Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS51129.roa
File:                     AS51129.roa (raw, json)
Hash identifier:          EMguXd7Z0wrimoXlKm+EtNTqjlI7VhNniqRMar0CyRc=
Subject key identifier:   41:8D:8B:4C:6F:0E:50:2D:F4:3C:FE:8B:26:09:85:17:9D:E2:D8:5C
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       4D5D16CA49BF8DC702CA7D61B05904C593D2C300
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS51129.roa
Signing time:             Sat 08 Apr 2023 03:25:37 +0000
ROA not before:           Sat 08 Apr 2023 03:20:37 +0000
ROA not after:            Sat 06 Apr 2024 03:25:37 +0000
asID:                     51129
IP address blocks:        2a12:dd47:8e10::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:5d:16:ca:49:bf:8d:c7:02:ca:7d:61:b0:59:04:c5:93:d2:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:37 2023 GMT
            Not After : Apr  6 03:25:37 2024 GMT
        Subject: CN=418D8B4C6F0E502DF43CFE8B260985179DE2D85C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e7:04:90:c9:33:d7:ec:81:1e:44:07:ce:f3:
                    a5:3d:52:ce:53:03:0c:d8:cd:33:2d:1e:35:b1:7b:
                    dd:0c:d3:08:a2:58:5f:20:87:7c:58:ad:99:b4:98:
                    ee:f5:a7:40:92:ca:c9:c9:e5:fe:d3:c2:3f:88:60:
                    6b:1b:6b:11:79:ef:0f:3f:ed:5d:79:a7:f6:fe:7b:
                    cc:b9:f5:e6:40:6d:8f:06:51:5f:3b:56:05:54:8d:
                    9f:17:81:d7:c2:ee:a8:5e:4c:93:8a:c4:81:be:cf:
                    32:1d:a2:c1:26:40:6d:8c:0c:12:d9:6d:6e:59:f3:
                    62:bc:31:9a:ae:d9:11:06:9a:2b:fc:2a:25:3d:88:
                    63:62:3c:1e:dc:f7:63:17:f7:2d:08:05:59:0d:d3:
                    d9:09:80:25:11:d8:38:53:af:ab:5e:29:41:3d:24:
                    b9:2a:61:2c:ba:7c:a6:43:29:61:d0:3c:59:a2:ca:
                    bb:6f:07:0f:43:d5:81:2f:79:2d:13:73:83:8a:22:
                    e0:34:a9:68:2c:98:e3:d8:77:ec:d7:f0:49:15:20:
                    f4:04:a2:40:d8:27:37:3b:7f:28:60:89:69:6c:af:
                    57:02:ef:b6:6a:29:29:95:a5:f4:40:3b:fa:32:63:
                    cd:2e:91:cf:43:cf:b0:d5:a1:93:70:1c:b0:70:b3:
                    96:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:8D:8B:4C:6F:0E:50:2D:F4:3C:FE:8B:26:09:85:17:9D:E2:D8:5C
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS51129.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8e10::/44

    Signature Algorithm: sha256WithRSAEncryption
         25:9e:50:2d:46:c9:bb:12:bc:72:40:89:15:05:79:8f:4e:8d:
         20:42:e2:2b:15:ce:cc:ec:6c:f5:cd:db:d1:df:4a:0c:1a:fe:
         c1:87:49:e7:77:40:42:90:18:9f:f7:9b:30:c8:1b:fd:08:44:
         2b:a9:bb:8b:cf:76:81:fa:14:4e:a0:db:17:f3:c3:ed:71:0e:
         c0:61:2e:aa:e0:78:33:15:15:5c:30:3f:72:27:87:c0:18:66:
         67:6e:83:d3:30:26:a9:e5:ff:c0:9a:8e:68:45:26:1e:38:cc:
         c0:49:f2:ec:99:72:22:eb:01:72:0c:ea:75:fd:c7:02:78:f7:
         e0:5e:81:39:14:bb:28:16:5a:1d:23:a5:77:4b:6f:97:72:ce:
         10:77:55:c4:28:f2:fe:0c:3a:8d:ef:ca:b9:bc:bf:4f:5e:00:
         36:ae:d1:59:5d:01:4e:a8:af:65:63:f5:42:71:86:c7:13:68:
         aa:41:06:12:82:f1:6c:ed:d6:27:21:2e:32:1c:41:4e:04:83:
         86:0e:ae:cf:6a:50:a7:fc:09:7e:6f:d4:f4:b6:f1:f6:e5:51:
         de:58:37:a2:4a:f9:36:8d:0a:e0:cf:3b:d1:1d:23:75:86:fb:
         79:5d:eb:6b:be:aa:2e:28:02:cd:90:5a:5c:ed:2c:c5:6b:3b:
         2a:60:a8:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----