Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e35312e302f32342d3234203d3e20383334.roa
File:                     37372e33372e35312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          B0WVBmZ8LGySWQTrleLZVhV97IOyBUxPC1lQxyZUYyo=
Subject key identifier:   FB:67:44:27:42:06:BF:9F:AA:FD:9F:6A:0A:2A:06:49:D8:07:6D:49
Certificate issuer:       /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial:       498C588E8E96749773BA374C93B1AE9149B2C37F
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e35312e302f32342d3234203d3e20383334.roa
Signing time:             Sat 29 Apr 2023 08:00:04 +0000
ROA not before:           Sat 29 Apr 2023 07:55:04 +0000
ROA not after:            Sat 27 Apr 2024 08:00:04 +0000
asID:                     834
IP address blocks:        77.37.51.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:8c:58:8e:8e:96:74:97:73:ba:37:4c:93:b1:ae:91:49:b2:c3:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
        Validity
            Not Before: Apr 29 07:55:04 2023 GMT
            Not After : Apr 27 08:00:04 2024 GMT
        Subject: CN=FB6744274206BF9FAAFD9F6A0A2A0649D8076D49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:18:9c:75:1e:ce:86:ae:6c:2d:92:d9:d4:4e:
                    1c:9b:3b:37:25:dd:b7:d3:20:b6:aa:af:10:2f:a3:
                    6c:81:1e:9e:c0:75:80:d6:b9:64:c7:e7:81:78:f7:
                    6a:e8:99:56:1d:75:0d:6d:1e:c0:d8:2d:20:09:fd:
                    b0:dc:6a:9e:77:1e:d5:3a:de:41:5c:67:f4:01:c4:
                    af:65:34:c5:12:0e:f5:ff:d2:2e:f4:3c:d9:47:93:
                    ac:6f:85:54:f8:24:1a:b3:62:a6:8a:98:a0:ea:08:
                    15:57:38:6c:e6:4d:05:02:4c:d5:fa:0b:15:00:6b:
                    4b:87:b8:dc:3c:35:35:7a:71:2d:2b:82:3d:02:23:
                    a8:a9:de:f8:39:a2:8d:be:60:ac:a1:ac:54:03:84:
                    5f:1e:4d:bd:d5:8e:9e:8b:4c:a6:f4:86:34:38:1c:
                    8f:84:3e:84:72:13:de:37:4f:8b:f1:89:c8:7d:ad:
                    6b:b0:46:e6:9a:79:a1:a9:da:03:ca:7c:72:89:bf:
                    8c:72:0f:18:08:8c:2b:ea:3c:59:8d:ba:d2:09:e1:
                    e1:9e:3e:4f:03:e4:4d:3c:a4:b2:5a:86:d0:3f:30:
                    9b:f3:eb:d6:10:66:2a:c8:2a:c3:a2:cc:32:5d:a7:
                    d3:7c:1f:d1:3a:2d:f5:c0:1f:13:5c:2c:33:67:d4:
                    0d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:67:44:27:42:06:BF:9F:AA:FD:9F:6A:0A:2A:06:49:D8:07:6D:49
            X509v3 Authority Key Identifier:
                keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e35312e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.37.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:34:e1:d3:5f:ec:5e:8e:6f:ac:5e:7f:45:b9:92:25:81:6e:
         3e:ff:c8:53:e2:89:07:88:da:6b:20:92:ce:0b:2a:ee:fc:ce:
         67:91:c6:14:54:86:ea:34:15:38:67:f7:0b:06:19:b3:1f:f6:
         d8:47:cd:64:ec:1e:69:02:0d:27:ef:0c:5a:14:ef:86:34:4c:
         72:61:07:dc:50:bc:75:09:0c:8e:8d:2a:6d:c6:2a:99:17:19:
         5f:33:d2:d9:ea:c5:6e:61:54:8c:e4:db:ac:70:a5:43:dc:87:
         09:06:65:74:e5:23:a6:8c:38:ec:f1:3b:ee:a4:c9:70:82:46:
         6f:2d:b4:92:ae:03:d9:47:8b:d2:10:a7:fe:04:fc:d8:a5:e2:
         60:82:ea:35:55:d0:2f:8e:24:cd:c4:0d:f9:eb:62:a2:ea:82:
         c3:1a:2f:ad:b0:b8:03:db:cb:f4:18:28:b5:72:b5:68:a4:cc:
         68:16:c8:7a:b6:5d:95:f4:98:10:30:af:39:02:9f:ea:ad:bf:
         e7:b0:33:1b:f3:59:12:0d:0e:60:fe:04:e0:c0:81:97:8a:bd:
         a5:c2:67:f8:9b:16:72:6c:f5:71:e3:53:1d:87:3a:fb:d2:ea:
         e2:b7:8c:b0:5d:85:d3:a8:ad:01:90:23:92:16:b6:33:26:3b:
         aa:a8:b9:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:12 2024 by rpki-client on console-fra.rpki-client.org