Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3138332e302f32342d3234203d3e20383334.roa
File:                     39332e3132372e3138332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          0MgOsBFDYaUjhuqMMb6Let7+OAIp+9QdfVvzpjBoUF0=
Subject key identifier:   4A:D4:9A:2E:ED:B0:F7:AA:24:C0:67:47:90:91:10:6E:63:93:E2:68
Certificate issuer:       /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial:       36BB06E6D50E186BA5DCB60E53BD70F6E667137E
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3138332e302f32342d3234203d3e20383334.roa
Signing time:             Thu 01 Jun 2023 00:00:16 +0000
ROA not before:           Wed 31 May 2023 23:55:16 +0000
ROA not after:            Thu 30 May 2024 00:00:16 +0000
asID:                     834
IP address blocks:        93.127.183.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:bb:06:e6:d5:0e:18:6b:a5:dc:b6:0e:53:bd:70:f6:e6:67:13:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
        Validity
            Not Before: May 31 23:55:16 2023 GMT
            Not After : May 30 00:00:16 2024 GMT
        Subject: CN=4AD49A2EEDB0F7AA24C067479091106E6393E268
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:82:5f:af:66:a1:1f:13:50:e4:1b:1d:e9:4c:
                    ef:03:bd:27:a2:59:68:3d:6b:c6:e8:20:87:d8:34:
                    4e:9d:83:b4:9a:5d:98:42:7b:1b:01:65:64:f1:98:
                    f5:2f:5f:ea:5d:bc:86:97:e2:2d:05:26:2d:31:cd:
                    43:bd:6d:f2:24:61:f8:43:72:d8:0e:f2:51:e8:75:
                    c9:fb:f2:0d:41:ba:4b:ed:92:05:12:d6:f4:6b:aa:
                    49:ba:26:14:6d:83:d5:60:ca:da:92:1c:63:24:d9:
                    d0:3f:08:c0:6b:ef:63:d0:99:df:29:59:36:cf:a3:
                    9b:86:29:51:f7:9a:8c:a0:c1:b5:b3:0d:c3:a9:62:
                    fa:c2:14:63:f4:2d:3d:c6:35:4d:c3:c5:51:77:b7:
                    8f:58:ba:e7:41:44:7c:c1:8c:96:21:2d:d1:d8:fb:
                    22:0c:87:7f:97:11:ee:26:1e:7b:7b:27:ef:6f:7a:
                    2e:15:5f:78:d2:60:0c:16:c3:1f:5a:68:1c:8d:09:
                    dd:df:82:74:bf:d8:c6:6a:0a:7f:fe:90:57:ef:eb:
                    62:e9:69:fd:b2:8c:9e:39:8e:dc:0f:0c:41:bb:92:
                    a4:72:67:43:22:30:82:34:99:83:40:0e:ef:d9:8c:
                    e3:63:4c:ec:f6:1b:d5:f7:da:f6:8f:fd:f2:30:1e:
                    a4:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:D4:9A:2E:ED:B0:F7:AA:24:C0:67:47:90:91:10:6E:63:93:E2:68
            X509v3 Authority Key Identifier:
                keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3138332e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.127.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:29:2f:9a:7f:30:39:27:9a:95:f7:be:76:29:6f:46:0d:83:
