Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e3130382e302f32322d3232203d3e203632333336.roa
File:                     37372e33372e3130382e302f32322d3232203d3e203632333336.roa (raw, json)
Hash identifier:          OJRzo2xCIwlyxh+btJbr4Mt0OpbXwn56LwMP1L7D+eM=
Subject key identifier:   86:A7:AA:86:59:08:54:3F:EE:E6:9C:B7:37:6A:68:24:1C:83:28:7D
Certificate issuer:       /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial:       265BEB891A8187FF325C5443C1C40FC7DCF92642
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e3130382e302f32322d3232203d3e203632333336.roa
Signing time:             Fri 20 Jan 2023 06:26:11 +0000
ROA not before:           Fri 20 Jan 2023 06:21:11 +0000
ROA not after:            Fri 19 Jan 2024 06:26:11 +0000
asID:                     62336
IP address blocks:        77.37.108.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:5b:eb:89:1a:81:87:ff:32:5c:54:43:c1:c4:0f:c7:dc:f9:26:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
        Validity
            Not Before: Jan 20 06:21:11 2023 GMT
            Not After : Jan 19 06:26:11 2024 GMT
        Subject: CN=86A7AA865908543FEEE69CB7376A68241C83287D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d8:2a:37:0f:dc:ef:72:e2:f6:0e:26:d2:bf:
                    91:36:91:8b:8b:5b:f9:ff:40:d0:ed:6c:bb:45:42:
                    6b:25:cf:97:1d:59:b1:48:75:47:a3:36:79:a7:e7:
                    28:71:dd:56:76:69:c4:be:18:eb:54:0a:1e:95:a2:
                    5f:5b:a7:7f:78:32:5b:3a:bd:c4:5f:42:9a:48:47:
                    e8:a1:17:8f:a5:f6:be:e2:48:c9:3d:81:c6:88:59:
                    e6:46:09:9a:c1:40:10:71:6e:71:a2:6c:8f:51:01:
                    70:4d:99:5c:98:56:c8:89:d2:b7:a9:24:05:9a:bb:
                    00:c2:18:b2:a9:50:20:e8:d6:94:50:ff:bc:fe:37:
                    6d:1b:2f:fd:7b:4c:02:3a:06:f2:53:93:0c:c6:2b:
                    74:6b:63:fb:c8:9c:4e:ec:01:95:df:b4:b3:bc:b8:
                    64:b5:31:83:7e:a7:a8:c4:93:7c:55:aa:ff:0c:2e:
                    92:e3:72:a1:ec:84:15:c8:52:bf:d2:1c:6d:c5:02:
                    d5:a1:d5:a3:27:d9:21:16:cb:83:a6:6c:a9:ae:35:
                    e4:a7:8a:30:46:8a:f5:65:61:0c:89:31:62:b3:ab:
                    dd:a7:10:24:d3:fa:70:b2:65:1c:32:cb:04:55:28:
                    e4:01:38:bc:c5:f6:7d:e2:06:61:13:8b:3b:4c:dd:
                    e6:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:A7:AA:86:59:08:54:3F:EE:E6:9C:B7:37:6A:68:24:1C:83:28:7D
            X509v3 Authority Key Identifier:
                keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e3130382e302f32322d3232203d3e203632333336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.37.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:6a:c6:bc:55:9b:67:1e:2a:c9:7c:71:a4:62:47:e0:9f:fb:
