Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/0/39332e39322e32302e302f32342d3234203d3e203536393133.roa
File:                     39332e39322e32302e302f32342d3234203d3e203536393133.roa (raw, json)
Hash identifier:          DWiHr8OzCrNlyLi7vq9OUPbYGiuPc3xGYITzVkqn9hc=
Subject key identifier:   E3:75:C1:29:E8:82:47:B4:A6:42:A0:CB:7B:DD:A0:6B:23:90:6E:86
Certificate issuer:       /CN=7a7a3a519711f6f3d9bb6f4b95008c532104d350
Certificate serial:       1E988CB59AC2AAEC7A5984BC77AA84A6F0CA364A
Authority key identifier: 7A:7A:3A:51:97:11:F6:F3:D9:BB:6F:4B:95:00:8C:53:21:04:D3:50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eno6UZcR9vPZu29LlQCMUyEE01A.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/0/39332e39322e32302e302f32342d3234203d3e203536393133.roa
Signing time:             Thu 04 May 2023 06:56:23 +0000
ROA not before:           Thu 04 May 2023 06:51:23 +0000
ROA not after:            Thu 02 May 2024 06:56:23 +0000
asID:                     56913
IP address blocks:        93.92.20.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:98:8c:b5:9a:c2:aa:ec:7a:59:84:bc:77:aa:84:a6:f0:ca:36:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a7a3a519711f6f3d9bb6f4b95008c532104d350
        Validity
            Not Before: May  4 06:51:23 2023 GMT
            Not After : May  2 06:56:23 2024 GMT
        Subject: CN=E375C129E88247B4A642A0CB7BDDA06B23906E86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:44:c6:c5:4e:3b:52:9d:12:79:5d:c9:9a:97:
                    31:63:0d:4e:72:b5:a6:3a:51:cf:f7:ad:8b:76:8f:
                    e6:87:3b:c2:a5:61:ee:f6:36:3c:09:21:55:a6:70:
                    bc:b4:8f:c3:6b:ad:9f:52:85:2b:91:8d:46:64:6f:
                    53:4d:a0:15:d1:70:87:5e:d5:1a:c0:2a:2b:7a:fe:
                    8d:28:ff:db:aa:02:7b:6f:a6:72:94:40:04:6a:ba:
                    96:7e:c7:3b:1d:d9:12:99:f2:21:bc:17:a2:34:bc:
                    e6:3d:6b:f3:f8:e9:e6:22:f0:9c:31:95:a8:76:db:
                    8a:4a:97:d1:3e:02:fe:f8:33:a2:42:24:08:43:39:
                    07:eb:7a:c6:b2:66:2a:3c:91:d8:56:f2:e4:88:9b:
                    60:db:ce:ea:f4:61:5a:d3:6f:c5:db:72:75:83:58:
                    2e:62:84:ea:f7:2c:3c:30:05:35:52:8b:4c:08:53:
                    62:86:a5:fb:5d:77:4a:1b:62:3e:bf:3d:e6:87:77:
                    d5:73:ae:4b:12:56:2e:3a:b4:80:f9:ba:12:20:1e:
                    05:30:5d:9e:05:3a:cf:94:01:3b:13:a9:74:a4:d7:
                    f0:41:fa:90:a4:12:13:d8:55:89:fc:f6:fd:5d:27:
                    ad:75:07:34:a1:b7:2d:bc:de:ef:b6:cc:35:f4:69:
                    9c:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:75:C1:29:E8:82:47:B4:A6:42:A0:CB:7B:DD:A0:6B:23:90:6E:86
            X509v3 Authority Key Identifier:
                keyid:7A:7A:3A:51:97:11:F6:F3:D9:BB:6F:4B:95:00:8C:53:21:04:D3:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/0/7A7A3A519711F6F3D9BB6F4B95008C532104D350.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eno6UZcR9vPZu29LlQCMUyEE01A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/0/39332e39322e32302e302f32342d3234203d3e203536393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.92.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:47:aa:cd:af:28:b3:03:bc:d7:d3:eb:7a:3d:6b:a8:f1:75:
         53:09:73:94:b6:fc:f6:36:e2:de:4f:43:7b:54:de:d3:91:81:
         48:3c:a2:ba:eb:95:0c:92:73:17:3a:b7:db:86:29:77:65:13:
         4e:b3:11:58:cb:81:52:31:1e:11:b7:1c:5d:00:bd:ec:81:11:
         42:da:21:81:51:72:dd:5e:89:92:f9:5b:5b:5f:ae:f0:69:c2:
         21:6d:d3:63:90:81:8b:33:85:e9:da:ae:d8:c4:fc:c3:c9:88:
         9a:1e:3e:88:2c:bc:4b:34:07:13:8d:ee:2b:41:70:b1:f4:3e:
         c8:de:0d:ce:48:84:4d:09:d5:d9:81:37:5d:ab:6f:67:7f:54:
         f1:51:6c:3b:4b:c3:4e:0e:1c:5e:f7:b7:74:d9:1d:3c:38:d4:
         16:02:66:86:25:9b:e7:0c:03:40:af:13:0f:86:42:5d:67:18:
         d1:41:14:3a:ec:14:83:4c:19:43:d5:73:f8:11:48:a3:83:16:
         3d:0a:ff:aa:dc:86:dc:9d:0f:4d:a8:3b:73:04:ad:41:cb:5c:
         d3:29:4d:77:f8:ed:cf:11:23:e7:79:20:24:de:6b:91:ca:5e:
         ad:24:7a:da:f4:4d:d7:d5:8c:b6:bd:c7:d8:f3:e9:82:c5:f1:
         21:14:5a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:59 2023 by rpki-client on console-fra.rpki-client.org