Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3136332e302f32342d3234203d3e203538323132.roa
File:                     39332e3132372e3136332e302f32342d3234203d3e203538323132.roa (raw, json)
Hash identifier:          vm/q+aHAVPF5lddr3DEjT1NaAvZxuBdctqoDVJc33No=
Subject key identifier:   8B:37:9B:E3:C5:1D:EC:F2:A3:CF:70:50:4F:04:0E:97:54:48:3E:47
Certificate issuer:       /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial:       66E2E8643B4D76599DE92D571C6555841524F557
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3136332e302f32342d3234203d3e203538323132.roa
Signing time:             Fri 20 Jan 2023 06:26:11 +0000
ROA not before:           Fri 20 Jan 2023 06:21:11 +0000
ROA not after:            Fri 19 Jan 2024 06:26:11 +0000
asID:                     58212
IP address blocks:        93.127.163.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:e2:e8:64:3b:4d:76:59:9d:e9:2d:57:1c:65:55:84:15:24:f5:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
        Validity
            Not Before: Jan 20 06:21:11 2023 GMT
            Not After : Jan 19 06:26:11 2024 GMT
        Subject: CN=8B379BE3C51DECF2A3CF70504F040E9754483E47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a9:61:aa:05:2a:c0:cf:c8:e7:61:85:7c:84:
                    ab:aa:64:85:01:5b:13:35:c7:fe:94:9f:c8:e5:c1:
                    aa:ec:c2:8a:6e:4c:3e:c4:ba:55:dd:32:f7:f2:0e:
                    65:16:76:3e:4a:5f:43:e6:ab:4c:aa:61:d4:a5:57:
                    29:17:94:9b:0f:ad:90:3c:81:3b:5a:a5:05:db:b5:
                    b6:07:84:c3:7d:f6:b7:b2:58:9f:18:30:6a:8d:65:
                    19:67:5f:27:0b:02:d9:63:a8:3b:80:41:9a:12:64:
                    53:74:46:b5:40:c5:fa:f1:c5:af:72:59:07:9d:e7:
                    e5:01:d3:be:79:fc:63:b5:8d:cb:c2:85:cf:a6:b2:
                    96:1e:55:37:ec:44:c6:71:d0:e1:cc:5f:07:cd:8b:
                    24:54:e5:f9:31:b6:86:ff:89:8e:e7:14:d7:28:56:
                    c2:bb:f0:6b:d1:b4:89:0f:ab:5c:0f:c8:2d:66:b6:
                    aa:c0:a7:a9:3b:bf:d1:52:4b:db:db:51:97:13:e4:
                    c9:30:fc:8d:e4:0c:c1:d8:f3:20:2b:d3:28:6a:88:
                    b7:31:e8:81:6b:48:07:d5:ff:a4:9a:2c:d2:9b:4c:
                    50:ce:03:c0:86:39:8a:11:ec:dc:f7:57:2d:33:d7:
                    e1:60:7a:76:22:95:db:3a:33:dd:98:e9:ae:be:b9:
                    ed:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:37:9B:E3:C5:1D:EC:F2:A3:CF:70:50:4F:04:0E:97:54:48:3E:47
            X509v3 Authority Key Identifier:
                keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3136332e302f32342d3234203d3e203538323132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.127.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:83:fc:95:a6:c1:ec:a2:cf:34:f1:6f:21:66:82:97:56:90:
         51:9d:b5:ee:f1:1c:9c:ef:6a:22:58:43:be:d8:42:7c:a2:e5:
         67:db:5d:ad:2c:8d:0e:ae:2a:4b:0b:ed:72:3e:c1:b1:d8:86:
         cd:f1:c8:a1:f0:b7:ee:77:d0:76:f0:68:ba:0b:95:17:e7:47:
         53:34:62:53:35:c9:e2:c7:fa:0a:c7:99:1d:d7:c5:1a:8f:47:
         d8:f5:d1:9b:8c:04:96:d7:9d:94:b6:7b:e9:e8:ec:7c:44:29:
         49:61:70:0f:0a:af:71:68:c7:4a:00:3c:a7:cc:32:61:f4:59:
         21:aa:b6:3a:f3:56:4d:34:a9:eb:21:5f:74:27:13:94:96:8f:
         23:dd:50:d6:c3:2e:a3:57:41:84:c3:be:09:9b:b0:f7:22:93:
         a7:58:8a:d8:75:ec:c0:9f:b7:e7:fd:46:d2:5e:80:28:6b:9c:
         d8:1f:57:e9:43:c9:60:74:a6:4e:41:57:03:fd:21:de:38:84:
         84:2c:fe:5a:fd:26:48:f0:1c:85:2f:6d:81:9a:88:ec:d9:59:
         17:b2:6a:42:ec:c3:75:92:1d:b3:80:08:48:02:8c:a3:6f:59:
         56:6d:c5:3a:48:71:97:a9:b9:02:84:16:81:1f:6a:e5:3a:8b:
         28:c0:40:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:12 2024 by rpki-client on console-fra.rpki-client.org