Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3139342e302f32342d3234203d3e203439393939.roa
File:                     39332e3132372e3139342e302f32342d3234203d3e203439393939.roa (raw, json)
Hash identifier:          gHGZSYdh8Rxrclvb10PcOWp/pKo2kSxXq7KvG/03gmw=
Subject key identifier:   A7:32:83:6D:E8:5C:AD:24:2C:30:99:CB:67:45:33:F0:C1:4B:B7:06
Certificate issuer:       /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial:       68946C9AA9DFF4C14581A2845F53174590EE41F3
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3139342e302f32342d3234203d3e203439393939.roa
Signing time:             Tue 11 Apr 2023 19:06:39 +0000
ROA not before:           Tue 11 Apr 2023 19:01:39 +0000
ROA not after:            Tue 09 Apr 2024 19:06:39 +0000
asID:                     49999
IP address blocks:        93.127.194.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:94:6c:9a:a9:df:f4:c1:45:81:a2:84:5f:53:17:45:90:ee:41:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
        Validity
            Not Before: Apr 11 19:01:39 2023 GMT
            Not After : Apr  9 19:06:39 2024 GMT
        Subject: CN=A732836DE85CAD242C3099CB674533F0C14BB706
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:70:ef:06:35:bc:93:d0:5f:17:99:91:74:ec:
                    0d:de:ad:cc:26:6c:0b:4e:fb:f7:73:a7:27:89:5a:
                    15:40:b2:9f:f9:20:b0:8a:ab:2e:66:be:ce:40:64:
                    c3:fe:33:27:42:43:89:91:f6:c9:74:aa:64:4b:66:
                    b0:4f:52:4c:cd:4a:d1:5c:f2:6f:0b:83:b3:9c:0a:
                    c5:c9:b8:8c:85:eb:17:bd:e2:9f:ef:7d:6d:1a:42:
                    cd:ed:d1:2a:88:5a:ac:0c:82:e0:be:2c:ca:82:81:
                    71:a9:a3:4b:2b:92:2e:1a:ef:a8:b2:ee:49:0c:ee:
                    99:0c:1e:7f:a2:67:4b:6a:5d:61:af:25:23:8f:45:
                    bd:4b:bc:9e:1a:93:1f:d7:4e:dd:9e:af:35:b0:65:
                    93:58:cf:85:15:4f:5a:1f:c3:0d:4a:1e:52:81:82:
                    8f:b0:00:d3:18:1f:e9:bf:6d:e0:4a:ab:75:77:14:
                    5c:5d:4b:f4:5e:8e:cc:1c:8c:32:a3:2a:e2:b0:0d:
                    96:03:7c:e8:9c:c0:bf:b7:04:fb:f0:e4:87:de:f4:
                    d4:ba:79:5f:59:01:0e:fc:5e:75:c8:fb:f6:5e:2b:
                    65:f1:8b:46:93:1d:ed:06:6c:77:57:d5:9d:fa:4d:
                    4f:d0:a5:5e:17:cc:d2:f4:8b:ad:0a:16:db:74:b1:
                    3c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:32:83:6D:E8:5C:AD:24:2C:30:99:CB:67:45:33:F0:C1:4B:B7:06
            X509v3 Authority Key Identifier:
                keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3139342e302f32342d3234203d3e203439393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.127.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:b5:3a:5f:ec:32:ec:c1:06:bd:b3:49:0d:ec:94:2f:b5:41:
