Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS41732.roa
File:                     AS41732.roa (raw, json)
Hash identifier:          tvwLy9qXhjbhy2oo+WsimnW22FePE6QmKMqCeGlDcno=
Subject key identifier:   A3:F8:1E:C2:42:53:66:9F:FC:57:81:CB:9C:2C:6A:86:36:0E:FB:5A
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       0E2ADEEE3BCA5A94692D6FE8812D9258AE1ECD41
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS41732.roa
Signing time:             Sat 08 Apr 2023 03:25:43 +0000
ROA not before:           Sat 08 Apr 2023 03:20:43 +0000
ROA not after:            Sat 06 Apr 2024 03:25:43 +0000
asID:                     41732
IP address blocks:        2a12:dd47:5000::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:2a:de:ee:3b:ca:5a:94:69:2d:6f:e8:81:2d:92:58:ae:1e:cd:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:43 2023 GMT
            Not After : Apr  6 03:25:43 2024 GMT
        Subject: CN=A3F81EC24253669FFC5781CB9C2C6A86360EFB5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d6:9d:41:69:5e:37:d5:3e:e4:6a:d6:47:87:
                    16:87:93:4c:8f:1d:07:1f:1f:39:a5:19:f7:47:ac:
                    68:69:39:cf:a1:04:85:91:51:af:22:ec:2c:24:fc:
                    64:ff:f9:3e:44:be:96:dd:9c:35:ea:19:2f:dc:85:
                    6f:9c:a4:52:5a:a4:5b:5d:c5:e2:9c:3d:09:82:8f:
                    a7:39:15:06:a4:2b:01:f0:ad:10:48:3d:9e:d0:d3:
                    5f:f9:be:58:73:bb:a2:4b:ea:1a:77:37:e0:f9:61:
                    fa:26:35:55:5e:97:f3:b6:45:c5:51:11:3a:d1:fc:
                    ef:5d:ae:e3:f2:6a:d1:5d:43:64:00:19:0f:1b:2d:
                    33:9d:5a:19:cd:80:86:63:9e:54:99:00:78:7e:95:
                    9e:c0:81:4d:64:69:a4:fc:44:5d:ce:c1:ae:28:8b:
                    82:89:67:a4:10:7a:a2:19:05:7a:9c:91:37:95:61:
                    6a:5d:65:b3:28:37:2d:7e:e3:16:ac:0a:0b:09:ac:
                    55:53:84:d5:34:5b:12:53:44:ed:69:c6:fa:99:72:
                    9d:40:ae:bf:10:45:15:83:df:19:4f:3c:f2:b0:27:
                    fc:4d:fe:15:91:1c:d6:c3:a3:41:fa:4d:2c:81:bf:
                    36:b3:8a:d5:b0:58:a7:77:fe:69:71:3c:72:82:26:
                    1d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:F8:1E:C2:42:53:66:9F:FC:57:81:CB:9C:2C:6A:86:36:0E:FB:5A
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS41732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:5000::/40

    Signature Algorithm: sha256WithRSAEncryption
         67:f4:14:0a:3b:5f:c1:5b:0d:9b:50:e4:70:bb:b7:95:48:fa:
