Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3139332e36352e302f32342d3234203d3e203630353438.roa
File:                     3138352e3139332e36352e302f32342d3234203d3e203630353438.roa (raw, json)
Hash identifier:          /+pbDSDGVNrt67tOpG6NBJukEAyGBw26NwRsa7i0ZGE=
Subject key identifier:   7F:50:71:1E:92:00:A2:46:15:72:39:65:91:76:72:43:DE:9D:3B:55
Certificate issuer:       /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial:       49B271142CD26924A3193CF0C67E96F40E90C79A
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3139332e36352e302f32342d3234203d3e203630353438.roa
Signing time:             Mon 27 Mar 2023 08:27:25 +0000
ROA not before:           Mon 27 Mar 2023 08:22:25 +0000
ROA not after:            Mon 25 Mar 2024 08:27:25 +0000
asID:                     60548
IP address blocks:        185.193.65.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:b2:71:14:2c:d2:69:24:a3:19:3c:f0:c6:7e:96:f4:0e:90:c7:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
        Validity
            Not Before: Mar 27 08:22:25 2023 GMT
            Not After : Mar 25 08:27:25 2024 GMT
        Subject: CN=7F50711E9200A2461572396591767243DE9D3B55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1d:a0:2d:50:db:5f:0c:94:0d:47:c8:da:7a:
                    b0:ab:ef:12:f3:ca:25:4d:6a:f4:27:c0:4a:d6:82:
                    ff:96:89:53:c4:ad:aa:3f:bb:4c:86:0b:16:98:e5:
                    43:e6:9e:01:06:81:fa:73:da:5a:2e:d8:86:51:af:
                    2d:62:2a:86:c2:ad:3c:43:96:47:65:2a:20:68:26:
                    4e:0b:23:4a:03:97:dc:c3:02:66:d5:0c:af:dc:e4:
                    de:b2:5d:33:43:3d:95:dd:90:5a:a1:be:19:87:11:
                    41:be:11:f5:42:9c:32:71:18:90:b6:33:b7:32:e5:
                    84:5b:14:5c:4d:7e:54:ae:31:1c:b6:4e:db:5a:8d:
                    5b:1f:52:23:29:0a:cc:07:08:9d:40:60:b3:8a:e8:
                    be:8f:c2:03:2c:a0:06:a4:c1:bc:89:8c:be:68:60:
                    81:8f:4c:f4:93:e2:bf:dc:46:b1:97:e5:81:29:c2:
                    62:3c:84:38:2a:e7:d6:ba:bc:61:7a:39:b6:24:98:
                    84:86:bf:b8:e1:51:fc:3f:93:e0:5b:9e:b3:3f:2b:
                    ea:16:47:93:50:5b:90:fa:e4:5c:05:2d:ba:de:13:
                    2e:79:33:70:21:29:ec:bb:a7:1e:e3:64:08:aa:29:
                    73:4f:0a:cb:ba:fc:d8:9f:bb:c8:41:f4:08:d2:33:
                    95:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:50:71:1E:92:00:A2:46:15:72:39:65:91:76:72:43:DE:9D:3B:55
            X509v3 Authority Key Identifier:
                keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3139332e36352e302f32342d3234203d3e203630353438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.193.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:bf:a6:7a:cf:ee:80:a6:6f:35:1b:c0:61:e5:f9:3f:26:e0:
