Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/0/39332e39322e31382e302f32342d3234203d3e20323034383433.roa
File:                     39332e39322e31382e302f32342d3234203d3e20323034383433.roa (raw, json)
Hash identifier:          CikBEjHNqjnQcAKoNa7OterSNx5+g1zmhBXiHXdydf8=
Subject key identifier:   AD:18:4A:FB:E5:DD:B8:13:F7:6E:02:E1:65:DD:41:C3:7D:00:08:D1
Certificate issuer:       /CN=7a7a3a519711f6f3d9bb6f4b95008c532104d350
Certificate serial:       34E12D3E8FB53E57E6F11A9400493AEFFE51101B
Authority key identifier: 7A:7A:3A:51:97:11:F6:F3:D9:BB:6F:4B:95:00:8C:53:21:04:D3:50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eno6UZcR9vPZu29LlQCMUyEE01A.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/0/39332e39322e31382e302f32342d3234203d3e20323034383433.roa
Signing time:             Tue 02 May 2023 20:16:05 +0000
ROA not before:           Tue 02 May 2023 20:11:05 +0000
ROA not after:            Tue 30 Apr 2024 20:16:05 +0000
asID:                     204843
IP address blocks:        93.92.18.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:e1:2d:3e:8f:b5:3e:57:e6:f1:1a:94:00:49:3a:ef:fe:51:10:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a7a3a519711f6f3d9bb6f4b95008c532104d350
        Validity
            Not Before: May  2 20:11:05 2023 GMT
            Not After : Apr 30 20:16:05 2024 GMT
        Subject: CN=AD184AFBE5DDB813F76E02E165DD41C37D0008D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:1b:2d:4b:e3:c7:e0:f4:0a:81:5f:a6:21:53:
                    d6:e3:ae:e5:65:11:9f:3f:2d:08:13:e7:d1:df:74:
                    02:47:a3:f6:84:1f:d4:00:1d:37:4e:c1:94:03:1c:
                    ca:a8:0b:2f:61:9d:7e:25:19:e8:8a:83:df:7f:d3:
                    bb:b0:ba:2a:83:6e:0f:31:44:f0:90:12:8f:67:91:
                    a9:76:13:bd:26:b4:90:a8:14:f9:ef:78:7b:34:c6:
                    62:74:87:4f:43:65:b2:15:9b:15:6c:a8:9f:d5:5d:
                    ac:c0:fc:1d:23:e3:db:c4:8f:78:42:89:ba:6b:39:
                    61:f3:49:45:89:a3:2b:ce:60:ed:08:a5:84:4d:85:
                    a7:36:f8:21:78:3e:c0:42:4c:e0:87:e5:72:72:e2:
                    d1:7a:7f:bb:24:23:ed:2e:78:16:a5:f7:ad:9c:a7:
                    9b:0d:33:39:18:0e:af:19:70:82:dd:61:3a:71:02:
                    44:16:31:d2:75:2b:d8:b8:3a:fe:5a:0e:94:23:26:
                    e1:63:70:38:2a:30:19:03:6f:4d:c5:43:5a:19:c2:
                    1f:43:85:e5:9a:4d:8a:07:b9:bf:97:d7:17:03:00:
                    38:db:9a:77:33:9b:f5:d4:a3:9a:8b:ae:68:48:9c:
                    b4:01:40:e0:94:a6:37:06:e0:fb:7e:c7:af:aa:a2:
                    f0:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:18:4A:FB:E5:DD:B8:13:F7:6E:02:E1:65:DD:41:C3:7D:00:08:D1
            X509v3 Authority Key Identifier:
