Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/38322e3131382e32392e302f32342d3234203d3e20323036303932.roa
File:                     38322e3131382e32392e302f32342d3234203d3e20323036303932.roa (raw, json)
Hash identifier:          YUT3ISWmJ2O2Hkb2oR+zn0Dcla8PnxypvWOXCbRHwc4=
Subject key identifier:   44:65:A9:36:0B:82:1A:2B:90:C3:C6:9D:EB:B6:8F:F1:65:96:21:36
Certificate issuer:       /CN=df6f1af9e919a9653268327b98814cafeb5c0a13
Certificate serial:       2F0EC3DD6595925574CF55AB63BB201FDA9E2A5C
Authority key identifier: DF:6F:1A:F9:E9:19:A9:65:32:68:32:7B:98:81:4C:AF:EB:5C:0A:13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/328a-ekZqWUyaDJ7mIFMr-tcChM.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/38322e3131382e32392e302f32342d3234203d3e20323036303932.roa
Signing time:             Sat 29 Apr 2023 09:34:07 +0000
ROA not before:           Sat 29 Apr 2023 09:29:07 +0000
ROA not after:            Sat 27 Apr 2024 09:34:07 +0000
asID:                     206092
IP address blocks:        82.118.29.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:0e:c3:dd:65:95:92:55:74:cf:55:ab:63:bb:20:1f:da:9e:2a:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f1af9e919a9653268327b98814cafeb5c0a13
        Validity
            Not Before: Apr 29 09:29:07 2023 GMT
            Not After : Apr 27 09:34:07 2024 GMT
        Subject: CN=4465A9360B821A2B90C3C69DEBB68FF165962136
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:2e:10:fc:69:53:3a:ca:7b:8a:01:3d:f8:c2:
                    a4:80:23:6b:ff:c4:cb:62:80:6a:d1:31:1a:9d:06:
                    9b:e6:4e:de:c3:dd:8c:e8:f3:90:23:7f:46:91:06:
                    0b:b2:98:d4:2f:8e:38:dd:0d:08:a6:3e:16:e6:0a:
                    b0:bb:bd:d7:7b:21:da:70:44:6e:8c:a0:5a:ff:e5:
                    48:3c:3b:fa:47:e3:17:e0:e5:14:25:47:28:5d:ee:
                    75:dc:f5:c9:f0:06:6d:88:9e:26:4c:db:db:43:f0:
                    fd:31:66:92:6b:57:5f:8f:1a:c7:00:ea:cb:d3:b5:
                    96:90:e9:1d:ef:4c:50:07:8e:cf:ca:84:0a:eb:e9:
                    c9:76:21:90:62:c9:66:7a:2e:11:29:59:99:29:fc:
                    ac:67:b4:38:dd:1d:e1:56:92:c5:ef:12:52:5c:3d:
                    77:1c:c8:c6:7d:2a:f0:20:a6:18:eb:78:d4:91:6a:
                    c8:d7:cf:6f:5f:4d:31:14:96:c5:2b:3c:7c:ed:88:
                    37:17:29:7e:3a:e8:ec:2c:0d:74:8f:9f:1a:70:32:
                    fc:ae:de:b7:ba:19:95:91:94:63:dd:e0:cf:e7:85:
                    22:39:f8:23:9c:c0:4e:19:ba:0f:76:f7:3b:18:d6:
                    6a:d9:7e:50:6c:d0:32:7d:c5:ac:79:b0:61:60:30:
                    72:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:65:A9:36:0B:82:1A:2B:90:C3:C6:9D:EB:B6:8F:F1:65:96:21:36
            X509v3 Authority Key Identifier:
                keyid:DF:6F:1A:F9:E9:19:A9:65:32:68:32:7B:98:81:4C:AF:EB:5C:0A:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/DF6F1AF9E919A9653268327B98814CAFEB5C0A13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/328a-ekZqWUyaDJ7mIFMr-tcChM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/38322e3131382e32392e302f32342d3234203d3e20323036303932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.118.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:98:e8:6c:a7:19:4b:79:69:c3:0e:2c:cb:cb:65:40:6c:90:
         f0:95:70:46:04:9d:bd:40:62:af:d8:34:b8:1a:56:5b:d8:ea:
         8b:56:06:37:7e:84:e9:5f:c0:eb:d0:9a:21:ed:d2:fe:76:ca:
         d6:1d:aa:70:dc:84:02:9e:b4:79:a5:a4:00:0d:e5:2f:b8:bf:
         13:01:8a:04:ff:50:d9:34:e4:8e:90:71:b4:0e:18:66:53:34:
         7b:06:5e:43:a6:72:54:cb:cf:67:26:41:c1:df:1c:2a:8a:1b:
         30:fb:91:1a:05:83:7d:fa:98:39:f4:6b:19:33:aa:54:c6:35:
         bc:99:5b:7f:96:00:11:bf:a2:e3:65:dd:89:8c:6f:d2:c1:f5:
         56:ec:31:a1:76:a9:da:a1:77:15:86:d4:f8:e5:57:59:d9:79:
         09:01:84:0a:74:d6:e5:a4:56:3c:ac:de:9a:b6:39:6e:bf:1d:
         2c:47:bf:2a:82:ec:5d:c5:76:2b:87:b5:c0:93:2b:2c:01:5e:
         dc:a9:03:71:ec:bb:90:5d:59:d4:af:21:4f:91:66:5d:4b:04:
         4f:02:e9:61:5a:2a:1a:d4:98:6f:99:68:75:52:fa:17:bb:7b:
         cb:e6:95:51:21:cb:1c:e3:c0:26:f8:3a:ab:e7:cc:66:a2:63:
         7a:5e:ed:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:22 2024 by rpki-client on console-fra.rpki-client.org