Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3137362e302f32332d3234203d3e20313337343039.roa
File:                     39332e3132372e3137362e302f32332d3234203d3e20313337343039.roa (raw, json)
Hash identifier:          gLqq7+M91MFGR2KiKLxNuzuVwSy43Ajc1RjxYUqWdyk=
Subject key identifier:   F5:A2:84:20:1F:16:4A:AB:99:10:69:6A:02:D1:F2:4D:6E:66:75:0A
Certificate issuer:       /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial:       7AEB487EEAE73B80879CC3877827DD8019F73DF0
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3137362e302f32332d3234203d3e20313337343039.roa
Signing time:             Wed 22 Mar 2023 08:48:33 +0000
ROA not before:           Wed 22 Mar 2023 08:43:33 +0000
ROA not after:            Wed 20 Mar 2024 08:48:33 +0000
asID:                     137409
IP address blocks:        93.127.176.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:eb:48:7e:ea:e7:3b:80:87:9c:c3:87:78:27:dd:80:19:f7:3d:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
        Validity
            Not Before: Mar 22 08:43:33 2023 GMT
            Not After : Mar 20 08:48:33 2024 GMT
        Subject: CN=F5A284201F164AAB9910696A02D1F24D6E66750A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:cf:92:21:8b:f3:17:d3:eb:35:35:1c:e4:8e:
                    c9:d2:44:ee:a5:59:91:6b:f0:c5:37:11:38:11:30:
                    5a:c8:92:3f:be:8a:1e:9d:f0:65:cc:d1:25:27:87:
                    95:39:2c:2d:ed:3d:b5:97:fd:2b:a7:f7:50:a3:7e:
                    6c:79:f7:b5:f9:ab:40:a8:af:cd:92:1d:fa:10:f9:
                    d1:cb:74:f3:ef:08:55:23:45:8c:c0:9b:66:d1:e0:
                    a9:2b:45:2d:5d:9c:21:b9:65:7f:82:d2:b9:a7:95:
                    79:f4:dd:e9:58:45:db:54:8d:ae:ef:97:db:e3:57:
                    62:14:ee:9c:e5:d3:26:d1:9e:98:c5:cf:fb:19:c0:
                    6f:f3:d6:a5:8b:72:c7:bb:cf:6b:54:8e:4b:93:d6:
                    96:34:04:30:7f:74:75:6c:3d:dd:58:aa:85:6a:59:
                    f4:d2:79:1a:36:00:74:04:25:96:ca:0d:01:3d:40:
                    e6:a3:8b:84:7f:00:b8:fd:a3:5a:7e:fa:50:e9:7e:
                    be:1a:79:f7:c0:5a:f8:d9:23:27:ed:17:0d:5f:9f:
                    4d:a1:bc:7a:88:e1:c8:53:e9:d8:df:0d:0c:3b:a7:
                    db:92:b9:10:b5:2b:76:94:72:50:bf:43:e4:c5:73:
                    19:96:d5:e6:20:b2:50:18:a4:17:24:8b:0c:e8:59:
                    4a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:A2:84:20:1F:16:4A:AB:99:10:69:6A:02:D1:F2:4D:6E:66:75:0A
            X509v3 Authority Key Identifier:
                keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3137362e302f32332d3234203d3e20313337343039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.127.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         56:92:32:82:ea:67:b7:71:34:3d:ec:5d:c9:37:37:9e:21:86:
         80:2d:6a:90:97:9f:a9:f3:66:bf:7c:5d:ad:4d:49:aa:84:a8:
         35:58:29:fc:01:32:fd:0e:f1:f3:28:ae:a8:ac:40:a4:6e:e3:
         ca:62:5f:9c:91:8f:63:7b:7d:e3:d4:7a:bc:83:fd:b6:17:69:
         a9:ef:cc:60:ff:ab:17:58:ed:ab:e0:a8:49:2a:44:4a:51:36:
         d5:f2:fa:f3:53:cf:77:f1:b0:23:04:32:98:f0:6b:6c:3f:95:
         13:fb:77:8e:66:ba:ac:86:8b:29:39:86:71:91:d3:e3:61:c8:
         a2:a5:59:ca:c4:2b:1f:d8:f6:0f:80:b6:78:d2:a4:6d:47:6e:
         7e:22:fb:7b:88:4a:81:c3:da:e5:25:bb:1b:61:d7:05:1a:48:
         94:7d:93:3e:87:e6:b7:4c:e6:59:90:1b:b4:e2:73:37:af:a2:
         ea:3c:62:cf:c2:9a:c3:58:4e:72:76:50:df:e7:75:23:c1:ab:
         5b:69:5a:90:59:17:c6:a3:01:57:b1:d8:c1:a8:2e:ab:b1:a1:
         73:70:c5:30:c3:47:de:d4:0c:41:fe:10:7d:f9:0b:3d:fe:02:
         5f:c1:f9:fb:c6:35:cf:0e:f9:d3:4f:27:dc:1b:b7:10:f1:28:
         76:34:86:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:12 2024 by rpki-client on console-fra.rpki-client.org