Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/2/34352e3135302e3234302e302f32342d3234203d3e203335343837.roa
File:                     34352e3135302e3234302e302f32342d3234203d3e203335343837.roa (raw, json)
Hash identifier:          wcBhM83gbKuVFbpgzOpQXOO/CGt8F48VXHC8itJtD3U=
Subject key identifier:   82:67:97:66:4D:EA:C6:BC:47:5B:5E:65:C6:9A:E6:A2:83:8D:59:F0
Certificate issuer:       /CN=e36a3cbcb6635d140f694b0cd99d1cd62456de2e
Certificate serial:       66516F6E1911FEB617B28B2426A33930A0A55335
Authority key identifier: E3:6A:3C:BC:B6:63:5D:14:0F:69:4B:0C:D9:9D:1C:D6:24:56:DE:2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/42o8vLZjXRQPaUsM2Z0c1iRW3i4.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/2/34352e3135302e3234302e302f32342d3234203d3e203335343837.roa
Signing time:             Tue 16 May 2023 23:45:02 +0000
ROA not before:           Tue 16 May 2023 23:40:02 +0000
ROA not after:            Tue 14 May 2024 23:45:02 +0000
asID:                     35487
IP address blocks:        45.150.240.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:51:6f:6e:19:11:fe:b6:17:b2:8b:24:26:a3:39:30:a0:a5:53:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e36a3cbcb6635d140f694b0cd99d1cd62456de2e
        Validity
            Not Before: May 16 23:40:02 2023 GMT
            Not After : May 14 23:45:02 2024 GMT
        Subject: CN=826797664DEAC6BC475B5E65C69AE6A2838D59F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:11:55:3f:30:12:09:29:e8:b8:5a:f9:79:9c:
                    5b:d0:0c:38:dd:57:bf:be:25:4b:9d:02:62:a5:72:
                    09:a2:89:63:10:dd:32:15:b4:ed:6e:83:8e:93:25:
                    50:40:08:01:4b:6e:cb:50:5c:26:6e:59:d3:7c:66:
                    aa:50:3a:46:23:e1:73:3e:dd:70:86:ef:36:24:65:
                    b9:38:f4:cc:c0:23:0f:54:ec:61:11:0f:29:ae:04:
                    f3:f7:1c:90:22:59:1a:d9:4a:a6:c6:82:2f:fd:01:
                    82:4f:60:5b:1a:29:7e:23:31:e9:94:00:49:db:80:
                    b9:01:80:6f:81:09:11:b0:ee:73:88:c9:05:b4:a4:
                    8f:0e:21:67:f4:c6:d2:3e:34:67:3b:54:ef:c5:22:
                    51:57:52:70:f3:2e:69:fd:5a:80:05:91:5e:57:a1:
                    6d:9f:69:df:5d:52:7b:9c:84:4e:51:e3:94:c4:88:
                    f3:65:39:94:55:1d:fc:cb:21:15:ff:5a:a1:29:21:
                    b4:bf:53:c6:68:5e:dc:3e:4c:43:0b:99:03:44:cf:
                    42:e4:04:ff:56:45:27:44:97:bb:3b:e5:e6:69:6e:
                    e4:41:44:d5:24:ab:60:02:88:40:25:cc:51:c0:48:
                    f1:de:94:9e:a7:76:aa:98:0f:db:c1:5c:32:e0:87:
                    37:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:67:97:66:4D:EA:C6:BC:47:5B:5E:65:C6:9A:E6:A2:83:8D:59:F0
            X509v3 Authority Key Identifier:
                keyid:E3:6A:3C:BC:B6:63:5D:14:0F:69:4B:0C:D9:9D:1C:D6:24:56:DE:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/2/E36A3CBCB6635D140F694B0CD99D1CD62456DE2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42o8vLZjXRQPaUsM2Z0c1iRW3i4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/34352e3135302e3234302e302f32342d3234203d3e203335343837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.150.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:f9:fc:c3:2c:2d:4a:3d:51:03:67:b6:61:2d:e4:d0:16:eb:
         05:12:7e:c7:68:e2:b3:56:f9:9c:d9:62:9d:31:50:98:3a:2e:
         56:bb:5f:ab:1c:ac:1c:41:af:1a:52:8e:b4:c9:69:6c:d3:00:
         ad:4e:3f:86:10:55:4f:18:da:05:ab:62:90:48:75:6f:5b:42:
         1d:40:97:9a:57:71:7c:6a:ad:c9:b6:f2:dc:47:97:4c:8a:6b:
         48:e0:91:82:f0:2a:3e:f4:9d:d5:78:91:b1:93:8b:56:14:4c:
         eb:45:ee:76:ea:3b:82:16:2e:b0:48:eb:08:bc:27:9f:98:27:
         e0:d4:11:6b:e2:e3:be:e8:f7:71:fb:b2:9b:d8:39:d5:9e:d2:
         93:70:7e:12:38:ea:01:0e:c0:ed:da:44:14:2f:e8:52:09:76:
         d6:c6:aa:8d:19:4e:f5:3a:9c:b6:e5:a8:58:b7:ae:da:96:05:
         98:ab:83:97:9f:e5:a8:ac:6f:95:56:6f:4f:b2:c7:f3:a1:00:
         dc:b8:cd:c9:67:fa:61:af:1c:aa:e2:63:c2:de:df:b2:88:43:
         cd:77:de:20:1b:60:62:f9:b9:bd:6c:8b:cc:a3:f6:72:ea:94:
         ac:74:5c:8f:9e:96:81:ec:2e:f7:ef:d8:68:7a:ad:f9:4a:91:
         eb:1b:10:24
-----BEGIN CERTIFICATE-----
MIIEyjCCA7KgAwIBAgIUZlFvbhkR/rYXsoskJqM5MKClUzUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZTM2YTNjYmNiNjYzNWQxNDBmNjk0YjBjZDk5ZDFjZDYy
NDU2ZGUyZTAeFw0yMzA1MTYyMzQwMDJaFw0yNDA1MTQyMzQ1MDJaMDMxMTAvBgNV
BAMTKDgyNjc5NzY2NERFQUM2QkM0NzVCNUU2NUM2OUFFNkEyODM4RDU5RjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsEVU/MBIJKei4Wvl5nFvQDDjd
V7++JUudAmKlcgmiiWMQ3TIVtO1ug46TJVBACAFLbstQXCZuWdN8ZqpQOkYj4XM+
3XCG7zYkZbk49MzAIw9U7GERDymuBPP3HJAiWRrZSqbGgi/9AYJPYFsaKX4jMemU
AEnbgLkBgG+BCRGw7nOIyQW0pI8OIWf0xtI+NGc7VO/FIlFXUnDzLmn9WoAFkV5X
oW2fad9dUnuchE5R45TEiPNlOZRVHfzLIRX/WqEpIbS/U8ZoXtw+TEMLmQNEz0Lk
BP9WRSdEl7s75eZpbuRBRNUkq2ACiEAlzFHASPHelJ6ndqqYD9vBXDLghzcZAgMB
AAGjggHUMIIB0DAdBgNVHQ4EFgQUgmeXZk3qxrxHW15lxprmooONWfAwHwYDVR0j
BBgwFoAU42o8vLZjXRQPaUsM2Z0c1iRW3i4wDgYDVR0PAQH/BAQDAgeAMGEGA1Ud
HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnN5bmMucnAua2kvcmVwby9taXNha2Fpby8y
L0UzNkEzQ0JDQjY2MzVEMTQwRjY5NEIwQ0Q5OUQxQ0Q2MjQ1NkRFMkUuY3JsMGQG
CCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvREVGQVVMVC80Mm84dkxaalhSUVBhVXNNMlowYzFpUlczaTQu
Y2VyMHoGCCsGAQUFBwELBG4wbDBqBggrBgEFBQcwC4ZecnN5bmM6Ly9yc3luYy5y
cC5raS9yZXBvL21pc2FrYWlvLzIvMzQzNTJlMzEzNTMwMmUzMjM0MzAyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMzM1MzQzODM3LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZbwMA0GCSqG
SIb3DQEBCwUAA4IBAQBZ+fzDLC1KPVEDZ7ZhLeTQFusFEn7HaOKzVvmc2WKdMVCY
Oi5Wu1+rHKwcQa8aUo60yWls0wCtTj+GEFVPGNoFq2KQSHVvW0IdQJeaV3F8aq3J
tvLcR5dMimtI4JGC8Co+9J3VeJGxk4tWFEzrRe526juCFi6wSOsIvCefmCfg1BFr
4uO+6Pdx+7Kb2DnVntKTcH4SOOoBDsDt2kQUL+hSCXbWxqqNGU71Opy25ahYt67a
lgWYq4OXn+WorG+VVm9PssfzoQDcuM3JZ/phrxyq4mPC3t+yiEPNd94gG2Bi+bm9
bIvMo/Zy6pSsdFyPnpaB7C7379hoeq35SpHrGxAk
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:13 2024 by rpki-client on console-ams.rpki-client.org