Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e33332e302f32342d3234203d3e20323131323337.roa
File:                     37372e33372e33332e302f32342d3234203d3e20323131323337.roa (raw, json)
Hash identifier:          EwXbmMTS8JJE3SW1BANM6flt8/HLSSft7o+zQ7f5s8s=
Subject key identifier:   58:CA:86:34:5F:E0:C8:D9:8D:9E:3B:D6:14:EC:B1:41:BB:B3:D9:E2
Certificate issuer:       /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial:       49006DC6994E7EC9889DEEB949B99771B747A8B2
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e33332e302f32342d3234203d3e20323131323337.roa
Signing time:             Fri 20 Jan 2023 06:26:06 +0000
ROA not before:           Fri 20 Jan 2023 06:21:06 +0000
ROA not after:            Fri 19 Jan 2024 06:26:06 +0000
asID:                     211237
IP address blocks:        77.37.33.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:00:6d:c6:99:4e:7e:c9:88:9d:ee:b9:49:b9:97:71:b7:47:a8:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
        Validity
            Not Before: Jan 20 06:21:06 2023 GMT
            Not After : Jan 19 06:26:06 2024 GMT
        Subject: CN=58CA86345FE0C8D98D9E3BD614ECB141BBB3D9E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:49:d4:08:97:03:a5:a1:ce:ac:79:62:0d:91:
                    f5:9b:43:a7:09:d8:75:5d:4a:64:5d:a4:b7:b0:73:
                    bd:0e:3b:fc:7b:39:f7:04:81:90:c7:97:e4:72:c6:
                    a2:6a:0b:cc:9d:31:7c:37:31:e2:30:7f:85:fd:37:
                    75:b2:10:a2:26:3e:c0:31:08:d3:c7:88:fd:8e:7f:
                    6e:34:f2:6e:7c:07:35:98:3c:8f:a0:55:2a:0e:1b:
                    26:2f:59:d9:e0:c0:ca:af:94:b1:a4:1d:08:f7:e8:
                    ce:f3:9c:85:a0:e3:db:a3:10:6b:7e:61:df:bc:5c:
                    6f:67:4f:63:9e:c5:38:f4:86:0d:df:1b:df:07:5a:
                    69:b2:6b:24:ea:45:7b:19:ea:e1:59:d6:89:23:37:
                    e9:a5:ac:26:d8:01:5e:e8:61:f7:e0:85:c9:22:96:
                    85:68:81:8d:8e:57:9a:29:6e:ad:27:ea:f3:e9:99:
                    59:c4:b8:c2:52:91:0f:67:9a:52:4d:f3:b3:0a:4c:
                    49:f8:5d:0e:d8:f3:b8:5a:9c:ae:e9:f4:53:3b:3c:
                    6d:fb:4c:05:19:5b:28:b5:dc:4e:50:36:89:0b:64:
                    24:08:e0:23:1a:d2:c9:dc:69:12:69:a9:fb:8d:86:
                    40:5e:e0:09:ea:37:57:e5:4a:02:90:bb:db:c8:d8:
                    32:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:CA:86:34:5F:E0:C8:D9:8D:9E:3B:D6:14:EC:B1:41:BB:B3:D9:E2
            X509v3 Authority Key Identifier:
                keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e33332e302f32342d3234203d3e20323131323337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.37.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:bd:50:9f:ab:0d:58:98:cd:e1:27:af:db:e4:16:0c:11:fe:
