Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3138342e302f32342d3234203d3e203531353539.roa
File:                     39332e3132372e3138342e302f32342d3234203d3e203531353539.roa (raw, json)
Hash identifier:          tf+v2kS/I+aN5g8Z2ma5wvRIuwsUhqn8Ju+QgVffVGM=
Subject key identifier:   22:8C:28:A5:EE:D1:0B:73:C3:2D:79:82:48:6D:91:97:BD:93:64:3C
Certificate issuer:       /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial:       44960A8110A4248A72C91A64DBE5F17574B3F954
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3138342e302f32342d3234203d3e203531353539.roa
Signing time:             Thu 06 Apr 2023 23:04:05 +0000
ROA not before:           Thu 06 Apr 2023 22:59:05 +0000
ROA not after:            Thu 04 Apr 2024 23:04:05 +0000
asID:                     51559
IP address blocks:        93.127.184.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:96:0a:81:10:a4:24:8a:72:c9:1a:64:db:e5:f1:75:74:b3:f9:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
        Validity
            Not Before: Apr  6 22:59:05 2023 GMT
            Not After : Apr  4 23:04:05 2024 GMT
        Subject: CN=228C28A5EED10B73C32D7982486D9197BD93643C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a8:12:74:3b:cc:cf:48:e7:14:1c:55:a2:13:
                    49:3f:5c:73:ce:26:16:57:78:fe:0d:1d:96:50:2d:
                    84:0e:0f:e8:c5:15:44:9f:f6:b1:c0:2a:50:cf:d6:
                    89:2b:64:b0:74:00:02:2f:b6:47:c4:c3:34:de:5d:
                    b6:70:1c:32:c5:97:57:f3:08:ed:dc:42:af:55:63:
                    7f:2f:9e:b7:52:44:e1:6e:71:0c:5a:74:f8:d1:35:
                    ef:ee:16:be:03:57:b5:83:87:d3:2f:d9:1d:52:42:
                    96:49:1c:e8:dd:df:1b:c2:45:30:ec:b8:c7:b1:83:
                    86:e2:43:c3:5b:d6:43:7f:9d:53:e2:47:13:cf:cb:
                    bb:c8:7f:55:27:3c:36:bd:1d:6d:23:47:a4:27:e5:
                    ca:1e:ea:c5:90:35:b8:fb:f1:cf:8f:6f:63:4a:56:
                    5e:19:1e:db:55:39:0d:61:20:9d:2b:90:b8:35:a5:
                    4f:73:a7:2c:0c:0c:ce:8f:a0:66:eb:7e:74:51:50:
                    9b:15:d4:8f:e9:21:ad:78:45:26:88:6f:fc:41:30:
                    f3:62:e3:54:f1:72:5a:ac:a2:c5:a8:0e:7f:0c:69:
                    8a:2e:4b:43:61:06:be:f9:68:26:4d:ac:e8:07:19:
                    85:b2:9d:e1:89:29:2c:0b:1b:64:6c:23:1e:de:6d:
                    7e:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:8C:28:A5:EE:D1:0B:73:C3:2D:79:82:48:6D:91:97:BD:93:64:3C
            X509v3 Authority Key Identifier:
                keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3138342e302f32342d3234203d3e203531353539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.127.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:ee:95:89:ba:30:c7:24:eb:42:85:36:72:b7:a0:64:03:12:
