Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e3131322e302f32332d3234203d3e20323131303037.roa
File:                     37372e33372e3131322e302f32332d3234203d3e20323131303037.roa (raw, json)
Hash identifier:          aUDzRdkf4U8spG87kVASP83mI9neFYcT0f0xIWXTdic=
Subject key identifier:   67:0C:51:83:14:39:83:A5:97:83:97:A1:77:EA:A6:A8:ED:BE:1D:52
Certificate issuer:       /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial:       5E100CF59B387BE60831CD4A60FC79478BF650E3
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e3131322e302f32332d3234203d3e20323131303037.roa
Signing time:             Fri 10 Mar 2023 13:45:30 +0000
ROA not before:           Fri 10 Mar 2023 13:40:30 +0000
ROA not after:            Fri 08 Mar 2024 13:45:30 +0000
asID:                     211007
IP address blocks:        77.37.112.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:10:0c:f5:9b:38:7b:e6:08:31:cd:4a:60:fc:79:47:8b:f6:50:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
        Validity
            Not Before: Mar 10 13:40:30 2023 GMT
            Not After : Mar  8 13:45:30 2024 GMT
        Subject: CN=670C5183143983A5978397A177EAA6A8EDBE1D52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d8:16:93:54:7c:d5:01:55:87:b2:34:f2:32:
                    bf:eb:22:3c:c0:3e:8f:d8:c0:8c:c5:b5:54:0f:2f:
                    02:6f:d1:b7:2d:0e:3e:7e:ec:e3:1c:8b:12:8a:4e:
                    e3:4a:00:bf:91:f6:18:6b:f3:f2:a3:35:11:df:c9:
                    99:f3:65:7c:dc:39:d2:06:5c:37:a0:08:2a:94:63:
                    6f:64:5f:aa:5c:e4:21:59:82:04:83:0a:63:ef:f2:
                    2c:e0:f5:26:c8:a2:79:f1:5f:cf:1f:25:a2:f1:0b:
                    70:63:2a:23:c8:7e:1f:02:a0:62:5e:7f:38:9f:bc:
                    28:05:f0:90:2d:49:9e:06:ff:10:d2:6e:54:7d:bd:
                    34:34:9e:a6:6d:80:ee:99:c6:3a:ed:11:bc:80:23:
                    b5:28:a4:81:1d:37:2f:af:8d:93:ec:66:e6:73:d7:
                    d8:2e:68:85:3e:4d:bc:1c:32:21:81:64:4b:08:3f:
                    75:ae:c1:3f:96:6a:38:ce:a8:fb:98:a8:bc:e2:fc:
                    ef:5a:ed:70:86:5e:6a:3d:cb:d3:bd:be:0e:a7:3b:
                    b9:1a:d5:9c:be:67:4b:9e:37:cb:63:c4:ac:75:84:
                    07:6f:c8:45:53:12:10:53:9b:42:16:3c:23:55:54:
                    94:64:54:4e:09:c8:61:78:6c:19:4f:0f:eb:e9:95:
                    c1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:0C:51:83:14:39:83:A5:97:83:97:A1:77:EA:A6:A8:ED:BE:1D:52
            X509v3 Authority Key Identifier:
                keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e3131322e302f32332d3234203d3e20323131303037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.37.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0e:67:24:4d:c6:6c:ad:59:8d:3d:82:c8:fa:db:73:d6:9c:4c:
         b9:94:cb:3c:3f:6e:8e:ad:e2:25:ac:b3:f6:f1:01:bc:bb:96:
         d1:12:af:1b:9d:6e:8e:09:af:d7:29:8a:f2:c9:d0:9e:60:8d:
         5e:d9:89:4c:1c:fb:75:e1:c4:dd:64:63:c0:30:30:1c:8d:87:
         66:9c:84:a9:e7:9c:5a:15:5f:c2:9f:1c:7b:85:fc:ee:30:c3:
         b2:5c:28:c1:61:2a:fa:a9:4c:ab:50:52:bb:f2:48:18:5b:39:
         99:9f:80:df:f7:f8:4e:a9:42:5d:7b:94:91:3f:13:e8:d2:83:
         08:ee:97:64:dc:37:cd:ee:14:84:ea:45:4d:9f:41:e7:9b:02:
         28:c9:1a:9f:d4:a4:dc:81:6b:65:e1:b4:4b:a0:a5:9a:ed:08:
         31:bd:f2:eb:a3:a2:fb:3e:f4:30:0a:a2:56:5d:21:e7:61:9b:
         aa:02:38:af:0e:33:53:51:57:55:ee:f0:c4:41:75:ce:bf:93:
         6c:2a:e5:71:43:ab:e2:f3:13:1a:d6:99:8f:64:0a:7b:0d:3b:
         e9:79:e7:12:d8:8d:53:5f:19:9d:6f:c8:b4:20:c7:05:7d:57:
         4c:fe:44:04:60:d4:7b:f8:7e:16:bd:29:32:99:a1:b8:7d:e3:
         93:56:bb:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:00 2024 by rpki-client on console-ams.rpki-client.org