Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7dfc5ca1-6c92-4f33-9364-c5ed35b2b682/0/36322e3132322e3138362e302f32342d3234203d3e203631333137.roa
File:                     36322e3132322e3138362e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          mcDO3drfaZQudXPxLI7xgMTkkMByzqhvrzpS66D48pg=
Subject key identifier:   24:60:64:52:20:F3:EF:92:76:1D:17:D0:86:07:B2:54:BD:C2:FB:E5
Certificate issuer:       /CN=be1602129721f44032c45a0138dd897317b19cc5
Certificate serial:       18F14B995E9782056C825556DFE7140D5F87F151
Authority key identifier: BE:16:02:12:97:21:F4:40:32:C4:5A:01:38:DD:89:73:17:B1:9C:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vhYCEpch9EAyxFoBON2JcxexnMU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/7dfc5ca1-6c92-4f33-9364-c5ed35b2b682/0/36322e3132322e3138362e302f32342d3234203d3e203631333137.roa
Signing time:             Thu 06 Apr 2023 20:40:24 +0000
ROA not before:           Thu 06 Apr 2023 20:35:24 +0000
ROA not after:            Thu 04 Apr 2024 20:40:24 +0000
asID:                     61317
IP address blocks:        62.122.186.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:f1:4b:99:5e:97:82:05:6c:82:55:56:df:e7:14:0d:5f:87:f1:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be1602129721f44032c45a0138dd897317b19cc5
        Validity
            Not Before: Apr  6 20:35:24 2023 GMT
            Not After : Apr  4 20:40:24 2024 GMT
        Subject: CN=2460645220F3EF92761D17D08607B254BDC2FBE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:04:1c:79:e7:ef:ae:8a:0d:49:8c:d0:b3:42:
                    ed:22:7e:1d:f2:e2:9b:ea:3e:11:dc:16:98:c8:7c:
                    73:c2:89:d9:de:77:76:a1:d8:06:d5:e9:e3:a5:bb:
                    74:a4:9b:28:b6:3a:31:c5:ce:f9:7c:47:20:91:22:
                    41:15:0a:af:30:1d:74:d3:82:e3:9a:0e:c7:69:09:
                    19:ce:a4:15:6a:1a:8e:85:e5:2c:75:29:73:4e:7e:
                    f5:82:c0:6a:60:17:82:7c:20:8b:dc:11:7d:20:3d:
                    5d:df:5b:f6:69:d7:f2:bb:ad:5e:1e:ee:46:da:b6:
                    bf:b9:38:10:17:67:1b:0c:7b:7a:d4:c3:cc:60:53:
                    b8:9a:65:9c:01:2d:57:27:29:0c:92:80:89:09:52:
                    51:0e:db:b5:43:55:2f:2b:b9:4f:ba:e1:fc:ba:4e:
                    8b:15:d9:0f:e6:de:26:c5:96:17:4e:ed:eb:a4:94:
                    3e:8f:82:d3:dc:a4:81:58:20:74:f9:b7:33:4d:ef:
                    5c:46:44:56:dd:ca:29:f5:a4:f6:83:f0:48:b5:bb:
                    7d:38:f7:5c:ad:84:e2:f9:ca:1d:62:42:9c:ed:9d:
                    a8:37:65:02:dc:cc:ca:cb:e9:d3:70:22:f8:90:0b:
                    97:69:c4:1d:e5:b6:50:ad:c9:6a:27:fc:35:65:a9:
                    2b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:60:64:52:20:F3:EF:92:76:1D:17:D0:86:07:B2:54:BD:C2:FB:E5
            X509v3 Authority Key Identifier:
