Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3138382e302f32342d3234203d3e20383334.roa
File:                     39332e3132372e3138382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          Uc2f9oeqWDOcvsY3hcxq9sgwaumx0Z6xuteF982qzwI=
Subject key identifier:   A3:C3:E8:8E:5D:C2:6E:B9:F4:D1:60:A0:9F:12:1B:D7:D7:1C:03:4A
Certificate issuer:       /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial:       7526C8E6EB5D669C5A40E26647AB2FB6220B9745
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3138382e302f32342d3234203d3e20383334.roa
Signing time:             Mon 14 Aug 2023 00:00:15 +0000
ROA not before:           Sun 13 Aug 2023 23:55:15 +0000
ROA not after:            Mon 12 Aug 2024 00:00:15 +0000
asID:                     834
IP address blocks:        93.127.188.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:26:c8:e6:eb:5d:66:9c:5a:40:e2:66:47:ab:2f:b6:22:0b:97:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
        Validity
            Not Before: Aug 13 23:55:15 2023 GMT
            Not After : Aug 12 00:00:15 2024 GMT
        Subject: CN=A3C3E88E5DC26EB9F4D160A09F121BD7D71C034A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c1:28:95:65:ce:37:b2:18:d5:f4:78:58:19:
                    13:9c:ba:76:c0:fa:7b:5c:a5:43:76:52:f7:5b:4f:
                    f4:54:c1:4d:e9:bf:84:df:7c:2a:2b:b2:94:73:ce:
                    8b:9d:13:7d:8e:22:2f:2e:c6:aa:d1:3a:8f:ac:4c:
                    92:e9:0e:21:83:c5:fd:0c:95:db:16:c4:98:25:ca:
                    e7:2f:58:12:7b:8b:52:06:ac:a2:02:0b:b0:c1:14:
                    e9:85:4a:01:10:90:79:8c:76:f4:6a:1f:1e:d6:6a:
                    2f:d1:da:3b:c3:a3:1a:8d:4a:20:d4:e5:b3:64:34:
                    ec:55:32:92:82:8a:50:1a:f7:9a:a2:19:40:89:6f:
                    f5:62:55:ca:58:1e:5a:93:6d:2a:09:44:2d:83:aa:
                    a9:e7:ca:c6:1f:9e:03:45:6e:13:0e:64:bd:60:60:
                    cf:d5:be:80:fb:f5:0e:30:70:0f:a2:92:56:3f:8f:
                    62:57:3f:7a:3e:38:35:76:dd:7a:5f:94:0d:4e:50:
                    b4:31:79:f9:6e:7d:62:a0:92:ad:95:80:dc:19:27:
                    b3:78:33:69:9f:e5:db:4a:c2:53:df:9b:ad:ea:fb:
                    11:2d:e7:c9:60:13:e5:ef:25:19:3e:6c:1b:d3:3b:
                    6d:25:7b:e1:56:57:b4:6a:3a:dc:a8:05:78:dd:fb:
                    bc:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:C3:E8:8E:5D:C2:6E:B9:F4:D1:60:A0:9F:12:1B:D7:D7:1C:03:4A
            X509v3 Authority Key Identifier:
                keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3138382e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.127.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:2b:4d:52:c5:ee:49:39:f1:36:df:61:d4:92:77:b5:fa:eb:
         3b:b4:6b:0c:6c:af:17:eb:08:61:be:b2:32:d0:2e:d3:34:64:
         ef:6b:d0:1c:37:5a:6a:b9:62:8b:43:7a:57:45:f5:23:38:76:
         2c:43:9b:4b:a3:85:cf:a5:ae:3a:75:77:ef:c2:a5:de:c3:bf:
         e2:83:5d:66:ff:28:0f:0f:d5:e7:eb:5b:36:9b:43:00:96:10:
         20:6a:bc:3e:42:74:94:77:e3:33:a6:25:9f:12:b8:59:ee:f3:
         0f:3d:4d:aa:5a:66:22:10:80:05:fa:43:30:a6:51:1f:96:d3:
         31:b0:84:ec:df:b6:07:60:a0:9e:68:02:1b:1c:bb:71:b7:ea:
         8b:1a:01:10:98:dd:01:b1:2e:04:ba:24:2c:59:b8:28:52:8a:
         b1:33:6e:bb:d0:69:03:a8:95:21:15:3a:5e:05:2a:3e:70:bd:
         eb:fe:a0:9d:84:88:0a:cd:69:0b:59:62:71:57:cd:b9:f6:5e:
         47:31:e3:70:c6:ed:07:cd:2e:f1:05:e3:a4:40:86:24:a2:6f:
         17:01:a9:21:b0:79:c1:9a:97:8f:c9:1c:4b:71:5f:24:25:68:
         06:45:7f:78:d8:08:0f:b5:41:fc:0f:d7:28:2d:88:89:07:96:
         df:e4:9a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:00 2024 by rpki-client on console-ams.rpki-client.org