Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3230322e302f32342d3234203d3e20383334.roa
File:                     39332e3132372e3230322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          BJGueq0IX4Cc2x18hRlAbDks/Y9t/x4c7m9An5ONo9w=
Subject key identifier:   D2:19:EF:DB:F3:CC:DB:D3:B2:1E:6B:E7:91:44:17:D2:FE:9B:E3:73
Certificate issuer:       /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial:       77CE042B188AC702AF03A130E8F894A96CB35D65
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3230322e302f32342d3234203d3e20383334.roa
Signing time:             Tue 04 Apr 2023 15:00:12 +0000
ROA not before:           Tue 04 Apr 2023 14:55:12 +0000
ROA not after:            Tue 02 Apr 2024 15:00:12 +0000
asID:                     834
IP address blocks:        93.127.202.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:ce:04:2b:18:8a:c7:02:af:03:a1:30:e8:f8:94:a9:6c:b3:5d:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
        Validity
            Not Before: Apr  4 14:55:12 2023 GMT
            Not After : Apr  2 15:00:12 2024 GMT
        Subject: CN=D219EFDBF3CCDBD3B21E6BE7914417D2FE9BE373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c0:94:ab:e4:bd:ba:e2:40:33:18:f0:c7:1d:
                    32:d1:c4:f1:b7:24:a5:61:11:bb:43:1a:9a:25:c1:
                    6f:2d:07:f7:41:4d:38:cf:79:86:2b:a2:ef:ca:f3:
                    8b:27:8c:aa:37:7a:1a:75:a4:5e:1b:2d:55:a2:4c:
                    6f:e5:e8:8f:70:1c:c2:28:c4:b7:a9:6d:c8:9e:e9:
                    e9:3c:29:b4:ae:ea:af:aa:c4:e1:30:cd:ea:c2:6c:
                    6d:07:f9:0a:41:d0:cc:b0:8f:fe:37:54:e4:cf:f0:
                    75:0d:87:f6:b7:30:04:97:b9:bd:12:14:98:a3:6e:
                    f2:34:c6:6b:df:9e:4f:47:01:f6:59:98:ad:a7:99:
                    e3:e9:c3:9b:99:86:46:cc:d4:ac:e0:45:d4:55:85:
                    44:72:95:5d:2a:5b:e1:16:7e:c6:a2:2a:45:60:de:
                    4c:12:61:4e:74:be:5f:48:0e:52:83:1c:e2:35:97:
                    0a:38:a1:9a:65:23:c7:d1:22:5b:83:bd:8e:16:c3:
                    bd:2d:96:67:d1:48:13:d7:53:e5:a3:7f:9b:53:b4:
                    96:a4:4f:e4:a2:8a:2e:5a:17:c2:db:e0:ab:f4:ee:
                    b2:95:c7:ce:15:87:ce:62:fc:89:6e:48:76:e8:e6:
                    fe:b7:4a:5d:84:89:99:9e:7f:29:3c:a7:05:ca:85:
                    6a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:19:EF:DB:F3:CC:DB:D3:B2:1E:6B:E7:91:44:17:D2:FE:9B:E3:73
            X509v3 Authority Key Identifier:
                keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3230322e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.127.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:21:86:52:19:e4:c5:30:43:1e:93:0f:a5:5e:3e:df:e1:0c:
