Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/3139342e3135302e3231312e302f32342d3234203d3e20323136313539.roa
File:                     3139342e3135302e3231312e302f32342d3234203d3e20323136313539.roa (raw, json)
Hash identifier:          PliTs6rkyByMPYTjMwh7AvdT7eU7OFwito8+fAFSaH0=
Subject key identifier:   5A:34:FA:30:42:7C:CC:37:4A:A2:FF:A8:DF:3D:0A:5B:D1:13:0F:5C
Certificate issuer:       /CN=4a8d360cee6516527fd5492c37cac4441e119c00
Certificate serial:       2B34CC0793E3AFC3E7949E93D46C20A86620E411
Authority key identifier: 4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/3139342e3135302e3231312e302f32342d3234203d3e20323136313539.roa
Signing time:             Mon 16 Oct 2023 10:27:18 +0000
ROA not before:           Mon 16 Oct 2023 10:22:18 +0000
ROA not after:            Mon 14 Oct 2024 10:27:18 +0000
asID:                     216159
IP address blocks:        194.150.211.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:34:cc:07:93:e3:af:c3:e7:94:9e:93:d4:6c:20:a8:66:20:e4:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a8d360cee6516527fd5492c37cac4441e119c00
        Validity
            Not Before: Oct 16 10:22:18 2023 GMT
            Not After : Oct 14 10:27:18 2024 GMT
        Subject: CN=5A34FA30427CCC374AA2FFA8DF3D0A5BD1130F5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:81:e2:db:4e:a8:b9:8d:4b:97:75:16:57:d0:
                    19:5f:a0:81:ae:50:04:7b:5a:81:1b:c4:29:25:d5:
                    50:16:42:ed:cf:2f:b6:c2:ad:78:1c:ad:94:83:69:
                    29:be:9e:4a:17:36:9d:bb:87:1b:c2:9e:82:46:3f:
                    83:61:cf:8e:c2:de:b0:e5:96:9d:bd:22:0c:4c:41:
                    04:07:e3:1d:44:2b:f1:66:aa:67:7f:8b:c4:60:c5:
                    5d:33:09:2a:80:cf:49:75:5b:26:a5:c0:e0:3e:43:
                    c1:07:90:48:bd:27:62:c9:60:98:c1:cf:b2:b2:f4:
                    c9:d3:d0:c5:ee:db:d9:a2:78:d3:74:60:e1:c4:eb:
                    b4:9b:19:45:e8:7f:88:05:67:b2:2e:1b:96:26:8b:
                    3e:9b:f2:44:17:17:2d:f3:19:f5:9c:4c:4f:62:de:
                    7d:0d:fb:7d:e3:13:40:a4:75:38:88:0a:51:d0:8d:
                    6e:a8:b2:e3:a3:29:bc:a8:65:bf:41:28:db:49:01:
                    fe:82:34:6b:63:62:1e:48:67:7e:bb:40:4e:6f:62:
                    6a:24:d6:1d:cd:70:65:d9:4e:04:b6:2c:b5:ec:93:
                    af:12:81:de:db:08:b4:a9:8d:2a:6a:3f:e8:88:84:
                    99:64:36:3c:61:6a:aa:f2:3c:a4:2b:bf:3e:f9:63:
                    60:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:34:FA:30:42:7C:CC:37:4A:A2:FF:A8:DF:3D:0A:5B:D1:13:0F:5C
            X509v3 Authority Key Identifier:
                keyid:4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/4A8D360CEE6516527FD5492C37CAC4441E119C00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/3139342e3135302e3231312e302f32342d3234203d3e20323136313539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.150.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:eb:f4:3d:52:53:ac:55:51:1f:a4:d1:c4:85:74:44:dd:84:
         02:cb:69:34:c5:f6:78:d3:f2:b9:04:0e:93:07:2e:38:a3:a2:
         00:65:32:98:fc:43:0f:42:2f:3a:5a:66:f6:f5:3a:18:da:26:
         0e:8e:08:80:69:59:a4:ea:4a:bb:c4:f9:6a:5f:d5:30:f6:eb:
         02:9a:57:a4:f8:a9:22:86:dd:b2:d0:1c:92:32:08:85:ea:e4:
         66:74:48:e8:bf:0e:a7:34:f7:96:97:68:7b:15:b3:c0:a4:5a:
         dd:47:f1:da:2f:da:4b:fe:a7:bd:a8:7d:ff:5f:22:42:71:fb:
         2c:5c:27:cd:fd:51:23:8f:85:42:5b:de:97:ec:d8:d0:77:fc:
         c1:e3:f7:5e:09:0b:f5:76:c2:fa:fe:f2:a7:9c:1f:44:04:9f:
         14:44:2b:18:13:6b:d3:67:e0:8a:1a:75:da:cc:aa:65:5d:ad:
         67:98:64:eb:1e:b8:a4:1d:f3:a4:8f:68:db:f7:f8:58:80:9a:
         2f:3c:1f:aa:b1:aa:6c:ec:20:ce:22:a8:21:8b:d0:fb:06:ca:
         c7:9f:db:c9:0f:cc:d7:a4:bc:47:24:47:e2:40:cc:2e:2f:3d:
         ed:ac:07:2d:fe:82:19:e4:55:c6:a4:09:bf:2a:24:d5:2d:ca:
         8a:ed:39:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 23 10:11:28 2023 by rpki-client on console-ams.rpki-client.org