Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS213036.roa
File:                     AS213036.roa (raw, json)
Hash identifier:          1085OtbYm5C7gYq343BoTU855CFzhIygo5NuGMSNoz8=
Subject key identifier:   F3:FB:10:29:9F:D2:E1:6F:D2:53:BD:85:8E:E4:B2:50:68:22:85:13
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       30BA11BA27E6FC4D9E5CDD580406C66961A44288
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS213036.roa
Signing time:             Sat 08 Apr 2023 03:25:31 +0000
ROA not before:           Sat 08 Apr 2023 03:20:31 +0000
ROA not after:            Sat 06 Apr 2024 03:25:31 +0000
asID:                     213036
IP address blocks:        2a12:dd47:8330::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:ba:11:ba:27:e6:fc:4d:9e:5c:dd:58:04:06:c6:69:61:a4:42:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:31 2023 GMT
            Not After : Apr  6 03:25:31 2024 GMT
        Subject: CN=F3FB10299FD2E16FD253BD858EE4B25068228513
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:e1:1d:7c:cf:09:e8:8f:dc:3a:46:b2:eb:e0:
                    dc:c4:b2:34:64:80:4e:79:32:2b:f7:78:90:e3:66:
                    4a:26:b7:ed:ab:b2:a8:f9:d5:9b:3b:f0:0b:e1:e5:
                    c1:88:41:e3:b0:a8:d4:9a:2e:93:cd:07:fb:ac:ee:
                    1c:bf:d5:a3:e1:ea:9f:0f:13:b0:ee:14:7b:1c:25:
                    46:0b:aa:54:66:a9:4f:09:73:80:0b:c3:0c:38:14:
                    18:c3:3c:ce:e7:8e:ec:56:91:2a:19:c2:86:c6:a8:
                    e4:b3:27:47:1a:04:fb:9d:6e:fc:71:2f:68:7d:ba:
                    b0:1f:fc:e2:0c:bf:f6:0c:c5:e9:8a:9a:76:a9:6a:
                    92:f6:cf:2b:68:b4:00:ed:3e:a5:df:f0:27:be:3f:
                    74:b2:e3:93:c4:5f:a9:a9:08:9f:09:15:0f:de:a5:
                    ec:75:20:f2:fe:60:f2:5a:d6:f7:4e:78:e0:ff:17:
                    b2:a1:4e:22:bc:c4:07:ab:c6:21:88:31:96:55:a9:
                    20:18:c3:5c:53:b0:90:05:89:43:05:2d:76:62:2a:
                    d4:0d:2f:c9:94:cc:7a:72:17:6b:32:e3:06:d6:bf:
                    e8:2a:28:b3:e2:b5:fc:30:94:8b:d7:35:c0:e8:eb:
                    82:48:81:22:d9:a8:44:97:d0:1d:ef:d0:38:82:65:
                    2b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:FB:10:29:9F:D2:E1:6F:D2:53:BD:85:8E:E4:B2:50:68:22:85:13
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS213036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8330::/48

    Signature Algorithm: sha256WithRSAEncryption
         99:4a:f0:c8:ed:39:37:6d:46:ab:e5:99:45:d2:45:c5:bc:ad:
         4f:71:24:fb:67:01:cf:3f:56:08:6c:5c:d3:fc:0a:58:fa:bf:
         21:29:80:9c:62:12:9a:07:d1:4e:06:8b:6c:00:45:bc:bb:f2:
         33:87:90:8b:95:e0:8d:13:d0:25:03:4d:05:45:9a:0b:db:99:
         e7:37:1a:c8:b9:30:b1:c8:1e:b1:1a:f5:8a:5f:74:41:7b:85:
         a4:01:86:6c:e5:e9:73:94:22:e4:bb:66:72:34:9f:9e:01:95:
         96:95:42:3d:3e:f6:b6:75:2d:05:0b:80:b4:14:18:71:ed:59:
         c4:96:f8:e7:2c:f2:f2:be:2a:aa:fd:a3:d6:95:38:dd:31:27:
         1f:ed:a5:54:d0:ee:84:2a:fe:8e:5b:90:e4:cc:f3:85:d6:5b:
         d4:78:78:83:a2:4c:47:db:d1:96:72:99:5f:e4:10:2d:4a:c4:
         67:49:e8:f6:2f:af:02:ea:4f:b3:10:18:bd:a8:04:7c:09:67:
         97:cd:0d:c5:b1:88:14:da:d9:77:f0:70:bc:94:d9:aa:15:e3:
         b9:a9:33:77:10:58:ed:bb:89:26:20:55:e2:3d:9c:b8:a4:20:
         6d:0c:71:9a:d2:12:75:a0:28:61:e7:92:c6:be:66:70:7e:88:
         2d:a8:2c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----