Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3137332e302f32342d3234203d3e203439393939.roa
File:                     39332e3132372e3137332e302f32342d3234203d3e203439393939.roa (raw, json)
Hash identifier:          6Utm8uQ7Y8juhRphRbt+rYEXme5PbzXVYKhQK+nmqoI=
Subject key identifier:   97:40:0A:62:B0:BD:34:F8:6C:F7:B7:44:4D:70:B8:93:F0:B8:0A:CA
Certificate issuer:       /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial:       64D2E1AE24AED44ABE22D7F30C4CE79E12774B5C
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3137332e302f32342d3234203d3e203439393939.roa
Signing time:             Wed 15 Mar 2023 18:47:50 +0000
ROA not before:           Wed 15 Mar 2023 18:42:50 +0000
ROA not after:            Wed 13 Mar 2024 18:47:50 +0000
asID:                     49999
IP address blocks:        93.127.173.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:d2:e1:ae:24:ae:d4:4a:be:22:d7:f3:0c:4c:e7:9e:12:77:4b:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
        Validity
            Not Before: Mar 15 18:42:50 2023 GMT
            Not After : Mar 13 18:47:50 2024 GMT
        Subject: CN=97400A62B0BD34F86CF7B7444D70B893F0B80ACA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8f:e4:70:02:0d:0d:3f:c9:33:d4:0e:7b:0a:
                    28:74:40:7e:dc:33:36:ed:50:d4:d7:ff:52:4e:f8:
                    38:51:01:aa:f6:78:93:55:85:e6:64:fe:9c:e6:7b:
                    56:ae:8b:5d:31:9a:83:8c:18:94:a2:ff:dd:6a:26:
                    66:3b:f8:16:43:0f:55:6f:fc:b7:91:ba:57:be:5b:
                    60:48:52:31:74:01:50:7f:30:0c:3b:06:6a:4d:a1:
                    73:82:ad:7d:d3:a4:fc:14:d7:11:84:e3:00:02:8f:
                    23:f4:52:de:62:66:37:96:91:f4:52:d8:4e:22:0a:
                    f0:d7:5c:3a:f6:5e:f1:70:11:db:43:82:81:be:fe:
                    b7:84:66:fb:57:d8:ba:ff:74:9e:7c:d5:8d:48:29:
                    26:02:4e:8d:ce:d4:f9:37:d1:73:ef:f2:bb:dc:65:
                    54:25:22:5e:f7:cf:5d:d1:3b:8c:6b:fa:81:42:ac:
                    50:d1:a2:22:d0:1e:7a:c7:01:5e:58:54:5f:b9:76:
                    5a:65:49:22:f0:14:ef:48:69:fe:23:48:52:c6:2f:
                    d8:a2:ce:99:0c:84:00:1e:55:23:24:71:08:47:83:
                    c2:aa:64:50:d8:ac:e4:ed:c5:1d:b1:ad:3f:01:ae:
                    9f:9e:e1:c6:a7:12:dc:d7:45:64:d9:4d:b2:24:d2:
                    26:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:40:0A:62:B0:BD:34:F8:6C:F7:B7:44:4D:70:B8:93:F0:B8:0A:CA
            X509v3 Authority Key Identifier:
                keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3137332e302f32342d3234203d3e203439393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.127.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:ea:34:db:db:ef:89:ba:1d:3d:74:c5:bb:60:9b:d5:d8:5a:
