c7:16:86:7f:76:6a:b5:
                    09:4a:87:ca:70:97:3e:35:72:d1:61:6e:4a:5a:9d:
                    81:b8:e2:ce:c6:94:2b:5e:3f:8a:1e:10:8b:7f:9b:
                    2a:a9:32:c6:42:54:6a:fe:31:ad:4b:e4:f0:3a:bb:
                    49:0d:e2:76:75:b3:85:32:3e:4e:8c:97:95:9a:ec:
                    0b:1d:60:88:53:e0:3c:12:88:dd:66:d3:a4:97:71:
                    b3:7b:7b:5d:57:83:ef:88:c4:bc:a8:6e:58:23:80:
                    a7:fa:3a:36:e2:72:94:d6:c9:b7:02:a4:85:e4:6f:
                    c3:1c:fd:b6:22:ee:77:d7:bd:10:4a:c5:fb:e5:23:
                    db:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:32:01:21:CD:3D:CA:78:23:0D:11:6C:E0:F9:7A:56:09:07:FC:6C
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS212598.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8320::/44

    Signature Algorithm: sha256WithRSAEncryption
         81:14:16:17:f6:3c:32:a1:a0:23:dd:ee:ef:86:e1:c1:87:93:
         7e:a8:7b:c4:59:4c:97:4c:9a:46:1e:9b:57:2d:04:8d:4f:35:
         5e:c8:04:29:fb:5a:79:b9:be:72:f4:df:24:d5:04:7f:13:16:
         8f:1d:ce:71:a7:70:c1:7b:f0:e7:1a:40:24:82:b9:68:3e:2b:
         e3:f9:36:36:21:da:08:14:86:c3:17:0b:4d:74:cc:55:01:df:
         f2:88:9a:74:11:b6:33:44:07:31:e9:a8:ae:36:95:cb:45:79:
         19:cf:2a:6a:92:ef:e3:e5:df:99:32:d9:ff:1c:41:5a:73:c0:
         14:e8:26:d2:f2:a8:a6:b0:55:8c:d6:99:34:01:64:12:43:c2:
         79:c3:0f:d6:7f:1b:6c:05:f9:66:42:05:d3:93:81:0a:2d:1b:
         14:25:db:c5:00:1c:f5:15:3e:d0:80:fe:ba:74:32:8f:d3:89:
         e0:7b:b5:3f:44:5f:08:79:14:f5:ae:d4:99:2a:67:1a:46:b3:
         e2:c9:b9:78:1b:a1:a1:2f:f6:12:9f:0f:00:ec:a9:2d:15:fd:
         bb:22:80:d5:dd:12:21:31:f7:e9:04:2f:a7:de:db:ac:89:3d:
         d2:82:4d:40:5d:32:8b:d7:03:b8:21:88:da:db:60:e4:70:69:
         8e:cd:21:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----