Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3230302e302f32342d3234203d3e203537383434.roa
File:                     39332e3132372e3230302e302f32342d3234203d3e203537383434.roa (raw, json)
Hash identifier:          eOh+S8OXg6Fq+nIw707JLoXkLSu8vpfpRZjjSR2gvig=
Subject key identifier:   0B:BF:9A:AE:36:52:62:03:28:22:3C:F5:75:70:28:06:46:2D:D2:41
Certificate issuer:       /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial:       2B8909F69A77B5EB92E98F68639C07D009AC71D0
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3230302e302f32342d3234203d3e203537383434.roa
Signing time:             Mon 05 Jun 2023 16:03:19 +0000
ROA not before:           Mon 05 Jun 2023 15:58:19 +0000
ROA not after:            Mon 03 Jun 2024 16:03:19 +0000
asID:                     57844
IP address blocks:        93.127.200.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:89:09:f6:9a:77:b5:eb:92:e9:8f:68:63:9c:07:d0:09:ac:71:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
        Validity
            Not Before: Jun  5 15:58:19 2023 GMT
            Not After : Jun  3 16:03:19 2024 GMT
        Subject: CN=0BBF9AAE3652620328223CF575702806462DD241
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ef:b9:44:f5:a3:36:bb:94:74:cd:e6:43:25:
                    69:7a:c9:18:b5:29:9a:bd:f9:16:c9:95:b7:53:26:
                    ed:3b:46:bc:72:38:c4:e7:87:36:79:d8:e7:a8:b5:
                    7e:31:d7:1d:c3:99:9a:dc:50:59:d2:5f:cf:5e:73:
                    12:d0:a1:b6:3d:0e:2d:10:ae:c2:a4:51:b7:35:ae:
                    1c:3f:cf:1f:22:91:f3:22:c0:da:be:20:28:b1:91:
                    a8:d0:b8:c3:a5:bb:5e:d3:83:1d:dc:e3:7c:c1:d1:
                    85:9a:2a:e5:0e:04:60:41:00:54:4b:c0:6b:d7:63:
                    6a:3e:19:73:1a:d2:86:e7:5a:28:f4:67:3b:96:ce:
                    1f:25:2e:ed:0c:c6:88:5f:93:b0:7c:54:d3:a7:fa:
                    98:76:14:ed:06:8e:ed:e3:a0:3f:89:f8:70:4e:0e:
                    fc:0c:c0:b1:83:be:e0:69:17:2f:53:f2:36:3c:28:
                    bc:e6:8d:55:68:13:67:a3:73:97:a1:f9:31:93:2f:
                    68:e8:94:56:de:64:f4:5c:70:50:f1:e3:fd:20:e0:
                    35:fd:5d:ea:32:a8:2c:db:1a:7a:01:9b:7a:cb:25:
                    32:f2:f5:51:ad:a1:94:cc:b8:62:41:f6:4a:53:32:
                    87:f6:41:30:c7:db:f7:57:13:6f:70:fd:b3:3d:31:
                    f0:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:BF:9A:AE:36:52:62:03:28:22:3C:F5:75:70:28:06:46:2D:D2:41
            X509v3 Authority Key Identifier:
                keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3230302e302f32342d3234203d3e203537383434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.127.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:92:2f:dd:1d:c1:07:89:15:5a:b7:23:41:3e:0f:10:1b:d5:
