Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3231332e38302e302f32342d3234203d3e20313437303439.roa
File:                     3138352e3231332e38302e302f32342d3234203d3e20313437303439.roa (raw, json)
Hash identifier:          oJdqiIgBm2YF8qpxLMH5EBKx+wUFvmu9eAv0JYxfBC8=
Subject key identifier:   3A:80:B0:EA:C7:7A:31:B1:6A:BD:F2:BE:52:6A:A8:57:71:B3:A0:D0
Certificate issuer:       /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial:       697638655791AE091EA0EC240F43B4C0C86F9492
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3231332e38302e302f32342d3234203d3e20313437303439.roa
Signing time:             Mon 27 Mar 2023 08:27:14 +0000
ROA not before:           Mon 27 Mar 2023 08:22:14 +0000
ROA not after:            Mon 25 Mar 2024 08:27:14 +0000
asID:                     147049
IP address blocks:        185.213.80.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:76:38:65:57:91:ae:09:1e:a0:ec:24:0f:43:b4:c0:c8:6f:94:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
        Validity
            Not Before: Mar 27 08:22:14 2023 GMT
            Not After : Mar 25 08:27:14 2024 GMT
        Subject: CN=3A80B0EAC77A31B16ABDF2BE526AA85771B3A0D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:0e:b4:34:9e:19:7d:35:f7:65:1a:fd:2c:25:
                    d3:7d:e1:da:bb:1a:ed:48:36:e8:4f:f1:c4:c4:6e:
                    ea:39:ed:46:1b:16:f8:2f:3c:54:4f:33:f0:be:6b:
                    ac:de:ca:e3:23:fb:85:f6:72:0a:be:2b:d1:28:ed:
                    a4:8d:b7:89:de:7c:fa:46:1d:64:b0:d0:1c:26:50:
                    93:99:87:68:2e:07:6b:2b:e1:d2:0a:00:c6:72:58:
                    59:86:1f:6e:97:0c:52:a2:41:88:87:60:09:b7:41:
                    c2:f9:04:b4:04:15:90:e2:53:20:8a:6d:fd:79:28:
                    97:d6:52:a7:85:f0:83:e1:c5:b0:6d:8b:a1:4e:d7:
                    ee:32:dd:3e:3c:9f:6d:6c:33:60:12:1f:f9:34:91:
                    7e:88:fa:98:f4:eb:8a:58:f5:58:2e:7e:2f:30:7b:
                    47:d6:1b:e3:87:bb:2f:0e:44:0c:08:83:ec:18:56:
                    7a:bf:ed:cb:e7:f6:7f:7d:fc:ac:51:99:3c:73:ad:
                    a3:af:38:5e:b1:0b:c6:b8:5d:43:da:c5:ad:08:9c:
                    fa:25:35:e7:58:e5:4f:67:35:02:7f:86:e7:be:43:
                    cf:e8:43:db:81:b1:79:fc:5f:cf:77:c0:0e:55:71:
                    08:bf:ea:f2:e3:d7:02:b0:a2:c3:1d:c4:5f:36:a7:
                    0e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:80:B0:EA:C7:7A:31:B1:6A:BD:F2:BE:52:6A:A8:57:71:B3:A0:D0
            X509v3 Authority Key Identifier:
                keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3231332e38302e302f32342d3234203d3e20313437303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.213.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:53:59:66:d7:67:b5:ce:b7:a4:5a:36:44:9b:84:3d:25:51:
         77:bb:bf:70:5d:cb:b5:52:90:a0:4e:dd:50:62:b9:41:38:34:
         f6:bf:a9:e8:3e:e5:68:76:51:d1:91:4e:af:85:f9:42:52:39:
         a0:bf:ed:94:5f:72:88:31:10:81:04:a6:14:b0:dd:f5:05:dc:
         d8:4f:04:f0:19:6a:30:e6:58:2c:6a:da:48:37:d7:7e:4e:95:
         51:ef:a9:98:f7:85:4e:c0:de:e0:c6:97:5b:3f:c1:15:46:95:
         a2:62:20:15:e9:b5:16:9d:cd:e9:5e:a4:b2:86:cb:49:bf:a4:
         36:00:80:68:38:20:5a:f5:22:c5:ce:88:1c:a4:c7:b1:1f:fe:
         0d:08:99:2c:36:10:73:33:f1:4f:99:37:97:3b:0d:50:51:29:
         a2:5d:14:95:de:ba:65:6c:75:0c:ce:27:b6:64:81:31:8e:13:
         23:51:df:e9:49:b6:d7:65:cf:52:e8:10:94:b4:76:ae:db:0b:
         96:41:7a:b6:da:57:f8:98:25:37:fd:31:af:e7:39:10:7b:c0:
         0c:ed:74:95:9f:bc:b8:7b:b8:40:f9:6e:c2:0f:64:9e:f7:fb:
         d4:c4:0d:f0:34:87:3f:42:5a:8c:4d:11:6b:3e:99:6e:fd:c8:
         72:89:74:f8
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUaXY4ZVeRrgkeoOwkD0O0wMhvlJIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYmI4YTJjODhjNTI1NTRkNDlmNmI3OTAxMzdjM2JhYjY4
N2IyZjk1NjAeFw0yMzAzMjcwODIyMTRaFw0yNDAzMjUwODI3MTRaMDMxMTAvBgNV
BAMTKDNBODBCMEVBQzc3QTMxQjE2QUJERjJCRTUyNkFBODU3NzFCM0EwRDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlDrQ0nhl9NfdlGv0sJdN94dq7
Gu1INuhP8cTEbuo57UYbFvgvPFRPM/C+a6zeyuMj+4X2cgq+K9Eo7aSNt4nefPpG
HWSw0BwmUJOZh2guB2sr4dIKAMZyWFmGH26XDFKiQYiHYAm3QcL5BLQEFZDiUyCK
bf15KJfWUqeF8IPhxbBti6FO1+4y3T48n21sM2ASH/k0kX6I+pj064pY9Vgufi8w
e0fWG+OHuy8ORAwIg+wYVnq/7cvn9n99/KxRmTxzraOvOF6xC8a4XUPaxa0InPol
NedY5U9nNQJ/hue+Q8/oQ9uBsXn8X893wA5VcQi/6vLj1wKwosMdxF82pw6JAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUOoCw6sd6MbFqvfK+UmqoV3GzoNAwHwYDVR0j
BBgwFoAUu4osiMUlVNSfa3kBN8O6toey+VYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzYvQkI4QTJDODhDNTI1NTRENDlGNkI3OTAxMzdDM0JBQjY4N0IyRjk1Ni5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3U0b3NpTVVsVk5TZmEza0JOOE82dG9l
eS1WWS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzYvMzEzODM1MmUzMjMxMzMyZTM4
MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM0MzczMDM0Mzkucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAC51VAwDQYJKoZIhvcNAQELBQADggEBAE5TWWbXZ7XOt6RaNkSbhD0lUXe7v3Bd
y7VSkKBO3VBiuUE4NPa/qeg+5Wh2UdGRTq+F+UJSOaC/7ZRfcogxEIEEphSw3fUF
3NhPBPAZajDmWCxq2kg3135OlVHvqZj3hU7A3uDGl1s/wRVGlaJiIBXptRadzele
pLKGy0m/pDYAgGg4IFr1IsXOiBykx7Ef/g0ImSw2EHMz8U+ZN5c7DVBRKaJdFJXe
umVsdQzOJ7ZkgTGOEyNR3+lJttdlz1LoEJS0dq7bC5ZBerbaV/iYJTf9Ma/nORB7
wAztdJWfvLh7uED5bsIPZJ73+9TEDfA0hz9CWoxNEWs+mW79yHKJdPg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:12 2024 by rpki-client on console-ams.rpki-client.org