         4f:46:36:17:70:9e:eb:49:e5:4f:8e:0b:9b:1b:69:08:04:d0:
         dd:08:3b:8f:bc:2e:bd:37:21:dc:78:19:13:ff:42:f3:68:43:
         c6:1a:fb:a6:da:f9:45:be:96:f7:0a:07:e6:40:75:89:1e:5b:
         e0:ea:bd:4b:33:42:85:1d:62:33:63:1b:dd:4a:04:b5:fb:c3:
         3b:70:ed:fc:2f:a0:cb:00:ee:bf:68:06:73:3d:3e:0c:9c:c8:
         89:e1:b6:f9:40:43:21:3d:50:1f:4a:40:a2:29:ca:92:b3:91:
         5d:b8:8e:b8:1d:9b:da:47:1f:99:29:0b:39:9d:2a:bb:60:15:
         0d:e0:16:53:d0:ca:3f:25:fb:4c:2f:48:ee:14:cd:2e:36:30:
         80:c9:73:25:85:53:b5:f2:da:59:16:c5:30:57:88:e2:20:35:
         9c:62:87:45:26:01:11:16:c7:16:78:08:33:a6:53:16:e6:d3:
         f5:10:a7:76:0f:10:1c:95:72:e8:85:c0:61:40:63:e6:c7:e2:
         34:41:8e:cf:2e:ce:e7:c2:c8:ca:e7:db:80:ce:f9:f7:c2:13:
         be:c7:1d:fc:85:25:92:c9:11:0a:02:45:ad:1d:ea:10:2d:d9:
         61:0b:55:d4
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUd84EKxiKxwKvA6Ew6PiUqWyzXWUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTgwNGQxZTJiMTI2MDA2YmZlNTA3OTYzNmE2YThkZGU1
YjdmZDlhNjAeFw0yMzA0MDQxNDU1MTJaFw0yNDA0MDIxNTAwMTJaMDMxMTAvBgNV
BAMTKEQyMTlFRkRCRjNDQ0RCRDNCMjFFNkJFNzkxNDQxN0QyRkU5QkUzNzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGwJSr5L264kAzGPDHHTLRxPG3
JKVhEbtDGpolwW8tB/dBTTjPeYYrou/K84snjKo3ehp1pF4bLVWiTG/l6I9wHMIo
xLepbcie6ek8KbSu6q+qxOEwzerCbG0H+QpB0Mywj/43VOTP8HUNh/a3MASXub0S
FJijbvI0xmvfnk9HAfZZmK2nmePpw5uZhkbM1KzgRdRVhURylV0qW+EWfsaiKkVg
3kwSYU50vl9IDlKDHOI1lwo4oZplI8fRIluDvY4Ww70tlmfRSBPXU+Wjf5tTtJak
T+Siii5aF8Lb4Kv07rKVx84Vh85i/IluSHbo5v63Sl2EiZmefyk8pwXKhWoTAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQU0hnv2/PM29OyHmvnkUQX0v6b43MwHwYDVR0j
BBgwFoAUWATR4rEmAGv+UHljamqN3lt/2aYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDAzYTU0MmMtNTczNy00YmVmLTljMzUtM2QxMTNjNmVl
ZTM3LzAvNTgwNEQxRTJCMTI2MDA2QkZFNTA3OTYzNkE2QThEREU1QjdGRDlBNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1dBVFI0ckVtQUd2LVVIbGphbXFOM2x0
XzJhWS5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNDAzYTU0MmMt
NTczNy00YmVmLTljMzUtM2QxMTNjNmVlZTM3LzAvMzkzMzJlMzEzMjM3MmUzMjMw
MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABdf8ow
DQYJKoZIhvcNAQELBQADggEBACohhlIZ5MUwQx6TD6VePt/hDE9GNhdwnutJ5U+O
C5sbaQgE0N0IO4+8Lr03Idx4GRP/QvNoQ8Ya+6ba+UW+lvcKB+ZAdYkeW+DqvUsz
QoUdYjNjG91KBLX7wztw7fwvoMsA7r9oBnM9PgycyInhtvlAQyE9UB9KQKIpypKz
kV24jrgdm9pHH5kpCzmdKrtgFQ3gFlPQyj8l+0wvSO4UzS42MIDJcyWFU7Xy2lkW
xTBXiOIgNZxih0UmAREWxxZ4CDOmUxbm0/UQp3YPEByVcuiFwGFAY+bH4jRBjs8u
zufCyMrn24DO+ffCE77HHfyFJZLJEQoCRa0d6hAt2WELVdQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:12 2024 by rpki-client on console-fra.rpki-client.org