Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS46138.roa
File:                     AS46138.roa (raw, json)
Hash identifier:          plJP3sNXyVY50CltaDU8k6VeRfAyDs+JONE+iqZkWfQ=
Subject key identifier:   10:BB:6B:07:9B:46:38:B7:CB:D9:77:0B:4B:62:EE:C2:50:04:C9:59
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       70C7E3AF656A03001A4042D105F8857AADC72A8A
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS46138.roa
Signing time:             Sat 08 Apr 2023 03:25:41 +0000
ROA not before:           Sat 08 Apr 2023 03:20:41 +0000
ROA not after:            Sat 06 Apr 2024 03:25:41 +0000
asID:                     46138
IP address blocks:        2a12:dd47:8030::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:c7:e3:af:65:6a:03:00:1a:40:42:d1:05:f8:85:7a:ad:c7:2a:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:41 2023 GMT
            Not After : Apr  6 03:25:41 2024 GMT
        Subject: CN=10BB6B079B4638B7CBD9770B4B62EEC25004C959
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d5:71:c3:ae:14:f4:8b:3b:7e:f7:bc:88:59:
                    21:51:38:d3:a4:b7:25:b6:a7:da:d6:ab:b8:b1:83:
                    0b:00:f4:f2:40:83:1a:ca:34:e2:bf:1e:ac:87:7e:
                    a9:78:23:23:08:4a:f2:12:3d:0c:d7:9e:a1:80:9d:
                    79:95:ed:f6:03:ac:94:08:38:45:c5:95:1b:2e:34:
                    80:d0:f4:ce:70:24:59:52:b7:45:fe:80:09:1e:31:
                    e2:fa:3b:10:83:7d:a7:94:72:df:0e:04:34:29:0e:
                    05:7e:05:e2:7c:77:44:d1:3b:fc:24:f2:cb:94:06:
                    74:4c:83:ca:ee:c2:08:14:55:07:ca:d7:c3:c7:27:
                    34:7d:f0:dc:52:cc:2b:02:62:26:83:02:12:34:77:
                    35:58:a1:57:1c:ff:74:45:a1:bf:14:b8:1e:8f:fe:
                    f5:93:a7:b0:5f:48:6c:5b:e1:6d:05:6e:a7:5b:5a:
                    74:94:4d:9b:0b:55:da:97:61:bf:8a:84:4f:82:c5:
                    c8:03:e3:1f:95:a6:4c:88:dc:75:33:52:87:1e:e8:
                    ed:f3:cd:f5:84:0d:11:89:1d:e0:49:a2:d7:ff:80:
                    5b:5b:80:a1:0f:87:f4:a3:ee:b7:51:c0:65:a9:1c:
                    9e:ce:72:1a:72:f9:6a:8d:48:4f:8d:7b:75:a2:ed:
                    41:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:BB:6B:07:9B:46:38:B7:CB:D9:77:0B:4B:62:EE:C2:50:04:C9:59
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS46138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8030::/44

    Signature Algorithm: sha256WithRSAEncryption
         75:41:f6:84:2d:6a:a7:fc:c4:54:aa:41:0a:1d:7a:5d:9c:ce:
         5f:4c:2d:9b:1b:d4:3e:a6:8f:94:97:ff:78:7b:d7:f8:4d:86:
         e3:3b:5b:38:13:cb:88:69:d9:64:aa:40:63:94:c9:5e:60:ea:
         30:ed:78:08:2c:94:fc:f4:46:cb:92:b0:2b:17:00:f5:a5:08:
         4f:28:a0:f7:9a:b4:10:d0:6b:3e:71:16:fb:b8:4a:46:6a:d6:
         df:a1:e0:37:2f:2a:ea:c1:43:fa:b7:3d:70:b3:6f:99:93:a5:
         28:ce:3a:fc:65:08:b2:c6:44:80:b0:28:50:cd:d0:92:b6:ec:
         df:36:d0:d3:69:59:18:55:9e:e4:d1:a9:ba:43:0a:44:9e:2c:
         3f:ba:c6:cb:51:47:84:25:e8:6b:6e:d4:b6:9d:f7:c0:66:06:
         8b:b6:10:c3:5c:19:e2:2a:c2:62:2a:ae:45:0f:f8:3c:20:74:
         cb:1d:35:95:64:fd:af:89:76:c2:62:fd:31:c9:1b:6b:8f:e8:
         52:18:9a:eb:01:e6:dd:47:15:b8:e5:8e:66:61:1e:46:34:f2:
         18:6e:b7:46:e3:af:78:3c:e5:35:c0:09:02:e6:c0:15:a5:1c:
         24:d5:ee:2b:52:15:63:64:36:49:ca:ba:c6:18:fc:06:62:3e:
         64:e4:32:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----