Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/38b23de3-5277-462b-a265-cb8f80ac93ec/0/34352e3133322e3231382e302f32342d3234203d3e203536393133.roa
File:                     34352e3133322e3231382e302f32342d3234203d3e203536393133.roa (raw, json)
Hash identifier:          ZLZgjmY3XpG0NANJllc7MrceAViJ+q4Fc0dxoElNnxo=
Subject key identifier:   0B:1B:AC:2D:B8:B3:BF:1F:89:FA:55:8B:53:5E:E4:74:50:D8:55:48
Certificate issuer:       /CN=35e3043c2ede0281f573512069c8cfab837d4dcd
Certificate serial:       772058AE1A4868D6D7F279770D5580A6769EED29
Authority key identifier: 35:E3:04:3C:2E:DE:02:81:F5:73:51:20:69:C8:CF:AB:83:7D:4D:CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NeMEPC7eAoH1c1EgacjPq4N9Tc0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/38b23de3-5277-462b-a265-cb8f80ac93ec/0/34352e3133322e3231382e302f32342d3234203d3e203536393133.roa
Signing time:             Mon 03 Apr 2023 17:32:48 +0000
ROA not before:           Mon 03 Apr 2023 17:27:48 +0000
ROA not after:            Mon 01 Apr 2024 17:32:48 +0000
asID:                     56913
IP address blocks:        45.132.218.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:20:58:ae:1a:48:68:d6:d7:f2:79:77:0d:55:80:a6:76:9e:ed:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35e3043c2ede0281f573512069c8cfab837d4dcd
        Validity
            Not Before: Apr  3 17:27:48 2023 GMT
            Not After : Apr  1 17:32:48 2024 GMT
        Subject: CN=0B1BAC2DB8B3BF1F89FA558B535EE47450D85548
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b8:10:ac:63:5f:ee:c2:bb:fb:50:76:12:98:
                    e7:d5:b5:a6:b8:60:09:20:95:6b:80:0e:6f:d2:3f:
                    17:e0:e8:7e:00:08:66:a2:a4:41:63:f5:be:ef:1a:
                    3d:93:47:66:3f:f0:bf:79:b2:9e:1f:46:11:da:73:
                    65:d9:b0:ab:95:9c:b4:5e:48:c2:25:e4:35:38:e7:
                    24:20:b4:8a:f9:fb:c6:7a:a5:0f:70:88:07:22:19:
                    27:15:39:ff:14:d8:36:f5:14:b0:b7:43:2c:6a:22:
                    00:a0:76:b9:15:c6:f3:47:ed:90:4d:b4:96:f0:c2:
                    59:b4:72:49:f6:ec:23:6f:f1:d3:93:db:0a:58:82:
                    76:dc:0e:dc:6d:bf:4d:29:fe:d9:9e:2a:49:9f:24:
                    42:f6:79:68:ea:5b:f5:35:7d:81:58:cd:24:8f:d4:
                    6c:86:57:9d:95:f6:af:27:72:d2:0a:09:74:4e:90:
                    26:37:f9:c9:65:70:18:1f:80:51:23:eb:25:53:e4:
                    fd:91:dd:3e:fe:4e:e4:3c:f1:46:0b:fb:e2:8c:60:
                    4a:8e:3f:5d:d0:43:a8:24:b2:92:be:65:9f:e0:c2:
                    0f:5a:4a:14:cb:7f:0b:62:b7:b0:70:94:e3:09:67:
                    a0:d8:e9:12:68:15:ef:f8:b8:26:1f:d9:0c:7b:52:
                    11:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:1B:AC:2D:B8:B3:BF:1F:89:FA:55:8B:53:5E:E4:74:50:D8:55:48
            X509v3 Authority Key Identifier:
