Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/2/323630323a666332333a3132303a3a2f34342d3438203d3e20323033303639.roa
File:                     323630323a666332333a3132303a3a2f34342d3438203d3e20323033303639.roa (raw, json)
Hash identifier:          roK5aAh8OlvRTS28b+fyNIk7lmgufka1vo1JjnR+VMo=
Subject key identifier:   75:C8:6D:FB:43:DB:DD:7A:70:F8:DD:BB:7C:18:81:62:3A:04:96:CA
Certificate issuer:       /CN=96D0EC0D9F1A81636AABCEEFA2CE1521EFD2D2CD
Certificate serial:       7BF205CD6C5DB36860C5542C1C98CB4FA86D581A
Authority key identifier: 96:D0:EC:0D:9F:1A:81:63:6A:AB:CE:EF:A2:CE:15:21:EF:D2:D2:CD
Authority info access:    rsync://rpki.august.tw/repo/HYSP/0/96D0EC0D9F1A81636AABCEEFA2CE1521EFD2D2CD.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/2/323630323a666332333a3132303a3a2f34342d3438203d3e20323033303639.roa
Signing time:             Sun 08 Jan 2023 16:57:20 +0000
ROA not before:           Sun 08 Jan 2023 16:52:20 +0000
ROA not after:            Sun 07 Jan 2024 16:57:20 +0000
asID:                     203069
IP address blocks:        2602:fc23:120::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:f2:05:cd:6c:5d:b3:68:60:c5:54:2c:1c:98:cb:4f:a8:6d:58:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96D0EC0D9F1A81636AABCEEFA2CE1521EFD2D2CD
        Validity
            Not Before: Jan  8 16:52:20 2023 GMT
            Not After : Jan  7 16:57:20 2024 GMT
        Subject: CN=75C86DFB43DBDD7A70F8DDBB7C1881623A0496CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ff:cf:18:33:6b:ae:90:b1:15:79:97:dd:d9:
                    f2:3b:14:81:3b:9f:9a:a0:19:9b:41:21:22:e2:f5:
                    a8:6a:06:9f:43:68:cd:1c:3e:94:0b:e0:83:39:14:
                    c4:fa:c4:66:3a:4b:2e:2c:6b:32:af:93:95:ae:f8:
                    d8:1a:5a:03:4d:67:d5:79:70:09:7f:5e:8e:0c:f8:
                    a2:6e:70:87:07:3f:9f:e1:99:6c:b6:41:71:0b:e6:
                    f4:ff:e5:92:53:5d:e1:38:fd:5b:0a:51:07:21:61:
                    fe:76:3f:7d:60:13:1d:dc:26:44:4b:ce:34:67:94:
                    9b:7c:56:79:2a:6e:82:ea:c3:5b:c7:95:bd:3d:c3:
                    1f:a0:ad:51:b4:4a:91:cc:4b:53:9c:79:09:87:be:
                    00:48:84:02:c8:cc:6b:c2:2d:24:03:4a:c3:65:aa:
                    3b:f8:50:bc:ec:a6:15:e5:21:67:0e:56:55:3e:73:
                    cf:68:5f:ff:d6:6c:b2:e9:19:b0:be:1d:7b:d7:f3:
                    08:7d:de:45:df:e4:20:9c:2c:28:37:6d:c7:46:33:
                    43:32:6c:f3:f3:61:2e:fd:4c:44:36:9b:1b:3a:94:
                    34:08:6c:6a:79:da:b6:da:d1:70:1e:ad:d1:d6:bb:
                    b7:e5:87:46:1d:5b:32:c7:ba:3e:5b:ef:e0:2f:9a:
                    dd:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:C8:6D:FB:43:DB:DD:7A:70:F8:DD:BB:7C:18:81:62:3A:04:96:CA
            X509v3 Authority Key Identifier:
                keyid:96:D0:EC:0D:9F:1A:81:63:6A:AB:CE:EF:A2:CE:15:21:EF:D2:D2:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/2/96D0EC0D9F1A81636AABCEEFA2CE1521EFD2D2CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.august.tw/repo/HYSP/0/96D0EC0D9F1A81636AABCEEFA2CE1521EFD2D2CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/2/323630323a666332333a3132303a3a2f34342d3438203d3e20323033303639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc23:120::/44

    Signature Algorithm: sha256WithRSAEncryption
         49:b2:5e:87:50:a9:b3:69:4f:50:04:ef:4e:d6:13:4d:aa:6e:
         47:61:84:65:50:6d:d4:51:31:7b:4e:91:a7:13:4b:3b:98:01:
         d0:39:b8:91:bc:c3:62:af:4b:6e:a5:7b:27:f5:88:1b:5c:b1:
         2e:f0:3a:b6:37:83:6f:06:a8:3c:39:89:6d:74:d7:88:36:03:
         99:70:d4:80:17:a9:04:fb:eb:83:4f:d2:14:41:d1:ab:ed:b7:
         79:17:04:2c:20:24:75:07:f9:6c:43:57:15:51:0e:41:a9:6c:
         36:18:88:0c:55:7e:82:f2:06:67:32:e0:1e:c5:fd:bf:e0:dd:
         a2:7b:fe:54:a4:aa:cf:72:f9:61:cd:1c:b2:aa:2c:f2:fc:99:
         34:fc:77:17:8f:c7:b8:69:cd:f6:13:85:ac:cb:52:e8:75:5e:
         c7:df:a7:ac:76:2d:47:2e:e5:58:98:9e:3f:f6:58:ca:22:8a:
         07:24:99:43:c8:61:f2:9f:37:d0:b5:0b:90:4a:c0:e1:f9:68:
         7d:67:60:95:19:64:3b:a5:41:d6:5a:3e:97:69:3a:e0:87:0d:
         ba:51:a0:93:ea:b8:99:d7:8a:f5:cd:16:d1:e7:cb:74:2b:2c:
         9c:03:da:e5:53:26:15:24:cc:68:5e:dd:34:a7:f5:46:59:5b:
         d5:a0:08:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:09 2024 by rpki-client on console-fra.rpki-client.org