Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3231322e302f32342d3234203d3e20383334.roa
File:                     39332e3132372e3231322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          X0F77YJiqaJ5sFq6RbbgXoUhg9J6X1WAohDw/S+3eMk=
Subject key identifier:   B4:D6:12:F4:A4:E7:12:A3:28:77:FE:78:88:34:DE:24:C1:D1:25:99
Certificate issuer:       /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial:       62BF6DD68D956FD310C1439A3FE15BEC12D02B28
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3231322e302f32342d3234203d3e20383334.roa
Signing time:             Thu 31 Aug 2023 08:30:05 +0000
ROA not before:           Thu 31 Aug 2023 08:25:05 +0000
ROA not after:            Thu 29 Aug 2024 08:30:05 +0000
asID:                     834
IP address blocks:        93.127.212.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:bf:6d:d6:8d:95:6f:d3:10:c1:43:9a:3f:e1:5b:ec:12:d0:2b:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
        Validity
            Not Before: Aug 31 08:25:05 2023 GMT
            Not After : Aug 29 08:30:05 2024 GMT
        Subject: CN=B4D612F4A4E712A32877FE788834DE24C1D12599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:0c:b9:bc:54:f9:53:3a:0c:cc:e7:59:34:47:
                    04:cc:bf:15:15:ff:3d:c7:ea:e9:19:e7:42:15:62:
                    ee:78:01:fa:b7:e6:d9:d5:8d:8e:02:86:97:2c:f8:
                    99:cf:4c:de:f2:47:fa:49:c0:6a:5f:73:6d:61:1f:
                    2b:03:55:c8:17:88:64:70:0d:43:0b:be:43:b8:d3:
                    f6:63:a2:9d:7b:4b:76:72:59:20:d4:9d:d8:2e:f9:
                    64:6d:65:c3:47:1c:a6:10:30:9a:4b:eb:19:36:9c:
                    d7:5b:33:53:ba:22:7c:d6:f8:9c:68:37:ff:14:54:
                    fb:9c:a6:20:92:30:43:ba:8a:29:72:f1:e4:2f:1a:
                    1c:c7:e7:8c:bc:08:ef:7f:c8:20:27:43:f7:be:45:
                    5a:c0:7f:59:8c:a5:73:4a:be:87:1a:2d:bb:22:17:
                    31:40:a9:2b:3a:13:80:0a:7a:cb:60:97:dc:49:8a:
                    fa:f3:0c:5f:74:3f:a9:4c:15:d1:fd:3e:01:f4:6e:
                    4a:1f:db:a3:bb:43:ee:aa:b1:ec:99:e5:cb:57:b1:
                    94:f7:26:5e:9c:e4:fe:79:da:5d:64:b1:5d:a7:be:
                    ec:6b:0f:b6:e2:c7:5b:71:c4:4e:e5:da:99:7f:8a:
                    e8:9e:e8:b3:44:ab:26:30:31:fe:6b:43:b1:c8:ae:
                    42:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:D6:12:F4:A4:E7:12:A3:28:77:FE:78:88:34:DE:24:C1:D1:25:99
            X509v3 Authority Key Identifier:
                keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3231322e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.127.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:cd:22:5c:5c:e7:f9:bf:41:53:37:b3:63:7c:97:87:03:41:
         1b:9a:55:ed:54:b8:4e:59:34:ff:ee:2d:82:1a:a2:47:58:3b:
         cc:69:f0:36:6f:d1:1f:0e:c1:75:84:7f:83:0e:0e:43:48:c9:
         62:bb:bc:94:0a:13:7d:f3:e4:a4:97:c4:a2:24:45:d7:af:38:
         e6:4a:2c:b1:41:bf:cd:d8:e0:9c:53:30:3c:8e:96:a0:30:56:
         c5:bb:ec:11:bc:51:f2:23:5c:03:c1:62:d2:2f:e0:ae:2b:2a:
         d8:28:76:75:12:83:d1:7e:45:28:f7:c9:dd:2d:87:9e:01:00:
         a1:f9:e8:b3:ad:02:15:5f:46:2f:29:1f:19:e2:9c:9f:55:b6:
         bd:f0:07:f6:08:55:4e:f2:4e:31:60:72:71:71:db:a9:91:8e:
         60:3d:b7:ee:53:13:d3:6d:43:ef:2d:e2:9c:77:9c:93:56:3f:
         0e:cd:db:c6:eb:be:0c:71:b1:7c:08:03:5e:fc:32:dc:2d:fc:
         c5:35:34:b2:b9:31:ba:38:11:a4:aa:65:cb:84:79:45:de:5c:
         47:c7:3a:00:05:83:ce:5d:04:e0:62:d1:fc:2a:84:ba:52:1f:
         62:03:2d:30:fb:9f:12:ad:c1:8f:17:8c:0d:08:52:b1:9c:29:
         64:64:f8:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:00 2024 by rpki-client on console-ams.rpki-client.org