Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/33312e362e33312e302f32342d3234203d3e203631333137.roa
File:                     33312e362e33312e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          nwxkT8iL1Yh9Nzta8sfwB07hqmcfk0gPQ8sT8/Nqsk0=
Subject key identifier:   FB:00:18:C0:32:85:81:59:9F:A8:F1:A5:8A:13:55:77:87:F9:C1:D2
Certificate issuer:       /CN=3a96802395455ca00679c41d5c056cae95d4b57d
Certificate serial:       2F632A739B65F9FDA972DACBBE703E9843A65E8C
Authority key identifier: 3A:96:80:23:95:45:5C:A0:06:79:C4:1D:5C:05:6C:AE:95:D4:B5:7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OpaAI5VFXKAGecQdXAVsrpXUtX0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/33312e362e33312e302f32342d3234203d3e203631333137.roa
Signing time:             Wed 22 Mar 2023 15:29:44 +0000
ROA not before:           Wed 22 Mar 2023 15:24:44 +0000
ROA not after:            Wed 20 Mar 2024 15:29:44 +0000
asID:                     61317
IP address blocks:        31.6.31.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:63:2a:73:9b:65:f9:fd:a9:72:da:cb:be:70:3e:98:43:a6:5e:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a96802395455ca00679c41d5c056cae95d4b57d
        Validity
            Not Before: Mar 22 15:24:44 2023 GMT
            Not After : Mar 20 15:29:44 2024 GMT
        Subject: CN=FB0018C0328581599FA8F1A58A13557787F9C1D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1f:39:6b:2b:e5:26:27:62:60:09:c6:e4:a8:
                    dd:e6:4a:8e:bb:c1:da:33:4d:9c:3a:32:2d:62:9c:
                    5d:2d:91:a5:6a:46:67:8b:03:b0:be:8d:60:38:00:
                    8d:64:38:ea:bf:43:a1:7a:5c:1d:52:23:01:71:bf:
                    da:3e:56:23:89:b2:eb:78:e4:b3:7b:76:17:f1:ac:
                    f9:6d:8e:36:0c:bd:1b:f7:7d:8e:c2:6c:75:b4:a9:
                    9e:bf:fe:91:9a:67:1a:50:ef:30:0e:f8:ad:21:29:
                    5b:ac:da:40:74:b7:30:02:e4:8a:55:1d:16:1d:01:
                    ea:54:7d:11:cc:66:fd:79:78:b4:61:4b:7c:4a:5d:
                    c4:4d:eb:1a:3a:30:05:02:64:0a:a0:8d:0e:82:03:
                    1d:b1:53:a8:74:a5:f2:a1:52:0f:ec:60:e1:c0:4f:
                    9c:38:e3:76:e9:85:18:20:0d:c9:8d:f5:23:01:e9:
                    4a:35:83:32:03:da:0a:39:02:56:68:77:f0:df:dc:
                    1a:f0:37:4e:6b:21:06:0a:c5:6d:58:a3:43:05:ed:
                    0e:d5:7b:df:91:7e:7c:21:56:9f:03:dd:a7:60:6d:
                    8d:af:12:95:61:68:b7:a4:92:d8:8c:83:83:fc:bb:
                    0b:12:7a:a9:39:05:69:40:a9:f3:e0:2b:80:1b:00:
                    10:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:00:18:C0:32:85:81:59:9F:A8:F1:A5:8A:13:55:77:87:F9:C1:D2
            X509v3 Authority Key Identifier:
                keyid:3A:96:80:23:95:45:5C:A0:06:79:C4:1D:5C:05:6C:AE:95:D4:B5:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/3A96802395455CA00679C41D5C056CAE95D4B57D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OpaAI5VFXKAGecQdXAVsrpXUtX0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/33312e362e33312e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.6.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:7a:45:9c:59:c3:4f:7a:0c:ee:c3:a0:f9:7c:5a:05:74:d2:
         86:ff:a5:b3:d3:b1:25:45:71:5d:89:f0:02:2b:7b:06:96:bd:
         b9:dc:d7:db:3e:7f:8b:80:3a:30:9c:db:69:65:62:b6:4a:92:
         67:9f:c2:a1:49:7d:88:ed:d8:68:cd:b5:4f:84:4d:af:65:17:
         a3:58:7c:45:a8:9f:2b:4e:c9:2f:40:ec:aa:26:32:21:44:01:
         ca:97:ad:fa:51:62:72:9e:a6:bc:26:91:f1:68:8e:3a:4e:0c:
         f6:9f:94:9a:61:e4:b1:f6:ee:e6:d5:aa:a0:0d:66:07:86:c4:
         f1:b3:7e:b5:a0:5c:9a:a4:c6:0c:1c:be:b4:ec:0d:da:29:e8:
         2d:b4:8f:79:53:4c:5a:73:2b:07:02:be:ae:55:74:ef:12:14:
         3c:cc:42:93:c6:2f:46:66:7c:9f:ff:fc:4a:38:f1:f5:08:dd:
         1a:a1:82:68:8b:d2:8e:d2:e8:af:bf:aa:0e:ab:6f:34:71:2d:
         23:84:b6:3d:8c:fb:f9:b6:08:af:1c:02:43:f3:db:a7:ae:9f:
         a0:aa:6a:64:5c:46:0c:dc:22:3b:32:45:05:45:4a:8a:69:ff:
         93:4c:26:8b:26:a7:01:ae:28:47:4f:3f:82:53:a6:73:5b:13:
         7b:60:b9:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 13 09:30:19 2023 by rpki-client on console-ams.rpki-client.org