Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e38342e302f32342d3234203d3e203534383235.roa
File:                     37372e33372e38342e302f32342d3234203d3e203534383235.roa (raw, json)
Hash identifier:          +BV0ncQIq04dRcx2V6OqOchgGjHtTvZIUjNKPsPioe4=
Subject key identifier:   BD:E7:28:15:8F:B6:EF:F3:CA:DB:42:B6:DB:BB:C0:52:2D:46:A0:9F
Certificate issuer:       /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial:       121AC4F8B3D5B2CA23814538ED0B49EDC234E07F
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e38342e302f32342d3234203d3e203534383235.roa
Signing time:             Mon 21 Aug 2023 09:35:47 +0000
ROA not before:           Mon 21 Aug 2023 09:30:47 +0000
ROA not after:            Mon 19 Aug 2024 09:35:47 +0000
asID:                     54825
IP address blocks:        77.37.84.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:1a:c4:f8:b3:d5:b2:ca:23:81:45:38:ed:0b:49:ed:c2:34:e0:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
        Validity
            Not Before: Aug 21 09:30:47 2023 GMT
            Not After : Aug 19 09:35:47 2024 GMT
        Subject: CN=BDE728158FB6EFF3CADB42B6DBBBC0522D46A09F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:40:63:cf:9a:4e:76:c3:93:0b:c0:3e:b4:d7:
                    b3:a3:dc:73:4d:18:35:16:f1:8d:f0:30:c2:45:0b:
                    40:20:72:2d:db:c3:21:bf:68:b5:c3:8d:6d:f7:2f:
                    93:20:1e:b9:4a:d7:60:19:8d:cb:fe:a8:3c:7f:95:
                    d5:79:51:2e:6d:38:83:95:ef:a0:c0:f1:f6:8d:3d:
                    08:8b:4e:54:89:9c:5a:30:4f:b4:ac:69:4b:35:75:
                    cc:9c:52:c3:a8:d8:2c:d0:67:00:59:02:71:0f:21:
                    7e:d4:d2:a6:5e:b3:72:40:fa:80:43:fb:bc:f9:fb:
                    0b:cb:1c:46:09:56:5d:37:66:09:1b:6a:60:aa:8e:
                    71:69:f9:2e:5a:e9:4b:18:92:91:45:a4:01:06:f7:
                    d3:b6:7c:57:c1:d2:fc:95:9f:c5:1c:fa:2d:72:c1:
                    18:88:52:07:14:8f:fe:59:18:3f:6a:3e:ae:6b:eb:
                    4a:44:54:de:06:2b:b0:03:32:24:75:68:6f:0d:74:
                    58:dd:3a:15:a2:0d:f5:81:1b:f1:82:75:84:b2:74:
                    b5:bf:81:eb:98:5b:f9:f3:4f:66:0b:1e:3f:ea:ec:
                    63:47:f2:5a:e2:ea:e2:70:da:49:43:b7:8f:bc:21:
                    55:e5:ee:b6:98:b1:2c:75:52:8e:58:10:6b:59:2d:
                    9a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:E7:28:15:8F:B6:EF:F3:CA:DB:42:B6:DB:BB:C0:52:2D:46:A0:9F
            X509v3 Authority Key Identifier:
                keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e38342e302f32342d3234203d3e203534383235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.37.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:74:63:13:2e:d2:3f:52:e3:cf:86:61:6e:f7:3b:ee:9a:02:
         95:8d:54:37:c2:ed:c3:dd:03:94:1d:39:79:67:f4:fc:ab:cc:
         c9:37:9d:c4:2f:00:9b:90:a4:2f:1d:b1:25:50:57:a6:a2:28:
         eb:bd:c3:6e:7b:c2:48:ab:16:b4:5b:b8:e1:70:fb:bf:93:5f:
         db:78:e0:8f:c4:93:b4:0a:b9:84:3d:fd:2f:89:f9:0c:d3:f5:
         42:06:15:5a:1c:d9:10:45:ba:d1:17:31:f1:93:36:23:89:7d:
         70:31:32:dc:52:30:16:7d:ad:4c:25:71:ce:e8:70:a0:93:b8:
         f0:0a:88:02:ae:ca:1d:c1:21:82:f0:30:65:5e:73:ee:42:e5:
         4f:0d:be:a0:96:12:a9:5e:a2:19:87:ca:c8:12:1c:2a:b2:3b:
         73:d2:c2:3d:50:6d:7b:41:df:6b:30:bf:dc:5a:36:ee:09:d3:
         0c:6e:f7:25:58:6c:dc:e7:e2:68:28:f9:8a:10:4e:96:ab:39:
         31:2e:20:5d:27:97:f3:11:3f:84:24:44:d4:70:60:c1:5c:19:
         96:9f:9f:d6:6d:8a:c1:cb:dd:95:bc:57:da:cc:0c:d9:9c:73:
         83:f1:a2:cb:53:0a:f6:c2:82:c7:88:13:c2:cc:80:13:2b:16:
         2e:64:72:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:12 2024 by rpki-client on console-fra.rpki-client.org