Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/3137382e3230382e3138342e302f32342d3234203d3e20383334.roa
File:                     3137382e3230382e3138342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          83oXRGlsMJGF8n6gpgqqPGEYFd5z7g5EnTRWqN2er7o=
Subject key identifier:   AD:19:4C:C4:A6:0C:00:0F:6D:69:4A:B3:55:40:5A:25:AF:26:1F:92
Certificate issuer:       /CN=3a96802395455ca00679c41d5c056cae95d4b57d
Certificate serial:       28402CAEABFD910B62A23E8365147671497CB25D
Authority key identifier: 3A:96:80:23:95:45:5C:A0:06:79:C4:1D:5C:05:6C:AE:95:D4:B5:7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OpaAI5VFXKAGecQdXAVsrpXUtX0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/3137382e3230382e3138342e302f32342d3234203d3e20383334.roa
Signing time:             Wed 22 Mar 2023 15:29:40 +0000
ROA not before:           Wed 22 Mar 2023 15:24:40 +0000
ROA not after:            Wed 20 Mar 2024 15:29:40 +0000
asID:                     834
IP address blocks:        178.208.184.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:40:2c:ae:ab:fd:91:0b:62:a2:3e:83:65:14:76:71:49:7c:b2:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a96802395455ca00679c41d5c056cae95d4b57d
        Validity
            Not Before: Mar 22 15:24:40 2023 GMT
            Not After : Mar 20 15:29:40 2024 GMT
        Subject: CN=AD194CC4A60C000F6D694AB355405A25AF261F92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9c:b5:4a:81:dd:e2:45:8c:aa:a3:07:ca:6a:
                    fc:a7:0d:4c:e6:d9:9a:c3:98:f9:79:1f:f0:e7:a3:
                    5a:45:60:b8:1f:b1:cf:7a:65:29:43:a5:ee:1e:5d:
                    3a:cc:f4:6c:08:7a:c3:b6:a1:88:f6:30:06:de:0c:
                    4f:37:07:d5:6e:eb:26:88:9d:b5:ed:f3:50:b3:63:
                    ad:7a:01:3b:8f:72:f9:6e:0a:5c:25:1c:4a:10:91:
                    3d:f3:96:64:f6:f9:f9:1e:06:34:89:be:31:c5:1c:
                    f7:8e:c9:b7:8f:83:9e:35:48:7d:0d:af:7a:12:0a:
                    6e:b1:c7:fd:53:ae:4d:88:ae:02:21:1e:63:9a:f5:
                    4c:62:26:3f:b1:ec:67:53:66:92:43:86:bf:2c:3e:
                    26:68:d7:85:27:b6:20:4e:c7:ab:e9:36:d5:9a:a7:
                    83:9b:30:79:7b:5b:bb:24:c6:17:14:51:ab:d6:f5:
                    c7:95:c9:27:a9:32:b9:0a:fa:d7:8a:59:19:dc:e3:
                    c5:c2:85:3e:9e:44:56:a2:8c:03:10:4c:eb:cc:fa:
                    32:0f:54:9c:35:86:90:25:d8:2c:43:88:4a:3a:f9:
                    bb:3d:fe:d4:88:91:a0:5a:10:29:9a:44:7e:1f:71:
                    23:3f:c8:dc:da:eb:70:82:12:98:ee:96:81:b2:fa:
                    70:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:19:4C:C4:A6:0C:00:0F:6D:69:4A:B3:55:40:5A:25:AF:26:1F:92
            X509v3 Authority Key Identifier:
