Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS213086.roa
File:                     AS213086.roa (raw, json)
Hash identifier:          16DIduxcuQSu//QGPt/8xNFXZxA87okO+w7JHgRoGNI=
Subject key identifier:   F8:2C:72:FD:F7:25:76:20:14:3B:61:F3:D6:FE:BC:09:7A:B5:69:F4
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       509DED4F9F932F77C100E66943BAAA936F465D11
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS213086.roa
Signing time:             Sat 08 Apr 2023 03:25:31 +0000
ROA not before:           Sat 08 Apr 2023 03:20:31 +0000
ROA not after:            Sat 06 Apr 2024 03:25:31 +0000
asID:                     213086
IP address blocks:        2a12:dd47:d800::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:9d:ed:4f:9f:93:2f:77:c1:00:e6:69:43:ba:aa:93:6f:46:5d:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:31 2023 GMT
            Not After : Apr  6 03:25:31 2024 GMT
        Subject: CN=F82C72FDF7257620143B61F3D6FEBC097AB569F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:eb:cf:2e:35:1c:0b:dc:79:f1:88:93:60:12:
                    dd:51:69:08:d2:b6:b0:a7:68:20:0b:ed:cd:2d:c4:
                    3d:10:aa:f2:d5:59:b8:54:d6:4a:0b:4b:a7:29:1c:
                    66:9f:f8:6d:6a:d1:5a:ae:47:e8:a4:e1:93:5b:66:
                    de:9b:c2:a8:0d:94:50:e1:ef:c3:78:05:7b:0c:55:
                    66:e1:76:ee:28:6e:9c:2f:2e:16:1a:23:f6:c1:43:
                    0a:39:69:8e:bc:94:19:88:8d:39:b4:98:7f:06:f8:
                    0a:70:fb:b7:a8:b8:3e:89:8c:7a:57:57:cd:70:88:
                    32:e1:25:c4:32:f0:9a:c8:cb:72:c8:36:f3:d3:2e:
                    4a:fa:1f:de:77:77:7f:cc:d8:4d:59:24:d9:eb:6e:
                    78:50:11:ec:68:b5:cf:f6:9f:fa:6f:06:ed:a5:77:
                    3d:23:82:db:79:8c:fa:9b:32:a1:a1:c9:24:13:80:
                    fd:cd:7f:5e:00:01:98:ed:b9:5f:ee:69:11:0d:89:
                    80:02:d7:f9:cb:6d:bb:21:86:76:3e:75:5f:1c:98:
                    89:74:eb:ad:e8:e6:12:e3:87:43:af:95:28:a2:7e:
                    aa:fa:e4:3a:83:aa:ef:39:b6:ba:82:bd:fe:75:5e:
                    95:c0:b5:c9:fa:43:a6:b3:50:6e:2f:11:61:57:44:
                    9d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:2C:72:FD:F7:25:76:20:14:3B:61:F3:D6:FE:BC:09:7A:B5:69:F4
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS213086.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:d800::/40

    Signature Algorithm: sha256WithRSAEncryption
         43:8d:19:8c:9f:ce:6d:ad:82:0a:80:4a:0d:7f:0e:f3:ec:c1:
         f1:b4:e3:8f:e4:b4:80:26:28:30:d3:d9:e5:18:b4:0f:98:ef:
         c9:f7:1c:0d:bc:db:cd:b4:0e:0c:02:b5:6c:7a:af:68:4c:8a:
         2e:fe:79:a3:9c:bd:e0:28:23:8f:0d:00:14:63:59:0a:e4:86:
         05:4c:98:fc:b5:52:a5:96:93:05:8f:08:82:93:1a:b3:34:f5:
         67:aa:ef:ff:cf:5f:b3:af:0d:b3:f1:2f:b8:09:8b:10:52:0e:
         51:70:81:d0:1c:ee:6a:45:a6:4b:b2:87:94:70:2e:d0:30:8f:
         22:82:fa:88:85:13:77:d7:c2:ae:ae:97:da:8e:da:ca:ab:3f:
         3d:eb:2b:2c:eb:38:b8:e8:4a:32:91:54:5a:0e:10:fb:c6:03:
         b6:76:10:c6:86:4a:26:34:06:36:e1:79:83:d1:fc:04:76:4f:
         88:47:a9:75:56:e3:53:48:37:da:28:bd:7e:7b:52:00:0f:f6:
         d6:1c:48:e3:33:b7:a2:36:c9:db:79:24:1a:42:b0:0d:1f:67:
         0d:f6:aa:19:79:2e:06:52:f9:03:65:32:d1:d9:8d:8d:e1:93:
         cf:5b:a1:93:7b:87:6e:5a:f7:84:0f:db:8e:99:9e:43:5c:82:
         fe:b7:f8:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----