         2a:4f:5c:bd:46:57:d6:93:47:ea:96:77:33:27:f7:59:99:57:
         64:1d:32:84:7f:5d:a6:72:6a:40:ce:54:5f:9b:70:9b:3e:d2:
         4d:2c:92:d8:f8:38:be:78:15:d5:70:40:8d:8f:eb:55:74:0c:
         88:19:08:11:10:86:a3:e9:c0:72:69:d1:7e:36:b8:c4:11:cb:
         92:9a:aa:99:c6:d9:30:c7:ca:6a:f5:b4:55:f0:32:71:ea:e3:
         ff:f3:71:70:0b:41:48:4d:94:76:fc:40:f9:d2:21:a6:d9:89:
         34:99:96:7c:22:38:cc:43:9f:66:a5:39:89:b7:ed:7b:c6:a9:
         67:96:5f:94:fe:c5:cb:e5:b2:ef:b4:c3:f3:9f:11:18:f3:83:
         18:b7:19:fe:c0:69:c6:c4:58:42:50:21:ed:6a:ee:3f:7a:05:
         92:1e:04:14:f0:02:3b:bd:f2:f9:34:81:23:b9:32:91:61:61:
         bd:1f:20:ba:d3:8a:28:23:2a:b6:b7:18:75:87:73:17:de:c6:
         8f:34:d6:22:06:0a:2a:f4:c4:0d:1a:c8:42:62:94:7b:27:42:
         af:c6:20:e1:76:5b:b7:ba:9d:9d:a9:27:ac:84:ed:8b:68:04:
         d4:0d:6a:7e
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUSbJxFCzSaSSjGTzwxn6W9A6Qx5owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYmI4YTJjODhjNTI1NTRkNDlmNmI3OTAxMzdjM2JhYjY4
N2IyZjk1NjAeFw0yMzAzMjcwODIyMjVaFw0yNDAzMjUwODI3MjVaMDMxMTAvBgNV
BAMTKDdGNTA3MTFFOTIwMEEyNDYxNTcyMzk2NTkxNzY3MjQzREU5RDNCNTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvHaAtUNtfDJQNR8jaerCr7xLz
yiVNavQnwErWgv+WiVPErao/u0yGCxaY5UPmngEGgfpz2lou2IZRry1iKobCrTxD
lkdlKiBoJk4LI0oDl9zDAmbVDK/c5N6yXTNDPZXdkFqhvhmHEUG+EfVCnDJxGJC2
M7cy5YRbFFxNflSuMRy2TttajVsfUiMpCswHCJ1AYLOK6L6PwgMsoAakwbyJjL5o
YIGPTPST4r/cRrGX5YEpwmI8hDgq59a6vGF6ObYkmISGv7jhUfw/k+BbnrM/K+oW
R5NQW5D65FwFLbreEy55M3AhKey7px7jZAiqKXNPCsu6/Nifu8hB9AjSM5WzAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUf1BxHpIAokYVcjllkXZyQ96dO1UwHwYDVR0j
BBgwFoAUu4osiMUlVNSfa3kBN8O6toey+VYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzYvQkI4QTJDODhDNTI1NTRENDlGNkI3OTAxMzdDM0JBQjY4N0IyRjk1Ni5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3U0b3NpTVVsVk5TZmEza0JOOE82dG9l
eS1WWS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzYvMzEzODM1MmUzMTM5MzMyZTM2
MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMwMzUzNDM4LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
ucFBMA0GCSqGSIb3DQEBCwUAA4IBAQBxv6Z6z+6Apm81G8Bh5fk/JuAqT1y9RlfW
k0fqlnczJ/dZmVdkHTKEf12mcmpAzlRfm3CbPtJNLJLY+Di+eBXVcECNj+tVdAyI
GQgREIaj6cByadF+NrjEEcuSmqqZxtkwx8pq9bRV8DJx6uP/83FwC0FITZR2/ED5
0iGm2Yk0mZZ8IjjMQ59mpTmJt+17xqlnll+U/sXL5bLvtMPznxEY84MYtxn+wGnG
xFhCUCHtau4/egWSHgQU8AI7vfL5NIEjuTKRYWG9HyC604ooIyq2txh1h3MX3saP
NNYiBgoq9MQNGshCYpR7J0KvxiDhdlu3up2dqSeshO2LaATUDWp+
-----END CERTIFICATE-----
Generated at Fri Oct 20 12:48:46 2023 by rpki-client on console-ams.rpki-client.org