Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e33392e302f32342d3234203d3e203632303638.roa
File:                     37372e33372e33392e302f32342d3234203d3e203632303638.roa (raw, json)
Hash identifier:          +NIUpww+NlvTmMvBPQ0Wjsq9WslCeyrVVRhnQdZi4zA=
Subject key identifier:   5F:59:D5:E7:90:AC:B5:69:FA:70:FE:4F:5C:AC:6C:C2:AE:02:11:A9
Certificate issuer:       /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial:       3A8FA00BA3F70B86B3FCF222B85714F2CCF32F00
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e33392e302f32342d3234203d3e203632303638.roa
Signing time:             Fri 20 Jan 2023 06:26:07 +0000
ROA not before:           Fri 20 Jan 2023 06:21:07 +0000
ROA not after:            Fri 19 Jan 2024 06:26:07 +0000
asID:                     62068
IP address blocks:        77.37.39.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:8f:a0:0b:a3:f7:0b:86:b3:fc:f2:22:b8:57:14:f2:cc:f3:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
        Validity
            Not Before: Jan 20 06:21:07 2023 GMT
            Not After : Jan 19 06:26:07 2024 GMT
        Subject: CN=5F59D5E790ACB569FA70FE4F5CAC6CC2AE0211A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2a:92:96:ef:2c:df:a9:29:d2:44:43:81:99:
                    85:b4:d8:e2:44:ba:d2:46:61:bd:47:5e:5e:7d:a3:
                    95:ad:b9:02:ff:9d:dc:39:4e:c7:0f:b6:1e:5a:21:
                    55:d3:fe:62:bd:3c:3a:a2:ef:c5:65:83:a5:b3:49:
                    83:e6:e6:c0:48:0f:22:21:29:8d:ad:22:61:85:6b:
                    c2:56:2b:db:ca:8d:39:5f:38:f8:83:ee:bc:5d:92:
                    1e:c0:6a:35:bb:9e:bb:d4:e5:41:b2:a9:37:88:b7:
                    ca:82:88:7d:3c:af:95:e1:98:1e:06:5e:66:0d:99:
                    62:f0:1c:b7:9f:20:fa:8d:91:1c:fe:14:b7:10:6c:
                    77:c0:97:99:98:88:84:28:57:4a:cd:43:09:64:fb:
                    13:bb:7a:15:d8:ec:26:fb:94:98:5c:49:38:c6:a8:
                    1a:b8:8e:17:2c:ad:78:e2:59:3b:0e:75:e7:3f:11:
                    e9:42:0c:4d:2c:e8:4d:9e:61:d4:cc:42:6d:ef:6f:
                    92:8d:db:a1:3e:0c:96:5e:03:a9:ca:25:d5:e8:8f:
                    51:51:fe:6c:52:71:27:cc:fb:0c:19:e3:30:b6:b4:
                    e7:11:a8:66:5f:3e:5b:a2:c0:c9:9d:a3:be:7a:76:
                    78:39:d5:e0:5c:a9:de:8d:0c:1a:82:d3:6c:13:1a:
                    d6:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:59:D5:E7:90:AC:B5:69:FA:70:FE:4F:5C:AC:6C:C2:AE:02:11:A9
            X509v3 Authority Key Identifier:
                keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e33392e302f32342d3234203d3e203632303638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.37.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:9f:a8:de:6d:b7:f9:80:75:d9:6d:03:43:39:2e:10:4e:74:
         b6:38:d4:ee:47:8b:62:fe:7b:57:b9:8f:6a:38:62:63:e7:c0:
         bb:1e:8e:75:af:45:c1:a5:80:0c:3a:3a:be:14:10:6c:c2:f8:
         c5:e5:3e:6f:29:ad:ec:7d:b3:5c:8f:e7:42:4a:1e:fa:86:6f:
         6e:01:16:34:a7:0a:83:e5:14:42:8b:32:c3:8f:83:69:72:67:
         cd:0f:40:e3:10:90:47:1a:58:dc:79:69:62:c5:a6:44:fb:98:
         1a:55:47:2b:5e:80:c6:e3:06:e7:a2:db:3b:3c:32:ae:12:97:
         c0:8e:5e:e6:c7:f9:c1:0d:90:db:0c:7b:f1:df:2b:e3:95:c0:
         e0:7a:47:da:86:04:0a:49:b4:e2:20:03:c9:b2:35:5b:92:d7:
         91:0a:39:fb:c8:2c:7a:48:f4:3a:10:fb:2f:bf:75:4f:7d:00:
         e8:4f:35:38:56:88:e7:7a:30:f4:8c:c2:91:41:c1:e7:c6:01:
         a7:cf:e4:4d:8c:b8:91:e3:27:9d:b3:e4:ed:72:4a:66:0e:2c:
         25:0f:c0:b7:63:3f:98:1d:e8:84:0b:01:ce:bf:f3:cc:e5:65:
         ec:2a:af:5b:ea:6f:ff:2b:cc:a2:ca:30:b9:6f:b3:f4:8c:30:
         ef:d6:7a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:12 2024 by rpki-client on console-fra.rpki-client.org