Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/AS202749.roa
File:                     AS202749.roa (raw, json)
Hash identifier:          cCswZhCSgQ0P1jU0QmLmzUKkz5MgOC1STKV0dKEae2E=
Subject key identifier:   53:5D:95:B7:38:FB:B9:4E:0D:40:F1:6D:98:E5:D7:B2:49:4B:52:32
Certificate issuer:       /CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Certificate serial:       2F837569DFE17EFC826FB56FDDAC77EEF1A30264
Authority key identifier: 4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/AS202749.roa
Signing time:             Tue 06 Jun 2023 09:25:59 +0000
ROA not before:           Tue 06 Jun 2023 09:20:59 +0000
ROA not after:            Tue 04 Jun 2024 09:25:59 +0000
asID:                     202749
IP address blocks:        178.254.147.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:83:75:69:df:e1:7e:fc:82:6f:b5:6f:dd:ac:77:ee:f1:a3:02:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
        Validity
            Not Before: Jun  6 09:20:59 2023 GMT
            Not After : Jun  4 09:25:59 2024 GMT
        Subject: CN=535D95B738FBB94E0D40F16D98E5D7B2494B5232
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:cb:7d:ec:a5:ff:a8:e9:6a:d3:98:d5:27:09:
                    ea:72:ca:2a:ef:6f:79:c7:c1:20:a6:c3:2e:4b:b3:
                    fd:32:ca:ce:c8:fc:1a:59:e2:39:f0:f1:69:fc:31:
                    99:ad:d9:c4:11:73:54:51:1f:a1:8e:1e:a2:3b:7e:
                    ef:0b:52:86:e0:a9:86:1b:35:2f:35:8f:34:cd:00:
                    83:a5:1a:4b:ae:dc:e0:27:b5:81:42:92:d8:82:65:
                    f6:64:3b:7a:c2:b0:fe:cf:0a:20:30:24:8a:c9:76:
                    93:33:85:a6:d6:14:30:a0:4b:d5:48:2b:eb:db:74:
                    7b:a9:07:14:ac:ac:d0:22:76:90:0a:47:10:ad:66:
                    1b:77:5e:e6:e9:4b:d6:ba:a3:99:20:11:99:99:eb:
                    80:47:c8:15:64:43:0e:a5:e0:cb:69:06:64:30:53:
                    45:d6:59:7d:27:d8:b6:60:79:4f:e9:b1:0a:3c:30:
                    86:af:8a:08:1b:e4:56:e0:33:2d:c2:f3:ab:39:da:
                    4b:3c:84:b1:6d:f7:3f:30:fd:9e:81:e6:4d:79:cc:
                    98:d0:42:07:ec:b6:ca:aa:ee:42:41:20:fb:c1:ae:
                    b7:b3:f6:a6:5c:52:1c:40:b1:68:ec:d1:21:f4:bc:
                    ae:99:ef:74:5e:d8:96:97:16:fe:9a:bc:26:6d:80:
                    31:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:5D:95:B7:38:FB:B9:4E:0D:40:F1:6D:98:E5:D7:B2:49:4B:52:32
            X509v3 Authority Key Identifier:
                keyid:4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/4F9948D82C74F5B80667B4A37394C8A56B7FE484.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/AS202749.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.254.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:3f:51:2e:53:6d:66:0e:99:a7:b7:c2:26:14:f8:f0:99:28:
         67:23:5c:a6:0a:39:08:c0:7b:61:84:a7:fa:d1:02:d7:ae:a8:
         67:2e:4d:88:d8:c6:80:94:69:fe:79:00:5c:21:d1:73:25:e0:
         fe:e2:b5:2f:21:db:ac:9b:88:7c:72:96:ab:42:80:3d:d2:af:
         16:e1:e2:86:0c:57:db:5a:c1:64:38:ff:93:0f:a3:41:57:f2:
         c8:7c:c5:bb:06:d7:2b:86:24:d6:16:cf:48:cd:3b:4a:5f:86:
         22:78:9e:18:9c:86:66:0b:3c:18:e1:0a:db:ff:b0:1a:06:ea:
         e9:32:86:a4:93:dc:e1:a0:4b:a3:e2:19:e0:39:ac:5b:65:4c:
         a4:e6:9a:1b:2a:87:62:99:ba:84:80:69:33:6d:6d:96:0b:a9:
         b4:34:2c:71:11:5d:0a:c7:43:8d:74:e8:93:e8:c7:92:bb:d0:
         42:e5:d3:2b:27:68:70:ed:66:49:50:fd:a0:fc:33:19:b4:46:
         16:ff:05:05:57:bf:34:33:14:e4:6b:c9:c2:c9:3d:66:a2:9c:
         ed:01:03:63:9e:50:c3:68:89:36:d6:a1:31:1b:35:8e:9e:86:
         ed:69:ae:33:01:79:f0:6b:57:23:6f:05:f3:6a:4d:40:f4:fb:
         9b:b0:a5:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:00 2024 by rpki-client on console-ams.rpki-client.org