Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS47924.roa
File:                     AS47924.roa (raw, json)
Hash identifier:          VXAz2JZj9CooXHmaPP4GKkQBgA4tLy6dxUkDARYSSKc=
Subject key identifier:   E3:6B:CB:66:91:B4:B1:EC:D8:2C:00:71:C7:15:52:7F:07:B9:FA:28
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       433E29461B790FEA3BC94DC9DEB7363B2623E6F8
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS47924.roa
Signing time:             Sat 08 Apr 2023 03:25:38 +0000
ROA not before:           Sat 08 Apr 2023 03:20:38 +0000
ROA not after:            Sat 06 Apr 2024 03:25:38 +0000
asID:                     47924
IP address blocks:        2a12:dd47:8110::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:3e:29:46:1b:79:0f:ea:3b:c9:4d:c9:de:b7:36:3b:26:23:e6:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:38 2023 GMT
            Not After : Apr  6 03:25:38 2024 GMT
        Subject: CN=E36BCB6691B4B1ECD82C0071C715527F07B9FA28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a1:51:5b:11:20:8f:f5:0a:f4:7d:ad:9e:4d:
                    d6:9e:19:74:2f:1f:75:ab:c2:d2:c3:24:62:8e:c0:
                    bf:8e:36:2e:3d:d4:e4:f6:c5:b2:ae:5f:a5:12:20:
                    5c:69:9d:26:68:3b:f3:c2:46:7f:80:5e:89:c6:94:
                    6b:cb:26:b0:bc:12:2a:fa:83:44:29:48:97:ee:66:
                    a1:f9:5d:5b:a6:dc:96:2c:a7:4a:f0:a8:65:1e:50:
                    ab:56:28:8c:c5:ce:55:6c:e3:2a:37:00:a2:d5:91:
                    e7:81:e2:77:22:10:d8:02:d1:03:13:14:81:60:4e:
                    2a:a2:c0:ff:6f:58:1c:69:d2:69:26:31:a0:a4:6b:
                    c7:67:2e:7d:eb:d8:01:43:03:03:d1:43:0b:e0:bd:
                    17:af:a9:67:ae:66:3f:a0:5b:6c:2f:a1:36:3f:9b:
                    a8:bd:96:f0:e7:f6:af:a1:0c:fd:13:bc:d0:4b:10:
                    ea:10:6a:83:86:8c:4b:bf:5b:9e:a2:36:0d:bf:88:
                    fd:f3:f7:74:15:2a:58:d0:10:a7:cc:55:0f:44:b6:
                    6c:2f:6e:fa:0a:f7:a1:81:1c:55:f4:84:30:6a:07:
                    b2:27:be:9d:08:35:09:66:dc:ed:dc:5c:6f:79:9f:
                    e8:06:e6:fc:01:e2:a5:d1:73:8a:1d:1f:83:f8:ce:
                    cf:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:6B:CB:66:91:B4:B1:EC:D8:2C:00:71:C7:15:52:7F:07:B9:FA:28
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS47924.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8110::/44

    Signature Algorithm: sha256WithRSAEncryption
         bb:d6:c9:2e:42:78:bc:a9:71:b6:24:1e:8f:0f:89:89:65:5e:
