Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e37362e302f32342d3234203d3e20313335373532.roa
File:                     37372e33372e37362e302f32342d3234203d3e20313335373532.roa (raw, json)
Hash identifier:          KAhLI7Zf9qc8QSpIvzApu4XcVqLOLUHN6Jn3cK6P3ns=
Subject key identifier:   34:92:E6:1F:60:7A:5A:2C:58:E1:25:D9:17:B6:16:30:C1:CB:25:46
Certificate issuer:       /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial:       25A8E8E1D96E638C14FC022BEAB779365C1586B4
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e37362e302f32342d3234203d3e20313335373532.roa
Signing time:             Mon 13 Feb 2023 10:40:00 +0000
ROA not before:           Mon 13 Feb 2023 10:35:00 +0000
ROA not after:            Mon 12 Feb 2024 10:40:00 +0000
asID:                     135752
IP address blocks:        77.37.76.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:a8:e8:e1:d9:6e:63:8c:14:fc:02:2b:ea:b7:79:36:5c:15:86:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
        Validity
            Not Before: Feb 13 10:35:00 2023 GMT
            Not After : Feb 12 10:40:00 2024 GMT
        Subject: CN=3492E61F607A5A2C58E125D917B61630C1CB2546
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:3a:d2:9f:e5:31:1e:5e:c4:15:49:cd:86:fd:
                    7d:b4:fb:ee:9f:59:60:ef:87:59:c8:94:e2:ae:e2:
                    5d:7d:13:19:17:5f:e3:6d:3d:0e:c0:e2:a1:00:88:
                    a8:a9:67:12:b8:a4:84:f1:15:25:d6:df:87:f1:d7:
                    1e:d5:c3:bb:cc:0f:76:8c:a1:4c:9a:78:8b:3a:7d:
                    bf:22:e6:a6:77:87:85:29:99:57:dc:74:03:71:05:
                    d8:66:fa:0a:ce:f1:d6:34:07:5d:4f:9b:14:51:e2:
                    d5:e3:8b:2d:ca:07:f7:ca:25:32:30:d0:54:82:51:
                    fb:f4:55:9d:80:22:db:be:69:dc:36:50:84:39:09:
                    bb:4d:d6:27:88:af:01:08:8a:a2:8a:f6:a6:2a:87:
                    93:59:1c:75:53:18:3e:41:bf:f4:68:f4:cf:d1:e3:
                    4a:0f:fc:a1:18:d3:ba:32:69:e8:75:0b:11:01:55:
                    70:02:3d:b6:a3:64:73:fc:44:4f:f3:58:e7:0b:2f:
                    d5:ea:db:32:60:c8:98:ae:f2:4f:60:b7:a2:b7:76:
                    60:85:85:6d:f0:34:a6:b1:74:22:9f:84:cd:51:ab:
                    7b:8c:f2:b6:1c:2b:03:58:66:6c:52:54:35:43:1d:
                    93:98:8d:b3:76:a3:18:e6:69:c5:e2:f6:fa:7b:01:
                    d3:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:92:E6:1F:60:7A:5A:2C:58:E1:25:D9:17:B6:16:30:C1:CB:25:46
            X509v3 Authority Key Identifier:
                keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e37362e302f32342d3234203d3e20313335373532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.37.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:b5:51:fa:12:fc:f4:c4:7e:05:e7:ba:d6:6b:b4:2d:d8:e5:
         2d:0d:50:12:51:95:81:90:ac:19:24:fe:6f:c5:7d:fc:b4:44:
         98:6e:98:88:82:98:56:f7:b8:88:63:a0:cf:c4:ee:5e:82:fa:
         97:c5:d5:c5:e7:cb:74:04:b8:c8:42:69:fc:f7:e4:38:7f:cc:
         f5:67:17:4a:19:17:ed:67:a5:c0:7d:8e:80:63:c8:08:a8:3b:
         80:49:bc:fa:6c:f2:09:eb:bc:26:71:ce:6b:9c:12:17:ee:3c:
         6e:f3:d2:40:e4:d9:0c:7a:44:8f:c3:bd:82:25:de:3f:70:8b:
         bc:07:cf:31:9c:26:e8:8a:0c:a3:8b:11:6a:4d:a3:8f:73:9a:
         0e:f7:26:c5:6f:cb:94:87:54:0c:88:7a:0e:c9:af:24:46:91:
         12:5e:24:20:51:8e:88:be:e6:f0:cf:ed:14:46:f6:53:d3:00:
         dc:56:68:4c:17:ba:f6:7b:2d:8f:b9:6d:88:8b:e5:35:73:f0:
         33:f2:be:54:05:a0:6f:b6:92:83:02:82:3c:68:30:5d:6e:a2:
         79:64:8e:4e:f8:e3:f5:eb:ff:99:b0:4e:a8:60:1f:4c:42:82:
         44:bb:d1:8a:6c:77:ef:3c:aa:0d:4c:1b:77:a7:58:48:11:52:
         c2:75:7b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:12 2024 by rpki-client on console-fra.rpki-client.org