Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3139322e3134352e38312e302f32342d3332203d3e20313336373837.roa
File:                     3139322e3134352e38312e302f32342d3332203d3e20313336373837.roa (raw, json)
Hash identifier:          ErXKYTJRV4y4pKkQ1b1JRZbiGXXDB6mg/iUwGRsytZg=
Subject key identifier:   44:35:C3:E8:0A:2F:95:23:0D:D7:09:DD:C7:84:8E:20:7D:36:80:CF
Certificate issuer:       /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial:       47FEE857F1FD6EE349695D08F68F596E9BA9A7FB
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3139322e3134352e38312e302f32342d3332203d3e20313336373837.roa
Signing time:             Mon 27 Mar 2023 08:27:24 +0000
ROA not before:           Mon 27 Mar 2023 08:22:24 +0000
ROA not after:            Mon 25 Mar 2024 08:27:24 +0000
asID:                     136787
IP address blocks:        192.145.81.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:fe:e8:57:f1:fd:6e:e3:49:69:5d:08:f6:8f:59:6e:9b:a9:a7:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
        Validity
            Not Before: Mar 27 08:22:24 2023 GMT
            Not After : Mar 25 08:27:24 2024 GMT
        Subject: CN=4435C3E80A2F95230DD709DDC7848E207D3680CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:07:95:ee:92:29:b1:d6:47:9a:fa:11:76:ec:
                    68:16:0e:7b:d4:52:c7:19:60:d0:ee:39:3b:66:29:
                    36:00:78:29:c8:06:1f:bf:af:e1:03:f5:24:eb:33:
                    d8:be:dc:30:33:85:13:9c:82:30:68:d8:57:41:e1:
                    da:c7:82:72:3f:49:e0:03:f5:f5:c1:a7:b7:20:3e:
                    fe:3b:0b:18:5c:41:a8:8a:9e:33:ea:65:98:d3:20:
                    27:11:8f:5f:5b:2c:2f:5f:da:d6:df:4e:d9:15:89:
                    17:13:4c:b2:5b:2d:f3:05:11:c8:79:b5:14:b6:b2:
                    22:f0:72:58:da:9f:30:c0:47:30:35:da:e4:c7:53:
                    67:3e:9c:46:d0:8e:28:2d:6b:b7:b2:e0:4b:91:37:
                    8e:24:c4:3f:cf:11:61:2e:65:5d:a6:d6:82:fa:49:
                    ce:b8:d5:23:97:ce:06:6b:0c:2c:1c:c5:e5:3d:a1:
                    38:15:b9:0a:12:fd:84:6b:87:1b:02:5a:ea:b7:43:
                    f7:b6:09:54:89:d0:8f:79:b8:96:09:d0:1b:e3:55:
                    7b:af:e1:47:32:54:ba:4e:33:58:ea:46:bf:2a:2d:
                    5c:99:e4:60:d9:f3:c5:78:4c:6e:87:27:24:ed:79:
                    8c:6d:9e:2d:7b:b0:6f:b6:b5:3a:f5:48:58:fd:cb:
                    86:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:35:C3:E8:0A:2F:95:23:0D:D7:09:DD:C7:84:8E:20:7D:36:80:CF
            X509v3 Authority Key Identifier:
                keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3139322e3134352e38312e302f32342d3332203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.145.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:8c:31:ea:17:69:40:2f:31:c7:3a:93:41:eb:5b:1f:50:e5:
         35:02:3d:de:b1:c8:b0:50:79:71:11:0d:f0:9f:a8:5f:07:bc:
         55:59:55:06:fa:17:b8:c8:45:bd:fc:d1:5e:de:03:7a:aa:d5:
         6b:29:99:87:20:64:69:4a:2b:07:81:06:46:ec:50:6a:15:fd:
         9f:13:ef:0e:ff:94:00:52:b0:90:fe:fc:7d:eb:af:69:27:80:
         62:3a:11:7f:70:53:72:70:a4:0d:4d:8a:b3:03:14:ba:09:d0:
         8f:74:25:27:0b:d2:13:a5:fd:a9:51:a3:10:ab:4d:59:c6:c6:
         85:8c:0a:04:65:de:9b:a4:27:24:0d:7d:90:23:cd:11:7a:d5:
         b3:1c:80:a6:dd:59:10:f0:ce:b4:d7:61:b8:bc:ed:fe:63:f6:
         9c:e4:2d:18:10:b0:81:b1:6a:b0:e1:7f:16:09:65:8e:9d:70:
         99:ab:cc:83:74:ad:bc:dd:98:ba:16:ea:f1:52:34:69:f2:62:
         41:3b:3e:b8:84:7f:38:6d:25:50:90:3c:6e:ac:94:0f:9e:0c:
         c9:59:b4:3e:d2:8c:ec:89:45:ef:13:c4:a7:34:4b:7c:e8:8c:
         10:21:79:86:ae:f5:99:62:23:3a:81:69:c9:b2:00:4c:99:d6:
         34:68:f5:2c
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUR/7oV/H9buNJaV0I9o9Zbpupp/swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYmI4YTJjODhjNTI1NTRkNDlmNmI3OTAxMzdjM2JhYjY4
N2IyZjk1NjAeFw0yMzAzMjcwODIyMjRaFw0yNDAzMjUwODI3MjRaMDMxMTAvBgNV
BAMTKDQ0MzVDM0U4MEEyRjk1MjMwREQ3MDlEREM3ODQ4RTIwN0QzNjgwQ0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNB5Xukimx1kea+hF27GgWDnvU
UscZYNDuOTtmKTYAeCnIBh+/r+ED9STrM9i+3DAzhROcgjBo2FdB4drHgnI/SeAD
9fXBp7cgPv47CxhcQaiKnjPqZZjTICcRj19bLC9f2tbfTtkViRcTTLJbLfMFEch5
tRS2siLwcljanzDARzA12uTHU2c+nEbQjigta7ey4EuRN44kxD/PEWEuZV2m1oL6
Sc641SOXzgZrDCwcxeU9oTgVuQoS/YRrhxsCWuq3Q/e2CVSJ0I95uJYJ0BvjVXuv
4UcyVLpOM1jqRr8qLVyZ5GDZ88V4TG6HJyTteYxtni17sG+2tTr1SFj9y4YXAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQURDXD6AovlSMN1wndx4SOIH02gM8wHwYDVR0j
BBgwFoAUu4osiMUlVNSfa3kBN8O6toey+VYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzYvQkI4QTJDODhDNTI1NTRENDlGNkI3OTAxMzdDM0JBQjY4N0IyRjk1Ni5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3U0b3NpTVVsVk5TZmEza0JOOE82dG9l
eS1WWS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzYvMzEzOTMyMmUzMTM0MzUyZTM4
MzEyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BADAkVEwDQYJKoZIhvcNAQELBQADggEBAHSMMeoXaUAvMcc6k0HrWx9Q5TUCPd6x
yLBQeXERDfCfqF8HvFVZVQb6F7jIRb380V7eA3qq1WspmYcgZGlKKweBBkbsUGoV
/Z8T7w7/lABSsJD+/H3rr2kngGI6EX9wU3JwpA1NirMDFLoJ0I90JScL0hOl/alR
oxCrTVnGxoWMCgRl3pukJyQNfZAjzRF61bMcgKbdWRDwzrTXYbi87f5j9pzkLRgQ
sIGxarDhfxYJZY6dcJmrzIN0rbzdmLoW6vFSNGnyYkE7PriEfzhtJVCQPG6slA+e
DMlZtD7SjOyJRe8TxKc0S3zojBAheYau9ZliIzqBacmyAEyZ1jRo9Sw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:24 2024 by rpki-client on console-fra.rpki-client.org