Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e39302e302f32342d3234203d3e20323131323337.roa
File:                     37372e33372e39302e302f32342d3234203d3e20323131323337.roa (raw, json)
Hash identifier:          1UKVjUyc7SiCVf2+81a5amyRiEBykhgcTzagPXY7ZTg=
Subject key identifier:   B7:AC:56:F9:F1:57:91:5F:56:C2:5D:50:DF:A2:77:B4:6E:1D:5A:38
Certificate issuer:       /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial:       54A5D732DA23FEF780B3128549FC683DF0E53864
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e39302e302f32342d3234203d3e20323131323337.roa
Signing time:             Mon 06 Feb 2023 15:29:25 +0000
ROA not before:           Mon 06 Feb 2023 15:24:25 +0000
ROA not after:            Mon 05 Feb 2024 15:29:25 +0000
asID:                     211237
IP address blocks:        77.37.90.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:a5:d7:32:da:23:fe:f7:80:b3:12:85:49:fc:68:3d:f0:e5:38:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
        Validity
            Not Before: Feb  6 15:24:25 2023 GMT
            Not After : Feb  5 15:29:25 2024 GMT
        Subject: CN=B7AC56F9F157915F56C25D50DFA277B46E1D5A38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c6:05:a1:a3:c1:ab:4b:bf:4c:ac:a8:f5:63:
                    df:98:16:c1:7a:ee:b0:e7:66:10:47:27:c0:54:e7:
                    87:fa:4a:86:fb:7b:86:b8:29:88:3e:8d:66:2e:19:
                    d1:ab:10:7a:18:e0:62:da:59:02:6f:c1:cf:84:24:
                    64:6b:c7:38:8e:5d:c7:70:8e:ab:db:f5:d5:61:30:
                    42:57:a9:7a:63:a0:95:72:b8:3d:bf:0e:5b:56:6e:
                    b4:ae:dd:16:ed:2b:c2:71:05:af:6a:98:67:be:d2:
                    43:6d:fa:b0:74:09:76:ac:17:97:9c:d7:04:25:b9:
                    da:94:52:77:51:fd:aa:4b:0a:62:86:c7:9f:13:b8:
                    81:01:a4:3c:2a:ab:c2:68:0f:65:5a:a1:bb:76:32:
                    25:96:90:c9:42:da:dd:51:1a:a0:9f:f7:e4:00:2b:
                    ae:19:ae:b3:1e:fc:fa:c2:cb:50:bc:be:9a:e0:55:
                    b2:59:2b:69:e0:ca:c1:ac:df:23:d3:0e:89:19:d7:
                    ab:de:1d:f6:e8:1c:8e:78:2f:3d:ab:63:5a:5e:69:
                    b4:f6:82:01:36:80:a3:78:ae:97:f5:75:1c:58:5d:
                    fd:b8:79:60:d7:26:eb:d3:6a:c0:d6:96:4a:4c:cb:
                    56:8a:e9:d8:6f:f3:6d:05:1f:2c:97:a4:9f:f0:9f:
                    99:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:AC:56:F9:F1:57:91:5F:56:C2:5D:50:DF:A2:77:B4:6E:1D:5A:38
            X509v3 Authority Key Identifier:
                keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e39302e302f32342d3234203d3e20323131323337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.37.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:4f:b7:34:06:e5:c6:a5:10:93:83:b9:79:92:47:34:a0:43:
         bd:63:8c:a1:80:a3:ca:b6:37:ea:39:4d:60:b7:14:fe:2a:7f:
         86:b5:d7:56:cc:e3:52:d3:8a:8d:30:64:8c:20:5e:ac:43:97:
         98:26:ca:6a:9e:bc:05:6f:b6:60:ad:d4:c3:bc:11:53:42:47:
         60:1c:df:3a:2d:4d:e7:9c:1f:99:5d:c4:19:3a:aa:e2:c4:6d:
         10:d5:85:17:5b:cf:c5:d8:c0:74:9e:d8:f2:b8:2e:74:c3:4a:
         e6:be:2a:8b:b7:8e:c2:5b:74:07:e8:d1:4b:28:f7:92:77:1e:
         61:a0:a8:fc:71:7b:c4:d2:21:ce:fb:37:c2:43:f4:d3:7c:ac:
         92:a1:b7:6f:8f:68:04:d9:0e:76:ce:5a:65:47:e8:cc:a4:a5:
         ae:f6:99:d2:cd:4f:6d:73:2b:fe:9f:87:71:a3:19:a4:1d:39:
         a8:f6:a4:a7:d2:21:dd:1b:84:a6:8e:fc:ad:53:c7:ad:8a:cf:
         ab:74:1d:34:44:b4:a3:7d:89:f0:06:bc:a0:42:0c:6d:23:8f:
         69:e1:9d:e3:ac:f7:e4:e8:82:9f:39:a1:10:30:14:2b:c4:8d:
         ab:01:e7:26:85:98:d7:87:04:a6:e4:59:0f:8f:c4:ec:9c:a5:
         a8:ac:a0:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:12 2024 by rpki-client on console-fra.rpki-client.org