Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e39312e302f32342d3234203d3e203630373231.roa
File:                     37372e33372e39312e302f32342d3234203d3e203630373231.roa (raw, json)
Hash identifier:          TtMpy2wdNyuFGJwCB4bYwce9i3wdCWXJfhnIjIXSi+M=
Subject key identifier:   45:A6:B4:12:1A:D0:B3:C3:FA:6C:67:A1:D0:DE:72:52:9B:39:C8:19
Certificate issuer:       /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial:       0F067864C91878EDFF7392BA58B5B92EDB8BFFFA
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e39312e302f32342d3234203d3e203630373231.roa
Signing time:             Fri 20 Jan 2023 06:26:09 +0000
ROA not before:           Fri 20 Jan 2023 06:21:09 +0000
ROA not after:            Fri 19 Jan 2024 06:26:09 +0000
asID:                     60721
IP address blocks:        77.37.91.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:06:78:64:c9:18:78:ed:ff:73:92:ba:58:b5:b9:2e:db:8b:ff:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
        Validity
            Not Before: Jan 20 06:21:09 2023 GMT
            Not After : Jan 19 06:26:09 2024 GMT
        Subject: CN=45A6B4121AD0B3C3FA6C67A1D0DE72529B39C819
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:24:1b:2e:1b:3e:16:96:2e:2c:38:1f:64:e9:
                    df:b0:ab:34:9c:6d:62:68:15:f7:66:2b:24:00:bf:
                    e5:40:1c:55:45:87:47:0d:7d:cf:72:91:3d:53:ae:
                    89:d1:fe:a5:18:02:b2:78:4c:a4:68:4a:ee:11:f0:
                    b4:0e:2a:1c:ae:2b:46:41:07:de:c7:08:1f:d5:c1:
                    2e:9d:53:3d:5a:58:1a:0d:0b:7a:1c:8f:de:c4:3f:
                    53:fa:b1:90:60:0b:d8:ad:65:4a:31:cc:9a:cc:22:
                    45:2e:06:f6:61:c6:99:07:59:b4:9c:ae:63:2e:46:
                    63:da:98:d9:2e:cc:03:43:27:bd:3a:2f:6f:f1:f2:
                    09:71:77:09:1a:a4:34:ea:eb:9b:79:ad:fa:cb:09:
                    b9:7f:a9:db:d3:90:9c:f4:33:4d:de:37:e7:e5:37:
                    2d:ad:d9:9f:5e:a2:ee:34:88:72:9c:5d:65:ee:62:
                    14:19:b9:ef:3b:40:45:3d:91:03:34:20:f5:98:4b:
                    a0:b5:57:cf:65:d8:e3:b8:ac:4d:7f:f8:17:ce:6f:
                    d5:48:7f:dc:45:16:64:49:da:9e:c1:a6:8d:8c:3b:
                    42:1d:0c:28:98:6b:9e:46:c8:58:d9:d6:85:b0:36:
                    ac:f7:64:f2:75:a5:ce:fa:28:82:ab:37:c4:99:10:
                    6b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:A6:B4:12:1A:D0:B3:C3:FA:6C:67:A1:D0:DE:72:52:9B:39:C8:19
            X509v3 Authority Key Identifier:
                keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e39312e302f32342d3234203d3e203630373231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.37.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:7e:c7:3e:3c:30:31:0d:3b:1e:2d:6d:30:6b:34:22:7d:11:
         cc:26:2d:86:a9:04:af:b8:c9:d2:ac:67:e6:ad:d2:11:cf:ae:
         90:44:12:d2:20:e0:27:47:84:3a:a4:9b:98:9a:f5:61:b0:56:
         74:c6:bb:2e:fa:fb:eb:cd:9a:8f:46:76:fc:7d:2e:22:c2:91:
         bc:cc:6f:59:48:5d:4e:32:1d:84:ff:c3:2e:45:33:00:4d:4f:
         cf:2b:e1:17:88:37:9f:37:1f:79:0d:32:23:93:9d:37:f2:86:
         a1:ea:57:57:61:be:b4:7d:d3:22:00:63:97:86:8b:90:f0:61:
         f8:8e:93:83:f0:9c:f9:9f:c5:f9:91:de:74:41:6c:95:3c:0c:
         7a:f2:d7:4c:b0:c1:6d:a7:49:4b:87:2e:e5:ba:f0:f4:e8:1d:
         85:0e:83:aa:72:dc:3a:85:ce:29:3f:9e:0c:33:cb:3c:38:66:
         65:03:78:a6:eb:f1:e4:54:04:99:60:81:65:3c:71:1b:68:7b:
         96:f4:ec:77:54:99:f0:3b:52:50:ff:d5:34:c3:00:d9:28:ff:
         5e:36:de:4e:c5:fd:19:7c:d7:a0:97:50:38:9b:80:29:0b:ca:
         15:d1:f5:ff:1f:b4:2b:cc:93:01:9b:48:2c:bd:ac:3c:22:df:
         14:f7:94:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:12 2024 by rpki-client on console-fra.rpki-client.org