Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3139322e302f32342d3234203d3e20383334.roa
File:                     39332e3132372e3139322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          2/RwSLCcCWKkGDdN9lw+XFOnnzxqG54k7zep6XIzmcI=
Subject key identifier:   8B:8E:EB:B0:78:3B:3F:37:57:1F:96:7B:D1:DC:5C:97:AC:0E:45:5C
Certificate issuer:       /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial:       6EA38C6BD1169FF94B43D3ED3378B0ADD92301A0
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3139322e302f32342d3234203d3e20383334.roa
Signing time:             Tue 01 Aug 2023 00:00:12 +0000
ROA not before:           Mon 31 Jul 2023 23:55:12 +0000
ROA not after:            Tue 30 Jul 2024 00:00:12 +0000
asID:                     834
IP address blocks:        93.127.192.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:a3:8c:6b:d1:16:9f:f9:4b:43:d3:ed:33:78:b0:ad:d9:23:01:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
        Validity
            Not Before: Jul 31 23:55:12 2023 GMT
            Not After : Jul 30 00:00:12 2024 GMT
        Subject: CN=8B8EEBB0783B3F37571F967BD1DC5C97AC0E455C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:3f:05:47:3a:1e:f6:ac:f8:ca:91:5f:c6:26:
                    97:06:78:d3:9e:bf:ff:88:c3:66:80:79:53:ca:35:
                    3d:ad:40:49:b9:f1:23:16:31:40:77:1b:00:f5:bc:
                    7c:5d:ff:dc:7a:aa:3e:28:11:be:ed:f9:48:37:3f:
                    0e:5d:0f:c2:d4:63:5a:a8:c4:ee:06:6f:7f:4d:44:
                    37:1e:a5:96:11:9d:bd:53:42:cf:27:b1:bf:20:1b:
                    c5:f9:2e:dd:73:d6:96:75:c0:3f:39:1b:a4:9a:8d:
                    b7:91:11:53:f0:f0:32:c5:a3:ba:5f:8a:92:38:a2:
                    cc:89:30:a6:b5:51:97:2e:0a:57:e0:70:8b:5c:10:
                    7e:65:8c:eb:c6:1a:e3:fa:30:f4:8b:7a:61:cd:48:
                    d1:d7:ae:09:21:de:a6:b7:e0:ef:03:95:22:0e:c0:
                    eb:b9:e3:37:96:f6:bd:e9:4f:22:c6:6a:3c:17:90:
                    f2:08:fd:3e:95:18:47:f9:01:23:cd:22:c9:a3:fe:
                    07:51:90:b6:d0:af:0c:15:52:1e:92:ed:1c:8e:32:
                    8e:df:43:1b:d6:4f:aa:02:77:b8:d3:50:00:bb:f4:
                    37:60:e3:9d:75:c1:9c:22:d2:25:f1:bd:c9:ea:b9:
                    ac:84:e6:3b:fa:6f:44:8a:99:35:97:5c:c7:1d:f8:
                    5a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:8E:EB:B0:78:3B:3F:37:57:1F:96:7B:D1:DC:5C:97:AC:0E:45:5C
            X509v3 Authority Key Identifier:
                keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3139322e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.127.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:e5:55:9e:14:01:b6:c4:ac:fd:63:9f:ab:dd:68:9f:b2:32:
         c5:f2:04:39:1b:20:e7:24:09:f2:17:b5:34:d1:53:6a:d9:ec:
         78:fe:6e:91:9c:d2:ed:d7:58:d1:98:97:0b:ec:91:b9:66:1b:
         27:99:d8:fc:35:6d:49:60:a5:3f:ab:c0:60:21:59:82:c6:39:
         8e:a5:f9:17:b1:dc:b4:3e:e3:63:55:c8:21:1e:03:c6:2b:85:
         71:c9:04:17:2b:d0:f1:df:0e:bd:91:1a:aa:b9:fb:a0:9c:fb:
         b1:02:4b:8c:fb:73:ae:34:cd:24:47:12:12:cd:6a:a6:7a:b9:
         fa:94:53:3b:51:81:fd:32:e7:24:8c:b7:70:5f:04:e6:51:18:
         bc:0b:95:b3:52:25:8a:94:f3:30:ee:bf:50:5d:13:58:4b:0e:
         54:63:6d:4e:a1:d3:ce:f6:22:37:70:fb:57:f5:b9:11:d4:3f:
         6b:5c:45:96:77:3b:f7:cf:a4:15:c3:81:ae:ff:de:94:b8:e9:
         1a:a0:c6:be:32:a9:00:e1:7d:a4:28:ce:29:3b:35:1a:51:95:
         94:12:25:5c:95:58:b0:f0:22:39:78:8b:34:62:bf:ca:fe:13:
         2e:b1:70:ba:a8:4d:9f:d0:9a:60:a5:30:71:f1:df:d5:e8:42:
         04:bc:0b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:00 2024 by rpki-client on console-ams.rpki-client.org