Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3139372e3139322e302f32332d3234203d3e20313336373837.roa
File:                     3138352e3139372e3139322e302f32332d3234203d3e20313336373837.roa (raw, json)
Hash identifier:          B16sHr70lbt5fkqdKK0BH28rOSoZ7oP0rj2u/7JZQ2w=
Subject key identifier:   53:FA:09:45:08:A8:16:97:7B:CE:8A:E2:EC:0B:90:4A:BB:9A:5B:CE
Certificate issuer:       /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial:       3EEB06C77507A3BEEF7B7087EE9FE606A0A3F9AB
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3139372e3139322e302f32332d3234203d3e20313336373837.roa
Signing time:             Mon 27 Mar 2023 08:27:22 +0000
ROA not before:           Mon 27 Mar 2023 08:22:22 +0000
ROA not after:            Mon 25 Mar 2024 08:27:22 +0000
asID:                     136787
IP address blocks:        185.197.192.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:eb:06:c7:75:07:a3:be:ef:7b:70:87:ee:9f:e6:06:a0:a3:f9:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
        Validity
            Not Before: Mar 27 08:22:22 2023 GMT
            Not After : Mar 25 08:27:22 2024 GMT
        Subject: CN=53FA094508A816977BCE8AE2EC0B904ABB9A5BCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:12:de:ee:2d:a2:a0:c9:63:fd:0c:f1:17:f7:
                    4c:5c:fe:c2:c4:7c:ae:2a:a6:5e:df:b1:7d:3b:be:
                    ed:4a:9c:90:90:9c:0e:ed:14:dd:20:6f:11:8a:5d:
                    fe:03:27:3f:78:0f:2c:ce:56:aa:e9:c0:81:a2:33:
                    cf:55:20:04:81:51:b6:49:9e:21:d1:ad:e6:eb:59:
                    5e:ca:f3:c0:20:13:80:b5:ea:a0:47:a0:5e:55:d8:
                    c6:da:54:03:c6:5e:f3:b9:49:f6:0d:57:9f:34:e0:
                    af:ea:60:0e:28:2d:15:e4:d6:99:d2:71:45:b1:0b:
                    4b:52:ff:7f:d0:a5:e1:2c:76:9f:88:a6:2a:23:34:
                    d2:64:b0:c5:92:69:fc:f6:dd:67:65:91:67:99:f4:
                    f5:32:dd:99:a1:c0:df:72:6d:00:23:5c:2e:19:32:
                    3a:9c:98:0e:69:a3:8a:96:50:34:b1:68:8e:95:a1:
                    32:48:d3:af:26:a8:4b:16:a3:51:77:cb:04:3a:17:
                    6b:99:46:91:10:f1:6a:ba:b4:96:9f:6d:72:aa:01:
                    f0:68:69:cf:77:9d:cd:64:f2:3f:cb:2a:09:46:35:
                    ef:9d:c4:0a:00:0a:93:e8:60:52:2e:cc:53:cb:c1:
                    24:15:0f:50:59:69:e9:f0:6f:b2:ec:cb:c7:c4:97:
                    3b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:FA:09:45:08:A8:16:97:7B:CE:8A:E2:EC:0B:90:4A:BB:9A:5B:CE
            X509v3 Authority Key Identifier:
                keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3139372e3139322e302f32332d3234203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.197.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         13:66:51:4a:21:92:86:24:01:65:ab:fc:3e:49:d5:97:a9:45:
         a5:7b:bc:09:52:1b:86:75:80:cd:7b:1f:5f:a3:75:49:1a:67:
         eb:2a:21:39:98:8b:3b:f9:ff:6d:1b:7f:6f:95:b7:cf:37:55:
         4b:57:d3:33:57:58:89:e4:60:b9:40:04:85:cb:31:ba:43:eb:
         c9:17:3c:62:f5:22:71:84:32:4c:11:15:39:85:58:19:ac:3b:
         a1:a4:e3:df:e4:16:cf:bf:b2:6f:bf:d1:80:7a:90:80:46:55:
         8e:55:0f:c1:54:3e:33:62:19:23:bd:c3:3b:05:b2:3a:e2:c3:
         53:c8:c5:6e:b5:a3:8e:6a:7d:04:17:90:e1:58:35:f1:82:ce:
         87:6b:0f:af:a6:a3:c1:a9:57:28:14:35:8c:08:ff:65:b0:8e:
         c5:b7:34:51:e0:99:5a:47:d3:6d:a9:8d:f3:56:db:c9:94:c9:
         f1:71:13:be:96:dd:83:66:65:25:5d:66:43:a6:94:a6:99:ec:
         01:81:b1:9a:2d:bf:3c:99:cd:4b:ce:48:12:64:d6:8a:20:b7:
         62:40:f5:3c:34:1c:1f:fd:bd:a2:fe:73:b7:76:34:25:2a:15:
         46:f2:d1:00:a7:8a:93:94:dc:0b:f9:72:04:26:28:5f:27:fd:
         64:f4:ba:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:23 2024 by rpki-client on console-fra.rpki-client.org