                keyid:3A:96:80:23:95:45:5C:A0:06:79:C4:1D:5C:05:6C:AE:95:D4:B5:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/3A96802395455CA00679C41D5C056CAE95D4B57D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OpaAI5VFXKAGecQdXAVsrpXUtX0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/3137382e3230382e3138342e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.208.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:56:b8:e2:10:2d:59:db:65:a7:bf:b3:97:65:3b:c2:52:f6:
         83:24:b4:fe:7f:08:fe:d0:20:d6:25:80:07:74:49:17:ea:de:
         9f:6f:ee:56:2a:5d:e9:8c:03:26:51:b2:4a:e4:2d:39:ce:7e:
         66:d8:48:e0:3c:b8:f4:38:9c:98:b0:e3:2d:bd:7c:11:b3:81:
         24:ba:68:f0:03:d7:76:73:ef:d0:96:22:b3:70:3b:ab:69:5b:
         2f:1b:7b:95:83:8a:8f:3e:8e:03:e0:a7:5b:5c:81:5d:0b:40:
         3f:e1:a5:56:51:55:25:74:db:35:fa:89:20:5c:89:de:fd:70:
         1b:53:c7:7f:38:fa:b5:c9:ac:94:f2:75:28:8a:57:7b:03:98:
         15:6e:a7:f9:f4:07:ed:5c:ef:0c:2b:54:72:3a:76:84:36:07:
         31:81:22:05:dd:68:40:7d:d8:67:ec:c6:33:84:e1:63:f7:3b:
         05:15:11:46:66:06:ca:6e:a5:ee:72:88:63:98:b5:9e:2c:83:
         93:1f:c7:c8:c4:fe:59:eb:f9:c1:4d:ef:93:75:84:67:8d:37:
         35:c8:01:e8:55:b4:8c:8a:78:f7:7a:c7:d9:3a:09:ec:86:3e:
         9a:94:e6:fc:88:ce:e8:df:d3:f7:64:19:3d:74:15:99:84:33:
         f7:61:7e:46
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUKEAsrqv9kQtioj6DZRR2cUl8sl0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2E5NjgwMjM5NTQ1NWNhMDA2NzljNDFkNWMwNTZjYWU5
NWQ0YjU3ZDAeFw0yMzAzMjIxNTI0NDBaFw0yNDAzMjAxNTI5NDBaMDMxMTAvBgNV
BAMTKEFEMTk0Q0M0QTYwQzAwMEY2RDY5NEFCMzU1NDA1QTI1QUYyNjFGOTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDInLVKgd3iRYyqowfKavynDUzm
2ZrDmPl5H/Dno1pFYLgfsc96ZSlDpe4eXTrM9GwIesO2oYj2MAbeDE83B9Vu6yaI
nbXt81CzY616ATuPcvluClwlHEoQkT3zlmT2+fkeBjSJvjHFHPeOybePg541SH0N
r3oSCm6xx/1Trk2IrgIhHmOa9UxiJj+x7GdTZpJDhr8sPiZo14UntiBOx6vpNtWa
p4ObMHl7W7skxhcUUavW9ceVySepMrkK+teKWRnc48XChT6eRFaijAMQTOvM+jIP
VJw1hpAl2CxDiEo6+bs9/tSIkaBaECmaRH4fcSM/yNza63CCEpjuloGy+nCDAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUrRlMxKYMAA9taUqzVUBaJa8mH5IwHwYDVR0j
BBgwFoAUOpaAI5VFXKAGecQdXAVsrpXUtX0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTJmZmJjZTctODhkZC00Y2E5LWIyNDUtMTE2Mzg2Y2Vl
Nzg4LzAvM0E5NjgwMjM5NTQ1NUNBMDA2NzlDNDFENUMwNTZDQUU5NUQ0QjU3RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL09wYUFJNVZGWEtBR2VjUWRYQVZzcnBY
VXRYMC5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTJmZmJjZTct
ODhkZC00Y2E5LWIyNDUtMTE2Mzg2Y2VlNzg4LzAvMzEzNzM4MmUzMjMwMzgyZTMx
MzgzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALLQ
uDANBgkqhkiG9w0BAQsFAAOCAQEAnFa44hAtWdtlp7+zl2U7wlL2gyS0/n8I/tAg
1iWAB3RJF+ren2/uVipd6YwDJlGySuQtOc5+ZthI4Dy49DicmLDjLb18EbOBJLpo
8APXdnPv0JYis3A7q2lbLxt7lYOKjz6OA+CnW1yBXQtAP+GlVlFVJXTbNfqJIFyJ
3v1wG1PHfzj6tcmslPJ1KIpXewOYFW6n+fQH7VzvDCtUcjp2hDYHMYEiBd1oQH3Y
Z+zGM4ThY/c7BRURRmYGym6l7nKIY5i1niyDkx/HyMT+Wev5wU3vk3WEZ403NcgB
6FW0jIp493rH2ToJ7IY+mpTm/IjO6N/T92QZPXQVmYQz92F+Rg==
-----END CERTIFICATE-----