                keyid:7A:7A:3A:51:97:11:F6:F3:D9:BB:6F:4B:95:00:8C:53:21:04:D3:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/0/7A7A3A519711F6F3D9BB6F4B95008C532104D350.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eno6UZcR9vPZu29LlQCMUyEE01A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/0/39332e39322e31382e302f32342d3234203d3e20323034383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.92.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:83:4f:81:28:53:ba:23:5a:c4:75:5d:3a:11:95:4b:65:88:
         df:90:23:d3:ef:c1:1c:0b:dc:4e:28:3e:35:83:ca:20:6c:5a:
         98:10:9c:c9:19:db:a0:26:b2:56:04:34:64:2f:f7:85:40:21:
         39:31:a0:91:29:89:db:52:9b:f3:6e:38:d5:bc:2d:1f:db:8c:
         72:bf:be:e1:34:c1:45:73:14:2e:a4:ef:51:73:98:f7:b0:e9:
         50:02:49:a0:42:b2:6e:ff:6d:ba:57:2b:6f:89:dd:00:08:e4:
         c6:65:6c:89:fc:f8:e5:60:33:dc:cf:de:c4:7a:9a:0c:35:13:
         10:0a:26:b6:77:ab:68:d4:1b:66:e3:04:af:46:11:9e:de:fe:
         45:6f:25:89:80:57:74:2e:3e:b9:3f:fa:c7:43:09:33:9e:9e:
         57:5e:64:ec:23:d5:51:72:d7:28:03:51:cd:a1:9d:70:40:a9:
         90:3e:39:0b:91:60:b0:ff:e1:4c:29:20:64:f3:41:99:a8:3e:
         c7:d2:82:6a:be:22:9e:b5:6e:82:c5:8d:1a:2a:ad:63:f5:da:
         f2:54:f9:c0:6c:94:8f:09:f3:47:a5:61:4d:e7:15:5b:07:f5:
         88:c7:9a:92:df:84:03:c9:e7:2b:f9:90:92:f0:f9:ea:46:ab:
         fe:12:71:82
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUNOEtPo+1Plfm8RqUAEk67/5REBswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2E3YTNhNTE5NzExZjZmM2Q5YmI2ZjRiOTUwMDhjNTMy
MTA0ZDM1MDAeFw0yMzA1MDIyMDExMDVaFw0yNDA0MzAyMDE2MDVaMDMxMTAvBgNV
BAMTKEFEMTg0QUZCRTVEREI4MTNGNzZFMDJFMTY1REQ0MUMzN0QwMDA4RDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUGy1L48fg9AqBX6YhU9bjruVl
EZ8/LQgT59HfdAJHo/aEH9QAHTdOwZQDHMqoCy9hnX4lGeiKg99/07uwuiqDbg8x
RPCQEo9nkal2E70mtJCoFPnveHs0xmJ0h09DZbIVmxVsqJ/VXazA/B0j49vEj3hC
ibprOWHzSUWJoyvOYO0IpYRNhac2+CF4PsBCTOCH5XJy4tF6f7skI+0ueBal962c
p5sNMzkYDq8ZcILdYTpxAkQWMdJ1K9i4Ov5aDpQjJuFjcDgqMBkDb03FQ1oZwh9D
heWaTYoHub+X1xcDADjbmnczm/XUo5qLrmhInLQBQOCUpjcG4Pt+x6+qovBPAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUrRhK++XduBP3bgLhZd1Bw30ACNEwHwYDVR0j
BBgwFoAUeno6UZcR9vPZu29LlQCMUyEE01AwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTUyMmE1MmYtNjUzNC00MTY1LWE2YTctZWY5Zjc0ZWY5
NDMxLzAvN0E3QTNBNTE5NzExRjZGM0Q5QkI2RjRCOTUwMDhDNTMyMTA0RDM1MC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VubzZVWmNSOXZQWnUyOUxsUUNNVXlF
RTAxQS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTUyMmE1MmYt
NjUzNC00MTY1LWE2YTctZWY5Zjc0ZWY5NDMxLzAvMzkzMzJlMzkzMjJlMzEzODJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzNDM4MzQzMy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAF1c
EjANBgkqhkiG9w0BAQsFAAOCAQEAR4NPgShTuiNaxHVdOhGVS2WI35Aj0+/BHAvc
Tig+NYPKIGxamBCcyRnboCayVgQ0ZC/3hUAhOTGgkSmJ21Kb82441bwtH9uMcr++
4TTBRXMULqTvUXOY97DpUAJJoEKybv9tulcrb4ndAAjkxmVsifz45WAz3M/exHqa
DDUTEAomtneraNQbZuMEr0YRnt7+RW8liYBXdC4+uT/6x0MJM56eV15k7CPVUXLX
KANRzaGdcECpkD45C5FgsP/hTCkgZPNBmag+x9KCar4inrVugsWNGiqtY/Xa8lT5
wGyUjwnzR6VhTecVWwf1iMeakt+EA8nnK/mQkvD56kar/hJxgg==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:59 2023 by rpki-client on console-fra.rpki-client.org