         05:81:9a:6e:07:21:fa:12:dc:e2:f2:1f:f4:60:43:54:39:3f:
         74:b2:90:de:24:53:ba:06:ff:32:d0:0e:6d:b4:36:ea:68:c9:
         e1:99:16:f6:9e:d2:2a:d4:fc:f6:0b:d6:1e:e6:c4:2b:f3:c0:
         ae:03:eb:fe:6c:f4:1a:c5:f6:f0:74:db:4a:cd:22:c4:ac:6c:
         bd:78:1f:23:cd:91:19:7e:39:10:a1:a9:db:59:77:dd:62:97:
         04:d1:87:bc:4b:99:dc:9d:2d:9a:7d:3f:2a:48:aa:a1:e4:55:
         b6:2e:2e:f1:0c:f7:4e:5d:26:a4:20:cd:6f:d2:da:2d:3b:39:
         18:aa:bf:9d:93:17:a5:e5:be:85:78:02:b0:bc:a2:79:5a:cf:
         07:cc:da:7a:fe:03:57:e0:32:17:ed:e1:fa:fd:a6:42:5c:0f:
         ec:0b:68:d2:81:69:ee:48:7e:05:6b:5b:b3:ee:ba:d8:7f:bd:
         8a:64:c1:df:94:7a:6b:e9:fe:54:9a:22:bb:c8:70:d8:37:7c:
         37:72:00:22:92:15:0a:64:f9:e7:ec:c5:aa:6e:a6:78:b9:f2:
         84:7e:c5:6a:3b:61:b1:75:b2:64:c2:b5:d5:a4:97:52:9b:48:
         cb:f4:09:73
-----BEGIN CERTIFICATE-----
MIIEjTCCA3WgAwIBAgIUDire7jvKWpRpLW/ogS2SWK4ezUEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjU3ZGNiYTlmYzdiMGVmMWYzY2M4MGExYWVlMjJjMDAx
OThlNzY3YTAeFw0yMzA0MDgwMzIwNDNaFw0yNDA0MDYwMzI1NDNaMDMxMTAvBgNV
BAMTKEEzRjgxRUMyNDI1MzY2OUZGQzU3ODFDQjlDMkM2QTg2MzYwRUZCNUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP1p1BaV431T7katZHhxaHk0yP
HQcfHzmlGfdHrGhpOc+hBIWRUa8i7Cwk/GT/+T5EvpbdnDXqGS/chW+cpFJapFtd
xeKcPQmCj6c5FQakKwHwrRBIPZ7Q01/5vlhzu6JL6hp3N+D5YfomNVVel/O2RcVR
ETrR/O9druPyatFdQ2QAGQ8bLTOdWhnNgIZjnlSZAHh+lZ7AgU1kaaT8RF3Owa4o
i4KJZ6QQeqIZBXqckTeVYWpdZbMoNy1+4xasCgsJrFVThNU0WxJTRO1pxvqZcp1A
rr8QRRWD3xlPPPKwJ/xN/hWRHNbDo0H6TSyBvzazitWwWKd3/mlxPHKCJh2VAgMB
AAGjggGXMIIBkzAdBgNVHQ4EFgQUo/gewkJTZp/8V4HLnCxqhjYO+1owHwYDVR0j
BBgwFoAUtX3Lqfx7DvHzzIChruIsABmOdnowDgYDVR0PAQH/BAQDAgeAMFkGA1Ud
HwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5jby9yZXBvL0hZU1AvNi9CNTdEQ0JB
OUZDN0IwRUYxRjNDQzgwQTFBRUUyMkMwMDE5OEU3NjdBLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvdFgzTHFmeDdEdkh6eklDaHJ1SXNBQm1PZG5vLmNlcjBDBggr
BgEFBQcBCwQ3MDUwMwYIKwYBBQUHMAuGJ3JzeW5jOi8vcnBraS5jby9yZXBvL0hZ
U1AvNi9BUzQxNzMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsG
AQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhLdR1AwDQYJKoZIhvcNAQELBQADggEB
AGf0FAo7X8FbDZtQ5HC7t5VI+gWBmm4HIfoS3OLyH/RgQ1Q5P3SykN4kU7oG/zLQ
Dm20NupoyeGZFvae0irU/PYL1h7mxCvzwK4D6/5s9BrF9vB020rNIsSsbL14HyPN
kRl+ORChqdtZd91ilwTRh7xLmdydLZp9PypIqqHkVbYuLvEM905dJqQgzW/S2i07
ORiqv52TF6XlvoV4ArC8onlazwfM2nr+A1fgMhft4fr9pkJcD+wLaNKBae5IfgVr
W7Puuth/vYpkwd+Uemvp/lSaIrvIcNg3fDdyACKSFQpk+efsxapupni58oR+xWo7
YbF1smTCtdWkl1KbSMv0CXM=
-----END CERTIFICATE-----