Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/38332e3133362e3138302e302f32342d3234203d3e20313336373837.roa
File:                     38332e3133362e3138302e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier:          yi1EEJohsw67+bZvCd9Dhlw/A4Vl0uifDCX3sY2B+mI=
Subject key identifier:   CB:87:B4:EB:7D:B2:EA:A1:BA:9D:BF:A3:59:55:FB:32:CB:A2:E1:26
Certificate issuer:       /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial:       49406AFED22C47B8D3C32CF58BB86E70D7981FDB
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/38332e3133362e3138302e302f32342d3234203d3e20313336373837.roa
Signing time:             Sun 11 Jun 2023 10:58:41 +0000
ROA not before:           Sun 11 Jun 2023 10:53:41 +0000
ROA not after:            Sun 09 Jun 2024 10:58:41 +0000
asID:                     136787
IP address blocks:        83.136.180.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:40:6a:fe:d2:2c:47:b8:d3:c3:2c:f5:8b:b8:6e:70:d7:98:1f:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
        Validity
            Not Before: Jun 11 10:53:41 2023 GMT
            Not After : Jun  9 10:58:41 2024 GMT
        Subject: CN=CB87B4EB7DB2EAA1BA9DBFA35955FB32CBA2E126
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e3:58:17:15:a1:81:fe:84:c8:48:54:49:ea:
                    dd:a3:17:a6:3a:4b:1d:8f:02:3b:fa:c1:06:82:8b:
                    d2:ec:24:6c:2a:f6:b8:7d:00:f1:97:16:e4:fc:07:
                    a1:44:5e:68:e2:5a:7b:83:e2:ea:60:a1:a5:4c:c9:
                    b8:65:73:fb:a5:3a:c5:91:f2:51:24:71:32:b0:f2:
                    60:a3:7f:7b:e3:10:97:db:25:b8:2a:ca:ec:69:c8:
                    cf:8c:09:62:d1:91:09:1c:dc:d8:80:4c:6a:e1:5f:
                    51:e1:81:b9:13:9b:f7:2b:99:33:be:62:06:0c:a2:
                    28:40:69:20:0c:e1:c7:0b:89:ef:9e:92:c2:22:70:
                    eb:53:44:0f:42:5b:82:57:23:24:7f:0f:2a:5f:2f:
                    7d:f1:dc:3e:57:52:91:2f:96:4d:28:70:a7:81:d5:
                    c5:f6:9f:22:d5:ad:82:f6:82:a3:ed:89:b2:30:2e:
                    00:92:55:ee:eb:08:1a:e6:a5:17:f2:8a:c3:7d:0a:
                    61:d5:cb:87:c6:0c:49:82:ef:4c:ea:9f:1e:9c:8d:
                    af:89:b9:bb:e5:29:29:4e:7e:72:5a:9d:56:7e:9a:
                    5a:e6:06:72:2d:4f:da:d6:b8:2a:17:30:d7:3f:70:
                    c0:90:df:a3:ef:bd:e7:2b:21:c3:32:6d:bd:f8:7e:
                    48:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:87:B4:EB:7D:B2:EA:A1:BA:9D:BF:A3:59:55:FB:32:CB:A2:E1:26
            X509v3 Authority Key Identifier:
                keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/38332e3133362e3138302e302f32342d3234203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.136.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:1e:3e:0f:17:84:4c:5f:ae:54:31:b4:21:5e:db:1b:bf:34:
         d5:4d:01:ee:d0:62:ed:eb:3d:b3:06:06:45:39:91:13:d6:f4:
         47:ef:fc:e4:b5:4f:4b:d0:a2:9a:a8:bc:90:6e:c6:e4:ee:80:
         73:d8:15:ef:e7:b9:5b:d2:ae:5d:53:9e:ef:f0:8c:8a:97:d4:
         64:79:42:bb:dd:56:f2:42:ec:b4:17:ba:b0:ba:ff:8d:4d:98:
         43:98:75:17:a8:e8:21:d0:3c:f9:a6:ef:07:f4:e4:ce:97:30:
         a7:53:2b:24:72:1c:3e:e9:23:fc:c0:7f:2c:eb:7b:09:ff:98:
         3f:db:a9:dc:16:3b:69:91:27:17:fe:4c:7a:23:26:a5:ec:7e:
         c0:b0:5e:b5:26:25:16:45:fc:7a:1b:6b:f7:14:b0:1b:3c:c6:
         ea:90:80:08:4e:73:6e:cf:df:68:64:63:28:60:88:97:c8:df:
         6d:88:41:98:8a:ce:95:1d:82:75:0c:19:de:72:8c:b4:3c:ce:
         02:73:4a:99:56:c2:53:92:73:65:b0:6c:65:73:57:37:d0:21:
         ec:aa:0d:5b:5d:b4:30:87:68:cf:12:1f:a6:f3:4a:c5:58:6d:
         b9:df:2b:a3:52:93:49:96:6e:b4:6b:81:b3:2c:42:e1:97:23:
         53:dd:74:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 20 12:57:19 2023 by rpki-client on console-fra.rpki-client.org