         42:ab:8e:67:0a:b7:86:d2:3c:7f:ac:aa:54:24:21:4e:3f:79:
         7e:0f:cb:d5:09:55:01:d6:ee:5e:9b:5b:48:73:00:bf:4b:2d:
         96:0f:44:8c:ce:1e:3c:81:3c:ef:05:e2:4c:69:8b:c7:09:1b:
         26:9e:ba:49:19:15:56:c9:33:75:2d:a4:2a:d9:a2:25:cf:24:
         c6:0a:36:4a:99:a7:50:f1:22:96:b0:3f:dc:70:61:c2:43:5b:
         e7:f9:73:92:24:80:30:43:be:f9:4e:be:08:d0:3e:2d:d2:d7:
         55:36:f6:37:8d:0f:da:ba:ed:01:f7:8b:3d:ff:7a:1f:6b:16:
         76:3d:e7:45:68:89:0f:9d:49:b9:cd:cf:2b:d2:73:14:59:48:
         b2:b7:58:8c:8c:74:53:37:c8:c1:f2:67:77:cf:09:01:9d:55:
         06:d5:20:8f:c3:a3:a4:bc:94:39:df:17:17:ed:b0:f3:9b:e6:
         3c:9c:a7:ae:7f:61:72:db:fa:0c:f7:09:4b:f5:a8:71:bb:30:
         66:62:85:b7:35:05:9c:7d:a2:d0:e5:9f:58:27:2c:db:e1:a2:
         5e:f4:8a:c6:88:2e:fb:bb:2c:6c:9a:0b:cd:c5:bb:29:a4:39:
         16:b1:1b:d9
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUK4kJ9pp3teuS6Y9oY5wH0AmscdAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTgwNGQxZTJiMTI2MDA2YmZlNTA3OTYzNmE2YThkZGU1
YjdmZDlhNjAeFw0yMzA2MDUxNTU4MTlaFw0yNDA2MDMxNjAzMTlaMDMxMTAvBgNV
BAMTKDBCQkY5QUFFMzY1MjYyMDMyODIyM0NGNTc1NzAyODA2NDYyREQyNDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU77lE9aM2u5R0zeZDJWl6yRi1
KZq9+RbJlbdTJu07RrxyOMTnhzZ52OeotX4x1x3DmZrcUFnSX89ecxLQobY9Di0Q
rsKkUbc1rhw/zx8ikfMiwNq+ICixkajQuMOlu17Tgx3c43zB0YWaKuUOBGBBAFRL
wGvXY2o+GXMa0obnWij0ZzuWzh8lLu0Mxohfk7B8VNOn+ph2FO0Gju3joD+J+HBO
DvwMwLGDvuBpFy9T8jY8KLzmjVVoE2ejc5eh+TGTL2jolFbeZPRccFDx4/0g4DX9
XeoyqCzbGnoBm3rLJTLy9VGtoZTMuGJB9kpTMof2QTDH2/dXE29w/bM9MfDBAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUC7+arjZSYgMoIjz1dXAoBkYt0kEwHwYDVR0j
BBgwFoAUWATR4rEmAGv+UHljamqN3lt/2aYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDAzYTU0MmMtNTczNy00YmVmLTljMzUtM2QxMTNjNmVl
ZTM3LzAvNTgwNEQxRTJCMTI2MDA2QkZFNTA3OTYzNkE2QThEREU1QjdGRDlBNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1dBVFI0ckVtQUd2LVVIbGphbXFOM2x0
XzJhWS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNDAzYTU0MmMt
NTczNy00YmVmLTljMzUtM2QxMTNjNmVlZTM3LzAvMzkzMzJlMzEzMjM3MmUzMjMw
MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTM3MzgzNDM0LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
XX/IMA0GCSqGSIb3DQEBCwUAA4IBAQCski/dHcEHiRVatyNBPg8QG9VCq45nCreG
0jx/rKpUJCFOP3l+D8vVCVUB1u5em1tIcwC/Sy2WD0SMzh48gTzvBeJMaYvHCRsm
nrpJGRVWyTN1LaQq2aIlzyTGCjZKmadQ8SKWsD/ccGHCQ1vn+XOSJIAwQ775Tr4I
0D4t0tdVNvY3jQ/auu0B94s9/3ofaxZ2PedFaIkPnUm5zc8r0nMUWUiyt1iMjHRT
N8jB8md3zwkBnVUG1SCPw6OkvJQ53xcX7bDzm+Y8nKeuf2Fy2/oM9wlL9ahxuzBm
YoW3NQWcfaLQ5Z9YJyzb4aJe9IrGiC77uyxsmgvNxbsppDkWsRvZ
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:00 2024 by rpki-client on console-ams.rpki-client.org