         6a:ce:ce:1d:b9:8c:07:e1:8a:75:28:cc:2e:b6:53:74:6a:4f:
         1d:58:76:89:b9:48:90:92:68:96:64:4d:86:c3:45:df:56:67:
         a8:8b:28:08:02:75:7d:9a:3e:15:92:a1:45:96:e1:96:17:70:
         d0:1c:50:a3:0b:e4:e7:6a:01:08:ca:95:c2:00:55:57:d5:84:
         2a:80:02:e6:b1:31:5f:a2:dc:89:b9:90:d5:2b:58:2d:ca:9a:
         07:8d:38:f1:99:1f:65:70:7d:33:88:c8:90:34:00:20:0c:0b:
         3f:ac:3a:11:0a:7a:da:f5:cd:a6:d4:73:52:ca:0c:64:47:83:
         6b:f3:35:7c:5d:f8:74:81:cc:63:07:d7:d6:12:20:14:23:01:
         53:30:f2:ef:48:d3:26:90:61:d1:c1:3e:f0:e5:48:86:2a:d0:
         4d:1a:b6:3e:c1:fb:14:c3:70:0d:b7:32:1d:68:33:fc:ae:58:
         7d:e0:9f:bd:9d:88:68:e8:4a:73:f5:64:12:f5:1f:4f:35:72:
         9a:af:f2:54:9e:d6:33:25:ca:83:a3:e1:a1:3b:bf:c3:85:01:
         b4:09:1a:f4:ec:ef:b8:ab:56:eb:52:ec:2a:b4:30:23:2d:be:
         ee:32:dc:ed
-----BEGIN CERTIFICATE-----
MIIEjjCCA3agAwIBAgIUQz4pRht5D+o7yU3J3rc2OyYj5vgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjU3ZGNiYTlmYzdiMGVmMWYzY2M4MGExYWVlMjJjMDAx
OThlNzY3YTAeFw0yMzA0MDgwMzIwMzhaFw0yNDA0MDYwMzI1MzhaMDMxMTAvBgNV
BAMTKEUzNkJDQjY2OTFCNEIxRUNEODJDMDA3MUM3MTU1MjdGMDdCOUZBMjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRoVFbESCP9Qr0fa2eTdaeGXQv
H3WrwtLDJGKOwL+ONi491OT2xbKuX6USIFxpnSZoO/PCRn+AXonGlGvLJrC8Eir6
g0QpSJfuZqH5XVum3JYsp0rwqGUeUKtWKIzFzlVs4yo3AKLVkeeB4nciENgC0QMT
FIFgTiqiwP9vWBxp0mkmMaCka8dnLn3r2AFDAwPRQwvgvRevqWeuZj+gW2wvoTY/
m6i9lvDn9q+hDP0TvNBLEOoQaoOGjEu/W56iNg2/iP3z93QVKljQEKfMVQ9Etmwv
bvoK96GBHFX0hDBqB7Invp0INQlm3O3cXG95n+gG5vwB4qXRc4odH4P4zs/bAgMB
AAGjggGYMIIBlDAdBgNVHQ4EFgQU42vLZpG0sezYLABxxxVSfwe5+igwHwYDVR0j
BBgwFoAUtX3Lqfx7DvHzzIChruIsABmOdnowDgYDVR0PAQH/BAQDAgeAMFkGA1Ud
HwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5jby9yZXBvL0hZU1AvNi9CNTdEQ0JB
OUZDN0IwRUYxRjNDQzgwQTFBRUUyMkMwMDE5OEU3NjdBLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvdFgzTHFmeDdEdkh6eklDaHJ1SXNBQm1PZG5vLmNlcjBDBggr
BgEFBQcBCwQ3MDUwMwYIKwYBBQUHMAuGJ3JzeW5jOi8vcnBraS5jby9yZXBvL0hZ
U1AvNi9BUzQ3OTI0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsG
AQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhLdR4EQMA0GCSqGSIb3DQEBCwUAA4IB
AQC71skuQni8qXG2JB6PD4mJZV5qzs4duYwH4Yp1KMwutlN0ak8dWHaJuUiQkmiW
ZE2Gw0XfVmeoiygIAnV9mj4VkqFFluGWF3DQHFCjC+TnagEIypXCAFVX1YQqgALm
sTFfotyJuZDVK1gtypoHjTjxmR9lcH0ziMiQNAAgDAs/rDoRCnra9c2m1HNSygxk
R4Nr8zV8Xfh0gcxjB9fWEiAUIwFTMPLvSNMmkGHRwT7w5UiGKtBNGrY+wfsUw3AN
tzIdaDP8rlh94J+9nYho6Epz9WQS9R9PNXKar/JUntYzJcqDo+GhO7/DhQG0CRr0
7O+4q1brUuwqtDAjLb7uMtzt
-----END CERTIFICATE-----