Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS50546.roa
File:                     AS50546.roa (raw, json)
Hash identifier:          pcQKTJTNLqkhY+/xO75ruJifuZuC5K3gIkCJtNRqy8E=
Subject key identifier:   75:42:4E:94:3D:88:5D:E8:4C:59:E1:51:A2:8C:D5:7B:BB:20:F4:26
Certificate issuer:       /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial:       19391CAB0AC86A75B62AD3643A2540387A00BFA7
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS50546.roa
Signing time:             Sun 01 Jan 2023 23:59:17 +0000
ROA not before:           Sun 01 Jan 2023 23:54:17 +0000
ROA not after:            Sun 31 Dec 2023 23:59:17 +0000
asID:                     50546
IP address blocks:        2a06:a005:e30::/44 maxlen: 48
                          2a06:a005:2560::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:39:1c:ab:0a:c8:6a:75:b6:2a:d3:64:3a:25:40:38:7a:00:bf:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
        Validity
            Not Before: Jan  1 23:54:17 2023 GMT
            Not After : Dec 31 23:59:17 2023 GMT
        Subject: CN=75424E943D885DE84C59E151A28CD57BBB20F426
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c0:94:8d:0d:2a:47:24:fd:4f:73:99:29:db:
                    5c:f8:f4:a2:c5:13:37:2a:9d:e4:c2:76:ad:6c:ac:
                    dc:85:f8:0e:12:fc:10:9d:bc:f5:ad:07:f9:4c:8a:
                    b8:64:13:8e:2a:5c:a8:88:d2:e5:76:49:f8:e6:95:
                    6d:1f:31:33:b1:37:33:5a:f0:c8:47:34:e3:fb:7a:
                    21:9f:c3:81:38:03:e6:48:a7:99:12:15:f9:ca:2d:
                    08:93:4e:9f:99:c0:f4:7e:f6:6f:a8:7a:00:69:e9:
                    73:d7:d5:f3:22:b9:30:ad:0f:09:d5:34:ea:f6:fd:
                    8e:d0:80:d9:fa:88:f8:0b:05:81:58:a0:ce:87:f2:
                    14:47:ed:92:e6:73:6c:cb:f4:57:54:e0:8a:0e:25:
                    d7:99:d1:5d:eb:89:15:4b:ed:e0:f4:d8:bb:b4:3c:
                    14:d2:69:48:7f:fd:a2:56:1c:74:67:86:c4:b6:7f:
                    99:2d:37:81:55:b4:a0:66:e8:9a:c9:27:b3:37:fd:
                    e1:75:35:c7:7e:d4:6c:31:c1:58:4a:4a:db:35:ab:
                    e4:49:46:12:84:59:30:61:36:c8:c6:82:b6:a7:8a:
                    eb:0c:da:a9:9b:1b:18:c1:b1:74:96:0f:3c:13:b6:
                    3c:4e:97:6a:17:8c:65:05:24:1f:20:81:e2:93:ac:
                    83:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:42:4E:94:3D:88:5D:E8:4C:59:E1:51:A2:8C:D5:7B:BB:20:F4:26
            X509v3 Authority Key Identifier:
                keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS50546.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:e30::/44
                  2a06:a005:2560::/44

    Signature Algorithm: sha256WithRSAEncryption
         99:5e:5f:65:b9:37:a2:57:8a:cf:cc:81:65:90:29:dd:5a:f5:
         9a:0a:cc:2c:6c:df:e1:9f:4b:71:98:f0:49:a7:39:cc:4f:5d:
         78:b8:99:99:c7:ae:fa:e6:e2:c1:21:c7:41:19:c1:cb:79:2c:
         eb:90:97:2b:39:24:f4:36:6f:a0:a6:90:ed:71:82:24:81:9e:
         fc:d9:1e:08:31:c7:85:f0:07:48:48:53:4e:27:f7:ce:0d:85:
         6c:44:9c:33:dd:d4:63:0c:57:77:85:04:f9:af:2d:8b:24:bb:
         f9:6a:f3:43:bc:18:24:e2:bc:7d:87:7c:b8:b3:42:65:b3:28:
         d8:66:fc:15:ed:df:ce:e3:33:6f:df:ba:00:70:2a:50:2f:09:
         7c:e8:05:e9:51:83:6a:6f:5b:30:21:91:90:9c:3a:f8:e9:23:
         90:0c:35:92:a7:f2:b0:e1:4e:a6:19:77:bf:d5:52:b6:6f:8d:
         f6:36:d8:fa:12:a4:6f:27:dc:c7:6a:ec:84:36:af:12:5b:00:
         c1:a7:6b:af:b8:1a:b4:9a:57:94:2c:65:2e:0e:ac:f8:b0:be:
         dd:a2:77:36:87:61:62:ee:85:f9:42:94:70:1f:12:74:1d:85:
         0a:85:ac:77:e7:f1:ca:95:80:cb:86:5c:d8:3f:01:09:a9:c4:
         c6:9c:39:69
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org