Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/3138352e3137362e39322e302f32332d3233203d3e20383334.roa
File:                     3138352e3137362e39322e302f32332d3233203d3e20383334.roa (raw, json)
Hash identifier:          HxgBVmOt6VDaa1KW/jiEdUcDdT8+E0V9Q9Z/BRH/jn8=
Subject key identifier:   8E:E9:30:9A:1B:E8:DD:C7:CE:47:BB:79:44:D0:36:F6:29:3D:C0:28
Certificate issuer:       /CN=bad36cdaf43498a668b553f581ccd281ac1a8cd7
Certificate serial:       25BB8216EF41C2AE955FC64411750E5217FCE11F
Authority key identifier: BA:D3:6C:DA:F4:34:98:A6:68:B5:53:F5:81:CC:D2:81:AC:1A:8C:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/utNs2vQ0mKZotVP1gczSgawajNc.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/3138352e3137362e39322e302f32332d3233203d3e20383334.roa
Signing time:             Wed 07 Jun 2023 06:45:36 +0000
ROA not before:           Wed 07 Jun 2023 06:40:36 +0000
ROA not after:            Wed 05 Jun 2024 06:45:36 +0000
asID:                     834
IP address blocks:        185.176.92.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:bb:82:16:ef:41:c2:ae:95:5f:c6:44:11:75:0e:52:17:fc:e1:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bad36cdaf43498a668b553f581ccd281ac1a8cd7
        Validity
            Not Before: Jun  7 06:40:36 2023 GMT
            Not After : Jun  5 06:45:36 2024 GMT
        Subject: CN=8EE9309A1BE8DDC7CE47BB7944D036F6293DC028
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:74:df:a3:63:35:40:63:eb:27:22:ad:d8:f6:
                    62:dd:e6:3f:dc:45:df:37:c3:ed:94:8d:55:56:92:
                    74:c8:26:f3:dd:60:ad:f9:b8:df:1b:59:2b:5a:6f:
                    16:5f:fc:c6:e1:b4:08:11:86:5e:01:86:ca:1a:3f:
                    30:09:a6:5c:2a:47:f8:27:4c:a6:16:84:0c:64:00:
                    2c:68:db:d5:f1:15:d7:d3:89:16:fe:69:bb:e9:d8:
                    5e:72:8b:88:14:26:52:42:3b:4c:f4:f3:b5:fa:89:
                    28:bf:e8:90:31:52:30:e9:91:fb:c8:c0:3f:8e:4f:
                    0d:80:57:b4:f6:3f:e4:26:20:ec:8f:0e:b1:5f:5e:
                    96:d1:49:e9:8e:30:49:23:a8:a6:44:86:44:a7:b7:
                    e1:94:81:0c:16:b5:20:1c:3a:92:69:a0:d7:e9:f8:
                    20:17:76:11:04:01:1e:92:51:0f:b3:6c:ee:6c:43:
                    ad:7c:dd:1c:aa:e0:6c:00:bb:f2:ca:e1:08:8e:36:
                    e0:6e:bb:75:7e:2a:a8:53:a3:74:a8:90:0f:73:4d:
                    b2:8b:71:3f:4c:49:9c:f5:34:31:b2:61:78:f4:d2:
                    99:74:08:65:9d:97:47:e5:cd:26:db:2f:c0:21:9d:
                    ca:51:74:a6:b7:b3:4e:c2:db:49:d1:df:87:23:2c:
                    74:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:E9:30:9A:1B:E8:DD:C7:CE:47:BB:79:44:D0:36:F6:29:3D:C0:28
            X509v3 Authority Key Identifier:
                keyid:BA:D3:6C:DA:F4:34:98:A6:68:B5:53:F5:81:CC:D2:81:AC:1A:8C:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/BAD36CDAF43498A668B553F581CCD281AC1A8CD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/utNs2vQ0mKZotVP1gczSgawajNc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/3138352e3137362e39322e302f32332d3233203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.176.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         68:80:d7:6b:1c:9a:70:bd:a4:e0:fe:97:cd:5f:92:c7:1b:5e:
         56:1e:04:97:53:a2:3c:76:c8:e4:23:8e:bb:a2:04:0c:4c:27:
         42:da:e8:e8:1d:9a:7c:5c:7e:1e:10:86:a3:eb:02:d7:30:11:
         fb:21:ec:99:ab:89:ae:d8:0f:8e:24:90:28:69:d7:e5:e1:d8:
         6b:39:1f:8e:83:fe:f7:b7:de:43:e6:fe:64:4a:e0:c0:6c:20:
         36:9b:2a:21:2f:eb:78:c9:24:51:eb:25:3e:4b:ac:b2:0b:d5:
         2d:07:9d:9b:ac:4c:50:cf:3e:44:9e:13:23:c9:46:bc:58:a9:
         e5:54:9a:3d:2b:39:49:23:9a:b1:9a:18:ed:1f:8d:97:67:75:
         b6:7c:75:95:ea:94:c8:54:d3:bf:f6:6f:e9:a5:7f:3d:b9:7f:
         b9:a9:eb:2f:15:b5:30:bd:a5:27:e1:87:de:51:08:42:f9:53:
         15:8c:69:b8:a8:c0:79:47:8c:6b:7d:73:c7:e0:33:c9:7f:b4:
         c8:5d:33:90:81:36:c2:58:b7:1c:8d:d3:da:3a:aa:23:05:7e:
         ef:0d:ea:56:1a:d5:a0:d4:39:5c:ad:7e:28:f5:1b:8e:a8:34:
         78:35:3f:5b:6e:d4:ed:8d:2e:61:18:bd:46:12:01:50:f4:b8:
         92:dd:e8:1d
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUJbuCFu9Bwq6VX8ZEEXUOUhf84R8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYmFkMzZjZGFmNDM0OThhNjY4YjU1M2Y1ODFjY2QyODFh
YzFhOGNkNzAeFw0yMzA2MDcwNjQwMzZaFw0yNDA2MDUwNjQ1MzZaMDMxMTAvBgNV
BAMTKDhFRTkzMDlBMUJFOEREQzdDRTQ3QkI3OTQ0RDAzNkY2MjkzREMwMjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCudN+jYzVAY+snIq3Y9mLd5j/c
Rd83w+2UjVVWknTIJvPdYK35uN8bWStabxZf/MbhtAgRhl4BhsoaPzAJplwqR/gn
TKYWhAxkACxo29XxFdfTiRb+abvp2F5yi4gUJlJCO0z087X6iSi/6JAxUjDpkfvI
wD+OTw2AV7T2P+QmIOyPDrFfXpbRSemOMEkjqKZEhkSnt+GUgQwWtSAcOpJpoNfp
+CAXdhEEAR6SUQ+zbO5sQ6183Ryq4GwAu/LK4QiONuBuu3V+KqhTo3SokA9zTbKL
cT9MSZz1NDGyYXj00pl0CGWdl0flzSbbL8AhncpRdKa3s07C20nR34cjLHQrAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUjukwmhvo3cfOR7t5RNA29ik9wCgwHwYDVR0j
BBgwFoAUutNs2vQ0mKZotVP1gczSgawajNcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYjE3NDc5ZDEtOTVkOC00YTE0LThlZTItZGUxMDBjNjY3
NzRjLzAvQkFEMzZDREFGNDM0OThBNjY4QjU1M0Y1ODFDQ0QyODFBQzFBOENENy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3V0TnMydlEwbUtab3RWUDFnY3pTZ2F3
YWpOYy5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYjE3NDc5ZDEt
OTVkOC00YTE0LThlZTItZGUxMDBjNjY3NzRjLzAvMzEzODM1MmUzMTM3MzYyZTM5
MzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAG5sFww
DQYJKoZIhvcNAQELBQADggEBAGiA12scmnC9pOD+l81fkscbXlYeBJdTojx2yOQj
jruiBAxMJ0La6Ogdmnxcfh4QhqPrAtcwEfsh7Jmria7YD44kkChp1+Xh2Gs5H46D
/ve33kPm/mRK4MBsIDabKiEv63jJJFHrJT5LrLIL1S0HnZusTFDPPkSeEyPJRrxY
qeVUmj0rOUkjmrGaGO0fjZdndbZ8dZXqlMhU07/2b+mlfz25f7mp6y8VtTC9pSfh
h95RCEL5UxWMabiowHlHjGt9c8fgM8l/tMhdM5CBNsJYtxyN09o6qiMFfu8N6lYa
1aDUOVytfij1G46oNHg1P1tu1O2NLmEYvUYSAVD0uJLd6B0=
-----END CERTIFICATE-----