Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/1/3137362e3131382e3136302e302f32342d3234203d3e20313938393830.roa
File:                     3137362e3131382e3136302e302f32342d3234203d3e20313938393830.roa (raw, json)
Hash identifier:          Tf+pgB0QG3DTSzSZLouLu/gQk611RFlsXQLgKSrBtTI=
Subject key identifier:   E4:A4:FE:3C:4F:93:0C:68:86:52:F2:5D:EE:FA:35:5E:39:7E:8B:52
Certificate issuer:       /CN=567688fc99cff14e0df7422720ea89ca16377899
Certificate serial:       48982BB531ED45C75BA8414AA26A0C92BD1F184B
Authority key identifier: 56:76:88:FC:99:CF:F1:4E:0D:F7:42:27:20:EA:89:CA:16:37:78:99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VnaI_JnP8U4N90InIOqJyhY3eJk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/1/3137362e3131382e3136302e302f32342d3234203d3e20313938393830.roa
Signing time:             Wed 20 Dec 2023 16:41:52 +0000
ROA not before:           Wed 20 Dec 2023 16:36:52 +0000
ROA not after:            Wed 18 Dec 2024 16:41:52 +0000
asID:                     198980
IP address blocks:        176.118.160.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:98:2b:b5:31:ed:45:c7:5b:a8:41:4a:a2:6a:0c:92:bd:1f:18:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=567688fc99cff14e0df7422720ea89ca16377899
        Validity
            Not Before: Dec 20 16:36:52 2023 GMT
            Not After : Dec 18 16:41:52 2024 GMT
        Subject: CN=E4A4FE3C4F930C688652F25DEEFA355E397E8B52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:52:74:9f:0e:3d:d0:79:f9:84:64:ed:ee:18:
                    58:c6:36:3b:ee:7b:f3:27:61:e0:04:e8:1b:dc:a0:
                    3b:d9:6b:48:40:a6:9a:a7:b8:57:61:d1:54:e8:4d:
                    27:d0:f4:14:8a:6d:b3:e3:8c:15:5e:2c:79:34:75:
                    22:99:68:f4:9f:bc:26:89:03:e3:cb:06:d1:a2:ed:
                    dc:c4:10:f4:61:53:0e:a9:d4:01:8b:34:c3:23:fe:
                    5d:ae:6a:c7:08:6c:1b:7b:bf:e4:d3:4e:3b:ed:99:
                    93:89:8f:42:42:22:8f:7c:1f:14:d4:3e:71:52:f2:
                    dd:3c:c0:59:c8:ed:a9:d0:71:33:de:4d:a3:45:fc:
                    d1:17:13:39:33:50:29:37:8e:cf:04:da:8a:75:72:
                    83:3c:92:9c:ec:e9:49:44:b5:d6:75:64:87:88:65:
                    81:0f:3a:44:1b:18:6b:fa:ca:5e:b1:2c:0d:3a:b8:
                    fc:60:e1:19:a9:6a:ae:7b:df:40:ce:0f:fc:f2:3e:
                    05:1d:50:bf:8a:31:f9:ea:ff:cd:e7:6f:82:c9:c3:
                    13:8d:bf:b2:de:8c:4e:da:71:a3:a0:bb:72:82:01:
                    06:a3:2e:52:51:2f:77:75:2e:54:f9:8e:79:cf:bc:
                    ec:f0:56:71:89:23:50:4b:e9:1c:e8:7e:14:06:f6:
                    7b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:A4:FE:3C:4F:93:0C:68:86:52:F2:5D:EE:FA:35:5E:39:7E:8B:52
            X509v3 Authority Key Identifier:
                keyid:56:76:88:FC:99:CF:F1:4E:0D:F7:42:27:20:EA:89:CA:16:37:78:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/1/567688FC99CFF14E0DF7422720EA89CA16377899.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VnaI_JnP8U4N90InIOqJyhY3eJk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/1/3137362e3131382e3136302e302f32342d3234203d3e20313938393830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.118.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:3b:88:8e:88:53:4c:81:6c:b1:d8:0e:8f:0b:09:3a:7f:dd:
         8c:c6:ea:b7:ce:44:ba:c7:f5:a6:31:13:54:ad:59:7d:35:3a:
         80:bf:14:55:b8:b0:ad:ab:9a:b9:80:56:b0:71:e7:c3:fc:17:
         2f:51:0a:3f:db:cb:fd:37:0f:ab:42:33:91:a9:90:e7:5e:e6:
         a7:1d:aa:e8:5c:d1:bc:ef:7b:16:99:2b:3c:57:cc:fd:d8:6a:
         5e:bc:a4:04:66:b1:3a:b4:b7:f6:d6:e1:5c:42:7f:6c:83:59:
         81:14:54:4d:ed:3b:28:da:a9:26:47:cf:fa:b3:9c:2b:93:51:
         e7:da:27:6b:96:55:4f:bd:e7:79:6e:d7:c8:fb:a9:2e:65:17:
         71:4e:ca:43:76:ad:1b:5f:c4:6c:f9:d6:51:2c:de:43:ed:7c:
         1d:c7:9b:e7:67:56:12:34:32:47:9e:80:25:30:8f:ba:34:e6:
         b0:3a:28:e1:8f:72:9f:0f:47:fa:a1:63:2e:ad:02:eb:21:8f:
         ed:c9:48:5c:64:5f:ed:4e:47:10:18:1b:11:4b:64:98:3d:69:
         a2:39:54:76:57:75:ab:cb:d6:d2:72:d1:fa:b1:ce:1b:e8:2d:
         ed:a6:dd:65:23:ce:06:5a:ad:ae:9a:ef:2f:c7:02:85:7f:39:
         3a:87:50:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org