Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e37322e302f32342d3234203d3e20323131323337.roa
File:                     37372e33372e37322e302f32342d3234203d3e20323131323337.roa (raw, json)
Hash identifier:          Y/ZYS0/kWVELi9s5tgolEVCV050lxJiuZmj5tDkzs8c=
Subject key identifier:   92:CC:A8:36:A1:0F:C1:9F:CA:42:D3:02:4A:FF:65:74:98:F3:F3:C8
Certificate issuer:       /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial:       2C2D8A1D4C1FB5B5822EAC5A1825F88B40429C24
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e37322e302f32342d3234203d3e20323131323337.roa
Signing time:             Mon 06 Feb 2023 15:29:24 +0000
ROA not before:           Mon 06 Feb 2023 15:24:24 +0000
ROA not after:            Mon 05 Feb 2024 15:29:24 +0000
asID:                     211237
IP address blocks:        77.37.72.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:2d:8a:1d:4c:1f:b5:b5:82:2e:ac:5a:18:25:f8:8b:40:42:9c:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
        Validity
            Not Before: Feb  6 15:24:24 2023 GMT
            Not After : Feb  5 15:29:24 2024 GMT
        Subject: CN=92CCA836A10FC19FCA42D3024AFF657498F3F3C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:dc:82:9d:dd:78:64:cd:e1:2a:14:85:a1:a5:
                    e6:a5:a7:5f:d0:1e:bf:c6:6c:47:4d:45:65:4f:6b:
                    82:0f:fc:16:d0:dd:9a:95:29:08:42:b2:bd:85:18:
                    78:81:6e:bc:c8:1d:b7:ab:7a:e0:1f:c3:30:94:ea:
                    17:44:23:39:8c:01:c9:73:24:97:12:72:ff:52:33:
                    01:e5:3c:11:fd:eb:bc:3b:c0:db:ea:e3:2a:c7:83:
                    58:89:df:7b:0a:74:6f:c4:d3:df:2f:9a:f6:ec:f6:
                    06:aa:0b:15:9d:1e:e1:15:ab:d8:c7:ee:ba:68:d9:
                    0e:db:62:7b:41:0e:09:42:0f:fe:d0:44:74:2b:72:
                    10:0d:c1:0c:46:1d:fd:e3:b9:67:ea:44:4f:3a:c0:
                    f7:ff:21:6d:2e:30:03:db:00:b1:f9:d0:47:32:69:
                    02:13:ea:1c:c0:2d:7f:9e:00:32:8b:8e:30:2a:21:
                    f1:06:2d:d3:70:c1:10:1f:6f:d3:46:4f:18:e4:2b:
                    8d:27:97:da:cf:34:e0:96:fc:6a:f7:c1:78:1a:4f:
                    ad:77:05:5c:94:43:eb:9f:e3:86:39:7e:b8:88:5d:
                    e1:c6:dc:64:74:48:b0:65:2d:13:b3:59:1c:ba:fe:
                    7e:5b:e2:af:7b:93:ea:ec:e9:e1:51:ae:03:05:3d:
                    26:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:CC:A8:36:A1:0F:C1:9F:CA:42:D3:02:4A:FF:65:74:98:F3:F3:C8
            X509v3 Authority Key Identifier:
                keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e37322e302f32342d3234203d3e20323131323337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.37.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:25:da:13:fb:ea:55:8b:79:d2:d5:65:ee:5a:45:c5:43:57:
         e6:03:40:17:82:9a:41:6b:4e:e2:35:e7:cc:28:2a:c6:a8:41:
         dc:1d:26:c5:f2:a8:de:e4:44:6b:30:b0:39:1a:b7:46:7e:3e:
         f9:75:87:06:6d:45:64:b2:83:f1:39:15:77:8a:9f:16:e4:9c:
         7f:43:b9:3b:6d:e5:17:5b:47:bb:57:b5:3e:8e:0e:0c:96:c9:
         a1:c9:bf:23:14:4a:a2:27:82:db:7b:c5:23:b0:5f:29:71:58:
         cf:6c:0e:4f:a2:5b:1e:1d:c2:13:40:b4:b1:9d:78:f6:40:49:
         a3:51:1c:c6:34:34:3e:45:af:27:25:4b:83:3f:4c:5f:56:69:
         7b:21:7d:38:f3:08:50:c5:09:83:63:83:1c:6c:c3:1a:61:64:
         c0:c8:ca:f8:71:0a:2a:c9:93:79:9a:8a:8d:e8:18:01:e8:49:
         26:e6:af:dc:e3:ac:78:11:eb:92:ab:c7:6b:bc:f4:a8:11:b7:
         34:cd:30:18:61:7b:5c:a6:ce:94:09:a4:67:5d:4a:4c:15:27:
         2c:f2:46:74:42:7b:e9:28:d2:c5:55:a3:c2:f2:84:14:d8:bc:
         91:c5:85:a0:04:e0:f5:1b:c2:64:51:ff:5b:35:dd:62:ac:ca:
         43:6b:a0:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:00 2024 by rpki-client on console-ams.rpki-client.org