                keyid:BE:16:02:12:97:21:F4:40:32:C4:5A:01:38:DD:89:73:17:B1:9C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/7dfc5ca1-6c92-4f33-9364-c5ed35b2b682/0/BE1602129721F44032C45A0138DD897317B19CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vhYCEpch9EAyxFoBON2JcxexnMU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7dfc5ca1-6c92-4f33-9364-c5ed35b2b682/0/36322e3132322e3138362e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.122.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:b7:04:c1:0b:34:4f:cd:81:3c:ee:ac:ab:47:08:cc:db:5b:
         73:79:af:eb:7a:df:24:77:15:9a:2e:a8:6f:c0:e0:95:a3:da:
         6b:50:bd:32:63:c0:ee:9e:de:1a:5c:64:93:3b:4c:04:be:69:
         b2:f2:0d:8f:f5:8b:a7:05:35:05:3a:1c:6f:7e:36:ea:82:58:
         76:bf:2c:78:ed:10:41:d2:b6:ec:19:b5:a6:24:fa:78:54:d8:
         46:3a:18:b2:31:84:0a:38:5c:a8:94:07:b2:39:21:79:77:cd:
         ce:b4:ed:1e:2d:08:02:2f:36:94:58:b3:b8:10:c2:c7:ba:00:
         30:ff:e7:54:ea:19:41:7b:1a:24:dc:ce:d4:a1:4f:fc:d5:c4:
         a4:ca:9d:bb:f9:1a:50:16:ec:59:08:45:65:9e:85:79:cf:e3:
         16:bb:90:54:b7:19:15:5a:5e:17:19:61:16:b7:46:a9:d7:c5:
         93:73:5e:9a:8d:2f:59:41:2d:12:3c:a3:1c:cd:cf:16:0d:e2:
         1b:9a:6f:e1:72:22:fd:8b:4c:31:a9:4b:cb:2b:02:45:ed:7a:
         9f:c2:88:46:bf:c1:33:d8:e3:8f:11:5d:be:91:55:46:8a:f5:
         a4:19:80:b1:49:02:0c:43:c2:22:d5:cb:b8:4b:0e:c4:1c:7c:
         f5:f8:e9:fb
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUGPFLmV6XggVsglVW3+cUDV+H8VEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYmUxNjAyMTI5NzIxZjQ0MDMyYzQ1YTAxMzhkZDg5NzMx
N2IxOWNjNTAeFw0yMzA0MDYyMDM1MjRaFw0yNDA0MDQyMDQwMjRaMDMxMTAvBgNV
BAMTKDI0NjA2NDUyMjBGM0VGOTI3NjFEMTdEMDg2MDdCMjU0QkRDMkZCRTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiBBx55++uig1JjNCzQu0ifh3y
4pvqPhHcFpjIfHPCidned3ah2AbV6eOlu3Skmyi2OjHFzvl8RyCRIkEVCq8wHXTT
guOaDsdpCRnOpBVqGo6F5Sx1KXNOfvWCwGpgF4J8IIvcEX0gPV3fW/Zp1/K7rV4e
7kbatr+5OBAXZxsMe3rUw8xgU7iaZZwBLVcnKQySgIkJUlEO27VDVS8ruU+64fy6
TosV2Q/m3ibFlhdO7euklD6PgtPcpIFYIHT5tzNN71xGRFbdyin1pPaD8Ei1u304
91ythOL5yh1iQpztnag3ZQLczMrL6dNwIviQC5dpxB3ltlCtyWon/DVlqSuhAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUJGBkUiDz75J2HRfQhgeyVL3C++UwHwYDVR0j
BBgwFoAUvhYCEpch9EAyxFoBON2JcxexnMUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvN2RmYzVjYTEtNmM5Mi00ZjMzLTkzNjQtYzVlZDM1YjJi
NjgyLzAvQkUxNjAyMTI5NzIxRjQ0MDMyQzQ1QTAxMzhERDg5NzMxN0IxOUNDNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ZoWUNFcGNoOUVBeXhGb0JPTjJKY3hl
eG5NVS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvN2RmYzVjYTEt
NmM5Mi00ZjMzLTkzNjQtYzVlZDM1YjJiNjgyLzAvMzYzMjJlMzEzMjMyMmUzMTM4
MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMxMzMzMTM3LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
Pnq6MA0GCSqGSIb3DQEBCwUAA4IBAQBttwTBCzRPzYE87qyrRwjM21tzea/ret8k
dxWaLqhvwOCVo9prUL0yY8Dunt4aXGSTO0wEvmmy8g2P9YunBTUFOhxvfjbqglh2
vyx47RBB0rbsGbWmJPp4VNhGOhiyMYQKOFyolAeyOSF5d83OtO0eLQgCLzaUWLO4
EMLHugAw/+dU6hlBexok3M7UoU/81cSkyp27+RpQFuxZCEVlnoV5z+MWu5BUtxkV
Wl4XGWEWt0ap18WTc16ajS9ZQS0SPKMczc8WDeIbmm/hciL9i0wxqUvLKwJF7Xqf
wohGv8Ez2OOPEV2+kVVGivWkGYCxSQIMQ8Ii1cu4Sw7EHHz1+On7
-----END CERTIFICATE-----
Generated at Mon Sep 25 12:06:45 2023 by rpki-client on console-fra.rpki-client.org