Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e39352e302f32342d3234203d3e203439393939.roa
File:                     37372e33372e39352e302f32342d3234203d3e203439393939.roa (raw, json)
Hash identifier:          4VVSfwE5V22B3F6MXYXjGVTEUaIDO96opF7+Z/3AQmk=
Subject key identifier:   A7:E3:FD:F6:A5:F7:39:3B:43:AB:44:5E:AD:F2:E1:D9:E1:8E:88:7B
Certificate issuer:       /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial:       0E9827B1DDF4C69F926B418C0DAED6F6351D76A0
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e39352e302f32342d3234203d3e203439393939.roa
Signing time:             Fri 20 Jan 2023 06:26:10 +0000
ROA not before:           Fri 20 Jan 2023 06:21:10 +0000
ROA not after:            Fri 19 Jan 2024 06:26:10 +0000
asID:                     49999
IP address blocks:        77.37.95.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:98:27:b1:dd:f4:c6:9f:92:6b:41:8c:0d:ae:d6:f6:35:1d:76:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
        Validity
            Not Before: Jan 20 06:21:10 2023 GMT
            Not After : Jan 19 06:26:10 2024 GMT
        Subject: CN=A7E3FDF6A5F7393B43AB445EADF2E1D9E18E887B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:fc:1c:87:2c:43:6f:cf:cf:dc:74:e2:99:2c:
                    92:4e:c2:da:4f:c7:b7:80:bd:ed:33:c3:cd:09:60:
                    06:af:59:c5:6f:98:fe:f5:4f:de:a0:11:5f:aa:1b:
                    7a:6e:b3:d3:5b:0d:e8:94:6d:4a:c1:8f:5d:d7:2a:
                    fd:ab:5a:6e:46:36:7d:c8:cd:63:d9:4b:aa:53:0d:
                    be:97:96:69:7c:bb:86:da:44:af:f0:1f:3e:19:87:
                    b2:88:02:8a:52:4d:57:fe:83:23:21:c9:3d:81:e2:
                    5e:23:b1:2d:a7:f1:76:5c:a8:41:bd:44:b3:40:fc:
                    d0:ce:c9:41:04:9e:6f:28:ba:e8:56:e1:1a:d5:1f:
                    a4:a8:d5:13:4e:3b:bf:15:e1:14:c0:a7:be:6e:1a:
                    bf:3e:d8:78:fe:f4:4d:0a:91:4a:1a:08:77:dd:c0:
                    bb:c8:a3:1d:e8:9c:bc:2d:3e:07:5d:8b:31:43:09:
                    34:3d:8b:64:67:96:a6:70:c9:01:8e:e3:7d:a8:eb:
                    b9:56:41:f0:0d:dc:e7:af:61:a0:2f:3a:f7:e0:7b:
                    91:2c:ca:39:8b:fc:e7:72:e1:d0:c4:f6:f6:73:78:
                    f5:10:d3:09:c6:23:ef:c4:82:d2:51:3c:15:55:bd:
                    5e:20:b7:c1:3b:82:1b:f9:16:e2:6e:93:c3:8a:e5:
                    0b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:E3:FD:F6:A5:F7:39:3B:43:AB:44:5E:AD:F2:E1:D9:E1:8E:88:7B
            X509v3 Authority Key Identifier:
                keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e39352e302f32342d3234203d3e203439393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.37.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:76:0a:e9:79:5a:e4:f0:e4:d1:b4:fe:dd:a6:b4:64:e1:c7:
         fa:77:74:72:7d:07:47:6f:8c:79:25:11:ec:b3:3c:7c:f5:9c:
         21:79:c5:90:43:15:56:df:f1:fe:89:6c:ad:8b:1a:f6:fb:a9:
         6f:d5:ae:9a:91:fc:af:e0:bf:5c:58:5f:98:ce:ad:19:52:23:
         2f:1c:2c:95:19:a4:43:d8:82:61:48:8d:e5:cc:91:58:cb:46:
         37:cd:67:49:d6:cc:ba:6f:20:49:79:86:a7:46:52:89:59:fe:
         29:70:42:30:0a:bf:c3:dd:f4:60:26:da:6c:96:c1:94:5a:bc:
         8b:8d:e7:a5:6a:9f:6c:1a:77:9a:84:56:29:fd:a4:2d:dc:b1:
         28:27:a8:21:fb:15:c7:a0:d7:2f:05:9a:17:d3:ef:ba:18:4b:
         c2:15:7d:68:cc:dc:69:db:71:ea:c9:90:76:6a:05:3d:4b:d5:
         d4:6e:8a:58:76:97:c1:2f:18:08:81:32:1f:a7:f3:f0:4a:06:
         14:5d:cf:9f:f8:9e:76:9e:5a:77:93:31:c2:2c:e9:b4:c8:12:
         56:0d:11:8f:a9:21:71:8d:db:90:36:cb:33:54:ea:bd:31:e4:
         29:5c:bd:80:39:6b:49:ca:cf:78:ba:95:49:ba:35:30:c8:b9:
         f9:9e:68:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:00 2024 by rpki-client on console-ams.rpki-client.org