         3e:fc:8b:8f:96:04:81:00:ec:e1:f9:bc:83:3c:6e:90:a5:ed:
         a4:93:cc:aa:81:d0:cb:b3:4f:fa:b4:c2:54:41:94:1e:32:13:
         85:53:6e:c3:54:b3:1a:be:dd:da:da:d0:65:7b:71:e7:f1:13:
         a1:af:01:9c:e6:4c:ab:ce:43:be:82:18:d5:8f:eb:46:6f:6b:
         6a:54:f6:67:66:7a:53:5f:b4:65:6b:4b:7e:af:dd:f7:91:32:
         ad:fb:65:e3:92:bf:e8:c6:cf:82:ef:c2:24:fc:08:5c:75:1e:
         b4:94:dd:ca:56:5c:7d:c9:30:cb:da:ad:be:98:b4:36:fd:14:
         a7:00:65:9e:37:93:ee:3c:02:9a:00:27:c8:0b:35:bb:af:59:
         12:2f:1a:ad:81:16:b6:9c:66:c1:05:2a:43:30:6b:89:b5:4f:
         89:37:fc:ab:04:52:b2:39:24:19:2d:c4:47:16:0e:8a:a2:0d:
         0c:99:29:b4:87:67:34:be:77:7d:ad:94:7a:a4:83:6a:03:14:
         8e:77:51:86:08:7b:74:ce:ac:24:6f:ac:68:57:de:48:03:31:
         a8:7b:64:66:4e:f2:58:83:13:02:dd:2b:21:df:4e:b7:47:29:
         25:5e:e8:08
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUJlvriRqBh/8yXFRDwcQPx9z5JkIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTgwNGQxZTJiMTI2MDA2YmZlNTA3OTYzNmE2YThkZGU1
YjdmZDlhNjAeFw0yMzAxMjAwNjIxMTFaFw0yNDAxMTkwNjI2MTFaMDMxMTAvBgNV
BAMTKDg2QTdBQTg2NTkwODU0M0ZFRUU2OUNCNzM3NkE2ODI0MUM4MzI4N0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ2Co3D9zvcuL2DibSv5E2kYuL
W/n/QNDtbLtFQmslz5cdWbFIdUejNnmn5yhx3VZ2acS+GOtUCh6Vol9bp394Mls6
vcRfQppIR+ihF4+l9r7iSMk9gcaIWeZGCZrBQBBxbnGibI9RAXBNmVyYVsiJ0rep
JAWauwDCGLKpUCDo1pRQ/7z+N20bL/17TAI6BvJTkwzGK3RrY/vInE7sAZXftLO8
uGS1MYN+p6jEk3xVqv8MLpLjcqHshBXIUr/SHG3FAtWh1aMn2SEWy4OmbKmuNeSn
ijBGivVlYQyJMWKzq92nECTT+nCyZRwyywRVKOQBOLzF9n3iBmETiztM3eYdAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUhqeqhlkIVD/u5py3N2poJByDKH0wHwYDVR0j
BBgwFoAUWATR4rEmAGv+UHljamqN3lt/2aYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDAzYTU0MmMtNTczNy00YmVmLTljMzUtM2QxMTNjNmVl
ZTM3LzAvNTgwNEQxRTJCMTI2MDA2QkZFNTA3OTYzNkE2QThEREU1QjdGRDlBNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1dBVFI0ckVtQUd2LVVIbGphbXFOM2x0
XzJhWS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNDAzYTU0MmMt
NTczNy00YmVmLTljMzUtM2QxMTNjNmVlZTM3LzAvMzczNzJlMzMzNzJlMzEzMDM4
MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzYzMjMzMzMzNi5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAk0l
bDANBgkqhkiG9w0BAQsFAAOCAQEATWrGvFWbZx4qyXxxpGJH4J/7PvyLj5YEgQDs
4fm8gzxukKXtpJPMqoHQy7NP+rTCVEGUHjIThVNuw1SzGr7d2trQZXtx5/EToa8B
nOZMq85DvoIY1Y/rRm9ralT2Z2Z6U1+0ZWtLfq/d95Eyrftl45K/6MbPgu/CJPwI
XHUetJTdylZcfckwy9qtvpi0Nv0UpwBlnjeT7jwCmgAnyAs1u69ZEi8arYEWtpxm
wQUqQzBribVPiTf8qwRSsjkkGS3ERxYOiqINDJkptIdnNL53fa2UeqSDagMUjndR
hgh7dM6sJG+saFfeSAMxqHtkZk7yWIMTAt0rId9Ot0cpJV7oCA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:12 2024 by rpki-client on console-fra.rpki-client.org