         36:fe:8f:fe:2d:6d:c6:63:cb:7f:20:58:b9:b0:55:5a:13:5e:
         88:c4:7a:f3:41:b2:6f:4a:19:30:0b:3d:b1:f0:e8:1b:59:47:
         17:d1:6a:5d:32:a2:83:08:a6:04:90:05:88:65:fd:3f:20:73:
         51:d5:93:ed:d0:2c:1f:71:b0:d4:f9:47:cd:f8:45:9c:ed:36:
         d4:b6:dd:0e:7a:2f:fb:c7:4c:1d:e3:66:c1:01:1d:cf:2e:56:
         0a:88:7f:27:25:92:ce:4f:9b:9f:a9:8c:cb:09:62:f7:11:44:
         ae:45:42:c5:02:3f:28:5c:32:12:8d:88:0e:76:9f:78:dd:62:
         7d:ec:c6:78:89:2e:e1:79:f7:7e:a6:2d:51:d5:e3:7c:fe:87:
         2f:f3:44:5a:f9:ec:38:03:b0:64:a3:f6:18:96:4b:96:fe:d3:
         3f:99:1f:d1:7c:76:02:ae:01:fa:43:0c:41:ea:ba:d3:02:c3:
         04:81:97:3a:ce:06:1c:72:2b:1f:49:44:d0:fb:54:12:54:d9:
         ad:00:df:0b:4c:74:71:dd:a4:82:7b:1f:79:45:a1:d1:12:70:
         19:08:b5:e3:90:c2:ec:e3:30:8f:77:cb:a7:32:c4:27:8f:6b:
         a3:f3:36:ea
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUaJRsmqnf9MFFgaKEX1MXRZDuQfMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTgwNGQxZTJiMTI2MDA2YmZlNTA3OTYzNmE2YThkZGU1
YjdmZDlhNjAeFw0yMzA0MTExOTAxMzlaFw0yNDA0MDkxOTA2MzlaMDMxMTAvBgNV
BAMTKEE3MzI4MzZERTg1Q0FEMjQyQzMwOTlDQjY3NDUzM0YwQzE0QkI3MDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDcO8GNbyT0F8XmZF07A3ercwm
bAtO+/dzpyeJWhVAsp/5ILCKqy5mvs5AZMP+MydCQ4mR9sl0qmRLZrBPUkzNStFc
8m8Lg7OcCsXJuIyF6xe94p/vfW0aQs3t0SqIWqwMguC+LMqCgXGpo0srki4a76iy
7kkM7pkMHn+iZ0tqXWGvJSOPRb1LvJ4akx/XTt2erzWwZZNYz4UVT1ofww1KHlKB
go+wANMYH+m/beBKq3V3FFxdS/RejswcjDKjKuKwDZYDfOicwL+3BPvw5Ife9NS6
eV9ZAQ78XnXI+/ZeK2Xxi0aTHe0GbHdX1Z36TU/QpV4XzNL0i60KFtt0sTwRAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUpzKDbehcrSQsMJnLZ0Uz8MFLtwYwHwYDVR0j
BBgwFoAUWATR4rEmAGv+UHljamqN3lt/2aYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDAzYTU0MmMtNTczNy00YmVmLTljMzUtM2QxMTNjNmVl
ZTM3LzAvNTgwNEQxRTJCMTI2MDA2QkZFNTA3OTYzNkE2QThEREU1QjdGRDlBNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1dBVFI0ckVtQUd2LVVIbGphbXFOM2x0
XzJhWS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNDAzYTU0MmMt
NTczNy00YmVmLTljMzUtM2QxMTNjNmVlZTM3LzAvMzkzMzJlMzEzMjM3MmUzMTM5
MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM5MzkzOTM5LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
XX/CMA0GCSqGSIb3DQEBCwUAA4IBAQAttTpf7DLswQa9s0kN7JQvtUE2/o/+LW3G
Y8t/IFi5sFVaE16IxHrzQbJvShkwCz2x8OgbWUcX0WpdMqKDCKYEkAWIZf0/IHNR
1ZPt0CwfcbDU+UfN+EWc7TbUtt0Oei/7x0wd42bBAR3PLlYKiH8nJZLOT5ufqYzL
CWL3EUSuRULFAj8oXDISjYgOdp943WJ97MZ4iS7hefd+pi1R1eN8/ocv80Ra+ew4
A7Bko/YYlkuW/tM/mR/RfHYCrgH6QwxB6rrTAsMEgZc6zgYccisfSUTQ+1QSVNmt
AN8LTHRx3aSCex95RaHREnAZCLXjkMLs4zCPd8unMsQnj2uj8zbq
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:00 2024 by rpki-client on console-ams.rpki-client.org