Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS202573.roa
File:                     AS202573.roa (raw, json)
Hash identifier:          iHjAeumB6U4uPoZWZIXQvb00NjxDLePT3dYxGFt5/8w=
Subject key identifier:   EE:03:27:29:74:16:4F:DF:59:8C:98:69:FD:CA:4F:54:47:91:97:55
Certificate issuer:       /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial:       62E6927E96A8545B38D1928F777D050CFC090E1E
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS202573.roa
Signing time:             Sun 01 Jan 2023 23:59:16 +0000
ROA not before:           Sun 01 Jan 2023 23:54:16 +0000
ROA not after:            Sun 31 Dec 2023 23:59:16 +0000
asID:                     202573
IP address blocks:        2a06:a005:1ed0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:e6:92:7e:96:a8:54:5b:38:d1:92:8f:77:7d:05:0c:fc:09:0e:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
        Validity
            Not Before: Jan  1 23:54:16 2023 GMT
            Not After : Dec 31 23:59:16 2023 GMT
        Subject: CN=EE03272974164FDF598C9869FDCA4F5447919755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ed:4f:1c:4f:0a:c2:3e:32:f9:50:11:c1:11:
                    0d:fa:30:1a:1a:57:47:78:36:5e:b5:d1:a9:5a:61:
                    d8:15:b8:ec:5b:e5:94:2a:fa:79:21:d8:9f:9e:15:
                    2f:ba:b6:00:0f:a6:64:76:96:fd:78:c7:68:41:b1:
                    e3:44:7e:15:6b:9a:39:69:80:bc:1c:f4:79:d3:75:
                    26:7b:e2:ce:ae:84:9f:35:ca:23:0a:b7:d7:79:c3:
                    c9:00:f2:74:27:8b:2e:a7:93:81:9a:9f:22:23:c4:
                    a9:84:6b:45:1f:20:ec:3c:ea:c6:06:39:b8:dd:11:
                    cd:de:6a:b7:3e:62:42:1a:0a:e2:a9:d0:88:33:35:
                    43:f2:be:c9:d3:e0:a2:36:2d:be:c9:72:19:fd:2f:
                    34:69:9c:85:a1:e5:9a:73:eb:79:65:4f:53:d3:bd:
                    f4:6c:55:52:3a:26:de:c5:b3:fa:75:ff:ad:1c:b4:
                    bf:16:b8:8b:d3:bd:2c:f9:68:06:4f:26:0c:d6:3e:
                    97:b8:8d:ea:f7:00:77:06:0b:0c:ed:46:50:73:9b:
                    06:90:40:c8:62:92:3f:d2:ba:af:6e:b1:fe:38:da:
                    50:80:e2:fd:79:75:d7:30:3f:05:95:19:44:80:b1:
                    21:7a:23:29:1b:5a:e8:36:f7:56:0d:60:05:fd:4d:
                    d6:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:03:27:29:74:16:4F:DF:59:8C:98:69:FD:CA:4F:54:47:91:97:55
            X509v3 Authority Key Identifier:
                keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS202573.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1ed0::/44

    Signature Algorithm: sha256WithRSAEncryption
         72:7a:52:9a:38:6e:3c:b6:fc:61:31:52:5a:b0:03:bf:d0:c0:
         10:67:36:43:5f:cf:87:44:45:da:c3:52:2e:aa:cf:a6:e4:44:
         d6:d9:38:0f:68:2d:5c:99:3d:89:db:90:e3:2f:84:f1:60:ad:
         c5:f3:2e:c6:a9:c1:39:b8:77:9d:03:9a:10:23:33:ee:3f:fd:
         ef:11:10:f8:ec:b2:63:cc:c2:79:fa:3a:59:73:bf:f1:90:5c:
         06:01:e2:5f:23:37:b1:fd:99:3a:3a:ba:de:f2:b5:cf:9f:76:
         3c:d1:b9:0e:14:85:93:37:36:45:23:38:75:b6:d0:53:a3:55:
         43:7e:7e:dc:a0:ad:01:76:f5:1b:48:c1:0b:0f:c0:07:a7:2d:
         f8:ca:f6:5c:2e:fd:ee:f3:01:72:f5:4a:71:dc:9d:ee:39:ba:
         4f:bf:bc:90:ab:da:92:f0:42:05:7c:6d:10:76:a5:94:2b:09:
         96:9d:89:5e:63:06:fe:ab:77:94:68:58:fe:ca:b4:fb:3d:31:
         7a:77:f9:0a:37:ee:85:84:85:3b:92:6b:d3:01:0a:51:b2:c6:
         44:48:9d:40:6d:f1:ce:e5:d5:51:08:5c:89:ef:a2:be:60:b0:
         bf:f7:54:a5:aa:ea:6f:ed:d1:b9:aa:a8:cc:90:56:71:68:e2:
         16:d9:35:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org