         2c:f5:e9:32:77:2f:2e:be:bd:e2:a8:90:8f:0c:27:f3:bf:56:
         14:81:fc:b6:73:c5:a9:85:98:db:ff:d8:3a:36:c8:2e:6f:fb:
         75:00:34:cb:b8:da:6d:a1:73:ac:9c:4e:66:44:42:20:bd:0e:
         d9:36:02:45:20:60:89:55:bc:51:ca:8f:44:6e:d4:f6:cb:f8:
         98:e0:46:7e:f0:b2:71:60:06:df:cc:93:91:2b:9a:a0:29:f0:
         79:07:74:94:d0:b7:eb:d0:e5:92:6c:d3:ac:a7:20:35:56:a4:
         10:f7:05:6e:53:b0:6f:56:7f:2b:06:ac:f6:d4:24:10:3b:61:
         a6:18:e9:81:d8:09:d2:6d:28:dd:8b:1c:a4:6a:86:8a:15:09:
         05:09:a8:e5:eb:5a:16:d2:c1:11:bd:53:fb:a7:eb:fd:b8:3b:
         25:28:4b:73:96:f2:ad:18:d4:25:cb:ae:36:bb:55:d5:32:6f:
         92:8b:d6:bb:d1:4e:01:ab:fe:4f:11:24:7b:ab:1c:68:d7:30:
         a3:8e:b6:9d:be:3f:f1:41:ca:fc:9d:79:f3:5b:62:f0:80:b8:
         41:44:54:a0:3a:d6:2d:2a:5a:43:24:56:fa:05:d3:7e:c1:81:
         c3:2b:36:98
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIURJYKgRCkJIpyyRpk2+XxdXSz+VQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTgwNGQxZTJiMTI2MDA2YmZlNTA3OTYzNmE2YThkZGU1
YjdmZDlhNjAeFw0yMzA0MDYyMjU5MDVaFw0yNDA0MDQyMzA0MDVaMDMxMTAvBgNV
BAMTKDIyOEMyOEE1RUVEMTBCNzNDMzJENzk4MjQ4NkQ5MTk3QkQ5MzY0M0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfqBJ0O8zPSOcUHFWiE0k/XHPO
JhZXeP4NHZZQLYQOD+jFFUSf9rHAKlDP1okrZLB0AAIvtkfEwzTeXbZwHDLFl1fz
CO3cQq9VY38vnrdSROFucQxadPjRNe/uFr4DV7WDh9Mv2R1SQpZJHOjd3xvCRTDs
uMexg4biQ8Nb1kN/nVPiRxPPy7vIf1UnPDa9HW0jR6Qn5coe6sWQNbj78c+Pb2NK
Vl4ZHttVOQ1hIJ0rkLg1pU9zpywMDM6PoGbrfnRRUJsV1I/pIa14RSaIb/xBMPNi
41TxclqsosWoDn8MaYouS0NhBr75aCZNrOgHGYWyneGJKSwLG2RsIx7ebX6tAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUIowope7RC3PDLXmCSG2Rl72TZDwwHwYDVR0j
BBgwFoAUWATR4rEmAGv+UHljamqN3lt/2aYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDAzYTU0MmMtNTczNy00YmVmLTljMzUtM2QxMTNjNmVl
ZTM3LzAvNTgwNEQxRTJCMTI2MDA2QkZFNTA3OTYzNkE2QThEREU1QjdGRDlBNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1dBVFI0ckVtQUd2LVVIbGphbXFOM2x0
XzJhWS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNDAzYTU0MmMt
NTczNy00YmVmLTljMzUtM2QxMTNjNmVlZTM3LzAvMzkzMzJlMzEzMjM3MmUzMTM4
MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMxMzUzNTM5LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
XX+4MA0GCSqGSIb3DQEBCwUAA4IBAQC57pWJujDHJOtChTZyt6BkAxIs9ekydy8u
vr3iqJCPDCfzv1YUgfy2c8WphZjb/9g6Nsgub/t1ADTLuNptoXOsnE5mREIgvQ7Z
NgJFIGCJVbxRyo9EbtT2y/iY4EZ+8LJxYAbfzJORK5qgKfB5B3SU0Lfr0OWSbNOs
pyA1VqQQ9wVuU7BvVn8rBqz21CQQO2GmGOmB2AnSbSjdixykaoaKFQkFCajl61oW
0sERvVP7p+v9uDslKEtzlvKtGNQly642u1XVMm+Si9a70U4Bq/5PESR7qxxo1zCj
jradvj/xQcr8nXnzW2LwgLhBRFSgOtYtKlpDJFb6BdN+wYHDKzaY
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:12 2024 by rpki-client on console-fra.rpki-client.org