         71:0a:8b:5d:fb:12:c5:7c:3f:f7:aa:c7:ac:94:d2:e4:74:94:
         dc:09:9c:0c:00:6f:36:a8:d4:c2:33:0d:e7:3d:30:f3:20:7f:
         86:bf:79:74:ae:71:d2:54:98:57:7f:bb:9e:e5:ad:f9:01:68:
         fc:aa:49:c9:f6:23:fa:e7:a2:7f:0c:3c:fc:80:6d:0c:5c:cd:
         2f:87:99:ce:d0:af:ca:59:1e:c5:36:e5:dc:51:a0:75:8d:7b:
         c7:1a:b4:d8:b9:09:7b:6f:e8:99:5f:e9:5c:f0:f5:1a:19:a0:
         36:3f:21:8d:74:50:d7:fc:88:c3:0e:76:eb:a8:1e:18:08:a8:
         0f:d3:a7:84:b9:92:cc:6d:24:e6:2c:5a:14:96:7a:7e:bb:51:
         c7:df:7c:cd:fd:50:9c:2b:8b:77:eb:8d:72:0a:09:50:9c:ff:
         5f:96:08:2d:e4:35:23:a8:c0:aa:7f:72:7a:1b:fe:33:d0:17:
         b6:08:ef:6e:81:03:7e:9e:5e:6e:a7:67:9f:ec:03:6e:46:ed:
         e4:32:1c:8e:df:65:82:8b:10:85:25:39:da:7a:4f:af:e3:e7:
         63:7a:c5:f0:ce:38:3d:72:f1:31:72:2a:ce:43:1f:f5:6d:cb:
         99:0d:20:e0
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUNrsG5tUOGGul3LYOU71w9uZnE34wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTgwNGQxZTJiMTI2MDA2YmZlNTA3OTYzNmE2YThkZGU1
YjdmZDlhNjAeFw0yMzA1MzEyMzU1MTZaFw0yNDA1MzAwMDAwMTZaMDMxMTAvBgNV
BAMTKDRBRDQ5QTJFRURCMEY3QUEyNEMwNjc0NzkwOTExMDZFNjM5M0UyNjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCugl+vZqEfE1DkGx3pTO8DvSei
WWg9a8boIIfYNE6dg7SaXZhCexsBZWTxmPUvX+pdvIaX4i0FJi0xzUO9bfIkYfhD
ctgO8lHodcn78g1BukvtkgUS1vRrqkm6JhRtg9VgytqSHGMk2dA/CMBr72PQmd8p
WTbPo5uGKVH3moygwbWzDcOpYvrCFGP0LT3GNU3DxVF3t49YuudBRHzBjJYhLdHY
+yIMh3+XEe4mHnt7J+9vei4VX3jSYAwWwx9aaByNCd3fgnS/2MZqCn/+kFfv62Lp
af2yjJ45jtwPDEG7kqRyZ0MiMII0mYNADu/ZjONjTOz2G9X32vaP/fIwHqTTAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUStSaLu2w96okwGdHkJEQbmOT4mgwHwYDVR0j
BBgwFoAUWATR4rEmAGv+UHljamqN3lt/2aYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDAzYTU0MmMtNTczNy00YmVmLTljMzUtM2QxMTNjNmVl
ZTM3LzAvNTgwNEQxRTJCMTI2MDA2QkZFNTA3OTYzNkE2QThEREU1QjdGRDlBNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1dBVFI0ckVtQUd2LVVIbGphbXFOM2x0
XzJhWS5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNDAzYTU0MmMt
NTczNy00YmVmLTljMzUtM2QxMTNjNmVlZTM3LzAvMzkzMzJlMzEzMjM3MmUzMTM4
MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABdf7cw
DQYJKoZIhvcNAQELBQADggEBAE4pL5p/MDknmpX3vnYpb0YNg3EKi137EsV8P/eq
x6yU0uR0lNwJnAwAbzao1MIzDec9MPMgf4a/eXSucdJUmFd/u57lrfkBaPyqScn2
I/rnon8MPPyAbQxczS+Hmc7Qr8pZHsU25dxRoHWNe8catNi5CXtv6Jlf6Vzw9RoZ
oDY/IY10UNf8iMMOduuoHhgIqA/Tp4S5ksxtJOYsWhSWen67UcfffM39UJwri3fr
jXIKCVCc/1+WCC3kNSOowKp/cnob/jPQF7YI726BA36eXm6nZ5/sA25G7eQyHI7f
ZYKLEIUlOdp6T6/j52N6xfDOOD1y8TFyKs5DH/Vty5kNIOA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:00 2024 by rpki-client on console-ams.rpki-client.org