         7c:a8:b3:50:19:58:aa:62:d2:48:c9:f3:45:ad:38:56:c3:71:
         c3:7e:01:0d:f7:4d:3d:6f:5c:2b:7d:dc:d7:a1:bf:fa:a2:a5:
         e8:02:f2:f1:8a:2e:38:ce:00:15:ae:0c:6f:1f:a1:71:93:51:
         24:5a:10:ba:d1:72:a6:b9:a2:73:ad:39:a7:54:37:8c:1f:9b:
         07:a2:41:3e:5a:69:f9:d5:f9:d6:e8:c0:6c:1a:6a:af:79:a1:
         2c:94:04:2e:78:36:3b:aa:c8:d8:9d:51:7e:09:6b:10:93:38:
         4d:f6:f1:63:6d:d7:3a:5f:fd:cb:7b:f7:c5:8d:e0:87:75:83:
         9c:52:34:fa:a4:58:ab:3f:2f:f0:b3:c8:09:55:c2:fb:fd:4e:
         7e:87:3c:a0:c2:94:32:8f:97:95:8c:00:cf:ec:8e:58:14:e6:
         4e:f4:8e:0f:94:80:23:51:f8:de:2b:42:90:17:78:c2:d2:f8:
         4c:16:b5:fa:54:94:ff:f6:da:0d:59:07:98:af:73:53:30:e3:
         80:04:f1:3d:ca:ba:ae:e0:69:5d:03:2f:e1:69:23:d0:9e:3e:
         68:ad:41:3c:1b:b0:f9:28:d7:3d:ff:cd:bb:dc:1e:db:bc:9f:
         fb:5c:b5:5c
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUSQBtxplOfsmIne65SbmXcbdHqLIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTgwNGQxZTJiMTI2MDA2YmZlNTA3OTYzNmE2YThkZGU1
YjdmZDlhNjAeFw0yMzAxMjAwNjIxMDZaFw0yNDAxMTkwNjI2MDZaMDMxMTAvBgNV
BAMTKDU4Q0E4NjM0NUZFMEM4RDk4RDlFM0JENjE0RUNCMTQxQkJCM0Q5RTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHSdQIlwOloc6seWINkfWbQ6cJ
2HVdSmRdpLewc70OO/x7OfcEgZDHl+RyxqJqC8ydMXw3MeIwf4X9N3WyEKImPsAx
CNPHiP2Of2408m58BzWYPI+gVSoOGyYvWdngwMqvlLGkHQj36M7znIWg49ujEGt+
Yd+8XG9nT2OexTj0hg3fG98HWmmyayTqRXsZ6uFZ1okjN+mlrCbYAV7oYffghcki
loVogY2OV5opbq0n6vPpmVnEuMJSkQ9nmlJN87MKTEn4XQ7Y87hanK7p9FM7PG37
TAUZWyi13E5QNokLZCQI4CMa0sncaRJpqfuNhkBe4AnqN1flSgKQu9vI2DKhAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUWMqGNF/gyNmNnjvWFOyxQbuz2eIwHwYDVR0j
BBgwFoAUWATR4rEmAGv+UHljamqN3lt/2aYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDAzYTU0MmMtNTczNy00YmVmLTljMzUtM2QxMTNjNmVl
ZTM3LzAvNTgwNEQxRTJCMTI2MDA2QkZFNTA3OTYzNkE2QThEREU1QjdGRDlBNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1dBVFI0ckVtQUd2LVVIbGphbXFOM2x0
XzJhWS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNDAzYTU0MmMt
NTczNy00YmVmLTljMzUtM2QxMTNjNmVlZTM3LzAvMzczNzJlMzMzNzJlMzMzMzJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzMTMyMzMzNy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAE0l
ITANBgkqhkiG9w0BAQsFAAOCAQEADL1Qn6sNWJjN4Sev2+QWDBH+fKizUBlYqmLS
SMnzRa04VsNxw34BDfdNPW9cK33c16G/+qKl6ALy8YouOM4AFa4Mbx+hcZNRJFoQ
utFyprmic605p1Q3jB+bB6JBPlpp+dX51ujAbBpqr3mhLJQELng2O6rI2J1Rfglr
EJM4TfbxY23XOl/9y3v3xY3gh3WDnFI0+qRYqz8v8LPICVXC+/1Ofoc8oMKUMo+X
lYwAz+yOWBTmTvSOD5SAI1H43itCkBd4wtL4TBa1+lSU//baDVkHmK9zUzDjgATx
Pcq6ruBpXQMv4Wkj0J4+aK1BPBuw+SjXPf/Nu9we27yf+1y1XA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:12 2024 by rpki-client on console-fra.rpki-client.org