         69:af:aa:9b:8f:11:2b:01:cb:46:f5:b1:aa:bf:58:f0:ed:9a:
         10:5a:19:c8:c2:ad:58:ab:9a:51:f2:c8:47:79:fe:c0:3e:24:
         70:31:65:51:ec:da:e1:f9:a9:b3:a5:16:12:50:12:af:91:8e:
         e1:ce:7d:2b:ab:89:a4:87:44:4a:c7:61:1d:2c:75:71:f7:39:
         3e:06:88:1a:0d:72:8c:9e:c4:d0:e3:7b:bc:4a:73:22:4b:e6:
         20:9e:59:38:54:76:a2:c4:22:7e:65:95:9f:14:47:a3:4a:6f:
         6d:b1:a4:ad:3c:cf:ec:d8:c9:9d:8a:9b:e2:dd:58:7c:20:2e:
         50:f8:5f:b4:de:1f:a3:c0:5e:d9:aa:c5:e8:7d:8d:db:94:2f:
         88:4c:ab:3e:75:b2:13:48:d3:02:dd:b0:37:e4:dd:7a:63:3a:
         42:c3:ea:50:26:ca:00:ec:ac:c8:7b:52:82:1a:78:76:9a:ae:
         16:91:a7:8d:8f:40:bb:83:74:be:d6:8b:aa:a9:5b:20:87:48:
         c7:0a:34:83:f6:37:a4:60:5a:c9:f4:94:aa:76:ae:53:6f:e9:
         82:1f:e7:bf:96:5f:2e:6b:52:c0:03:a4:fa:df:e7:74:9c:68:
         53:03:d3:cd
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUZNLhriSu1Eq+ItfzDEznnhJ3S1wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTgwNGQxZTJiMTI2MDA2YmZlNTA3OTYzNmE2YThkZGU1
YjdmZDlhNjAeFw0yMzAzMTUxODQyNTBaFw0yNDAzMTMxODQ3NTBaMDMxMTAvBgNV
BAMTKDk3NDAwQTYyQjBCRDM0Rjg2Q0Y3Qjc0NDRENzBCODkzRjBCODBBQ0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNj+RwAg0NP8kz1A57Cih0QH7c
MzbtUNTX/1JO+DhRAar2eJNVheZk/pzme1aui10xmoOMGJSi/91qJmY7+BZDD1Vv
/LeRule+W2BIUjF0AVB/MAw7BmpNoXOCrX3TpPwU1xGE4wACjyP0Ut5iZjeWkfRS
2E4iCvDXXDr2XvFwEdtDgoG+/reEZvtX2Lr/dJ581Y1IKSYCTo3O1Pk30XPv8rvc
ZVQlIl73z13RO4xr+oFCrFDRoiLQHnrHAV5YVF+5dlplSSLwFO9Iaf4jSFLGL9ii
zpkMhAAeVSMkcQhHg8KqZFDYrOTtxR2xrT8Brp+e4canEtzXRWTZTbIk0iZ3AgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUl0AKYrC9NPhs97dETXC4k/C4CsowHwYDVR0j
BBgwFoAUWATR4rEmAGv+UHljamqN3lt/2aYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDAzYTU0MmMtNTczNy00YmVmLTljMzUtM2QxMTNjNmVl
ZTM3LzAvNTgwNEQxRTJCMTI2MDA2QkZFNTA3OTYzNkE2QThEREU1QjdGRDlBNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1dBVFI0ckVtQUd2LVVIbGphbXFOM2x0
XzJhWS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNDAzYTU0MmMt
NTczNy00YmVmLTljMzUtM2QxMTNjNmVlZTM3LzAvMzkzMzJlMzEzMjM3MmUzMTM3
MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM5MzkzOTM5LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
XX+tMA0GCSqGSIb3DQEBCwUAA4IBAQAY6jTb2++Juh09dMW7YJvV2Fppr6qbjxEr
ActG9bGqv1jw7ZoQWhnIwq1Yq5pR8shHef7APiRwMWVR7Nrh+amzpRYSUBKvkY7h
zn0rq4mkh0RKx2EdLHVx9zk+BogaDXKMnsTQ43u8SnMiS+Ygnlk4VHaixCJ+ZZWf
FEejSm9tsaStPM/s2Mmdipvi3Vh8IC5Q+F+03h+jwF7ZqsXofY3blC+ITKs+dbIT
SNMC3bA35N16YzpCw+pQJsoA7KzIe1KCGnh2mq4WkaeNj0C7g3S+1ouqqVsgh0jH
CjSD9jekYFrJ9JSqdq5Tb+mCH+e/ll8ua1LAA6T63+d0nGhTA9PN
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:12 2024 by rpki-client on console-fra.rpki-client.org