Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3232322e3234312e302f32342d3234203d3e20313336373837.roa
File:                     3138352e3232322e3234312e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier:          lqrzmN3UO4nNbOEFYvLUuMtU6KP7q9Lxz7V5tkI1cPs=
Subject key identifier:   6C:7A:05:34:E3:94:95:0C:58:7D:95:82:EA:D8:86:83:93:75:0B:BD
Certificate issuer:       /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial:       3AA0C202C001D5EA254C916C33F7C6E05FC1A637
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3232322e3234312e302f32342d3234203d3e20313336373837.roa
Signing time:             Mon 27 Mar 2023 08:27:18 +0000
ROA not before:           Mon 27 Mar 2023 08:22:18 +0000
ROA not after:            Mon 25 Mar 2024 08:27:18 +0000
asID:                     136787
IP address blocks:        185.222.241.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:a0:c2:02:c0:01:d5:ea:25:4c:91:6c:33:f7:c6:e0:5f:c1:a6:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
        Validity
            Not Before: Mar 27 08:22:18 2023 GMT
            Not After : Mar 25 08:27:18 2024 GMT
        Subject: CN=6C7A0534E394950C587D9582EAD8868393750BBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8c:e0:03:12:9d:12:82:c1:65:8a:c0:21:c9:
                    a3:7a:50:be:25:2a:93:68:d4:a9:7c:5f:af:79:87:
                    3a:c6:22:8b:ea:a1:8e:6a:7a:32:fd:3c:ec:4e:2c:
                    0f:c3:78:d9:17:cc:ae:8b:38:8d:23:89:cf:e7:85:
                    71:43:94:38:c8:0b:e4:c8:ee:cd:3c:cb:07:0b:68:
                    7a:79:b0:e0:55:d5:91:50:f6:3e:84:fb:b1:d4:ef:
                    60:8b:42:75:5e:92:8c:3e:3e:ea:20:b4:78:5b:cc:
                    e0:6a:55:54:4d:a2:ed:ea:eb:3c:e8:d0:32:e8:6c:
                    e1:b4:4a:39:ca:b9:1c:0c:8e:32:85:a8:33:bb:c7:
                    d7:6a:4a:18:71:8b:4d:37:48:24:d4:4b:29:11:ec:
                    b2:97:28:e3:6b:d6:56:85:33:7b:ae:65:83:6c:87:
                    c5:99:e9:9f:4f:9b:b3:c6:1c:ca:eb:ae:e5:d6:67:
                    aa:b2:33:80:21:cc:17:a2:28:f0:f5:24:50:de:6f:
                    7d:f3:a0:48:b6:35:9a:70:b1:eb:d2:ef:65:3f:74:
                    a5:a2:ff:4e:89:eb:cb:e1:ce:26:e6:3d:54:b3:46:
                    4e:6b:00:84:80:87:ea:a8:6a:d1:6f:15:b3:b3:84:
                    cf:a6:dd:5b:31:4c:22:a3:42:24:3c:dc:af:1c:dd:
                    fc:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:7A:05:34:E3:94:95:0C:58:7D:95:82:EA:D8:86:83:93:75:0B:BD
            X509v3 Authority Key Identifier:
                keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3232322e3234312e302f32342d3234203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.222.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:b1:49:fd:c2:a0:af:1e:c3:bd:31:f3:4e:6c:0f:cb:0e:c6:
         bf:8f:d6:08:a6:16:62:39:7b:5c:ac:e5:36:52:c0:c8:5a:4e:
         a2:6a:01:f3:5b:d8:a5:81:23:21:f2:5f:9a:fd:11:e9:6e:c0:
         3b:df:59:0c:ad:cf:38:5b:cf:15:82:2e:58:88:b0:6a:2f:a8:
         55:df:c6:a9:b7:d5:af:26:79:7f:b0:95:f5:ed:c8:66:a3:e6:
         77:4f:c6:41:8f:5f:06:f3:f9:e0:4c:8c:be:3c:99:2d:fe:fe:
         65:6c:6c:3f:af:72:08:97:3c:73:5c:e9:0b:da:9a:25:27:49:
         ef:c9:72:72:8e:a2:f3:e9:0d:ee:df:bd:3e:3c:1b:51:ad:6c:
         e7:e1:55:fd:48:f9:3e:a0:e9:83:00:da:fa:91:e4:08:a9:16:
         d9:eb:3c:7b:b4:95:0f:2b:ea:ba:33:7e:c8:c8:da:9c:2f:5f:
         d6:d8:2c:b9:4b:c4:45:2a:69:be:dd:39:32:04:fb:4c:b8:17:
         d4:f5:c5:93:f0:8d:61:bf:88:37:1a:6e:28:46:85:46:82:0f:
         28:52:a5:6e:e4:65:a2:5d:cf:27:03:dc:33:28:ae:01:5e:27:
         91:c8:47:a5:1d:af:cf:89:17:96:3d:c2:bf:6e:2f:5d:df:48:
         5f:d8:85:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 20 12:57:18 2023 by rpki-client on console-fra.rpki-client.org