                keyid:35:E3:04:3C:2E:DE:02:81:F5:73:51:20:69:C8:CF:AB:83:7D:4D:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/38b23de3-5277-462b-a265-cb8f80ac93ec/0/35E3043C2EDE0281F573512069C8CFAB837D4DCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NeMEPC7eAoH1c1EgacjPq4N9Tc0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/38b23de3-5277-462b-a265-cb8f80ac93ec/0/34352e3133322e3231382e302f32342d3234203d3e203536393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:78:f6:f1:48:14:b6:dd:5f:c6:e1:92:0b:60:4e:93:9a:85:
         02:78:f3:fb:70:f9:b7:52:4a:80:49:89:19:b8:e5:9c:a5:e3:
         67:67:a6:a9:05:9c:1b:84:fd:dd:8e:31:74:61:2a:11:7d:3d:
         79:57:a7:4f:04:7e:e5:7d:86:09:cf:3d:f7:cc:84:61:e9:75:
         c6:ad:99:3a:c2:33:24:2c:86:95:c3:32:1c:02:70:0b:83:6d:
         e2:e9:45:0f:da:53:91:78:7f:23:fd:8f:e7:de:56:f6:5b:23:
         2f:f4:d8:9f:f9:0c:0d:da:a7:5c:05:14:13:20:06:08:67:ba:
         5d:d5:f3:f2:3c:ca:0b:16:a5:5a:04:11:4e:85:11:7c:d1:60:
         f5:97:e0:99:b6:59:bf:79:e0:3a:9a:74:20:27:ef:cb:91:23:
         24:b3:88:ca:d2:bb:e2:35:71:66:0c:7a:a2:cf:b0:59:b4:5a:
         e0:52:2a:e1:ad:96:db:57:9a:da:69:0d:aa:f3:a8:32:3f:82:
         ce:4d:0a:2f:88:74:7e:5c:89:6a:99:ae:b5:6a:b0:40:86:81:
         50:87:59:f3:a8:f4:70:2a:ca:ab:4d:62:89:b6:b4:b5:90:b4:
         f8:b0:e4:86:47:e6:a4:5a:4a:a8:27:3d:85:cc:b6:01:c8:04:
         04:dd:ba:b6
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUdyBYrhpIaNbX8nl3DVWApnae7SkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzVlMzA0M2MyZWRlMDI4MWY1NzM1MTIwNjljOGNmYWI4
MzdkNGRjZDAeFw0yMzA0MDMxNzI3NDhaFw0yNDA0MDExNzMyNDhaMDMxMTAvBgNV
BAMTKDBCMUJBQzJEQjhCM0JGMUY4OUZBNTU4QjUzNUVFNDc0NTBEODU1NDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4uBCsY1/uwrv7UHYSmOfVtaa4
YAkglWuADm/SPxfg6H4ACGaipEFj9b7vGj2TR2Y/8L95sp4fRhHac2XZsKuVnLRe
SMIl5DU45yQgtIr5+8Z6pQ9wiAciGScVOf8U2Db1FLC3QyxqIgCgdrkVxvNH7ZBN
tJbwwlm0ckn27CNv8dOT2wpYgnbcDtxtv00p/tmeKkmfJEL2eWjqW/U1fYFYzSSP
1GyGV52V9q8nctIKCXROkCY3+cllcBgfgFEj6yVT5P2R3T7+TuQ88UYL++KMYEqO
P13QQ6gkspK+ZZ/gwg9aShTLfwtit7BwlOMJZ6DY6RJoFe/4uCYf2Qx7UhEJAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUCxusLbizvx+J+lWLU17kdFDYVUgwHwYDVR0j
BBgwFoAUNeMEPC7eAoH1c1EgacjPq4N9Tc0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzhiMjNkZTMtNTI3Ny00NjJiLWEyNjUtY2I4ZjgwYWM5
M2VjLzAvMzVFMzA0M0MyRURFMDI4MUY1NzM1MTIwNjlDOENGQUI4MzdENERDRC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL05lTUVQQzdlQW9IMWMxRWdhY2pQcTRO
OVRjMC5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMzhiMjNkZTMt
NTI3Ny00NjJiLWEyNjUtY2I4ZjgwYWM5M2VjLzAvMzQzNTJlMzEzMzMyMmUzMjMx
MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTM2MzkzMTMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
LYTaMA0GCSqGSIb3DQEBCwUAA4IBAQBcePbxSBS23V/G4ZILYE6TmoUCePP7cPm3
UkqASYkZuOWcpeNnZ6apBZwbhP3djjF0YSoRfT15V6dPBH7lfYYJzz33zIRh6XXG
rZk6wjMkLIaVwzIcAnALg23i6UUP2lOReH8j/Y/n3lb2WyMv9Nif+QwN2qdcBRQT
IAYIZ7pd1fPyPMoLFqVaBBFOhRF80WD1l+CZtlm/eeA6mnQgJ+/LkSMks4jK0rvi
NXFmDHqiz7BZtFrgUirhrZbbV5raaQ2q86gyP4LOTQoviHR+XIlqma61arBAhoFQ
h1nzqPRwKsqrTWKJtrS1kLT4sOSGR+akWkqoJz2FzLYByAQE3bq2
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:59 2024 by rpki-client on console-ams.rpki-client.org