Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/3/3138352e3138392e37322e302f32342d3234203d3e203537363935.roa
File:                     3138352e3138392e37322e302f32342d3234203d3e203537363935.roa (raw, json)
Hash identifier:          UyTSuZCjDwCwfzsM1Wp23VemMR6ieUYGv5s6cGXE8Ao=
Subject key identifier:   19:7F:00:70:45:63:B2:CD:E4:60:DC:AA:6F:A7:A5:16:A9:8A:76:82
Certificate issuer:       /CN=a66bb45ae5394c7b0194ee291e013d40962a4b86
Certificate serial:       5F551BCF26B8C439B4478AFC7DF2396649C5D7D1
Authority key identifier: A6:6B:B4:5A:E5:39:4C:7B:01:94:EE:29:1E:01:3D:40:96:2A:4B:86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pmu0WuU5THsBlO4pHgE9QJYqS4Y.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/3/3138352e3138392e37322e302f32342d3234203d3e203537363935.roa
Signing time:             Sun 03 Dec 2023 21:38:28 +0000
ROA not before:           Sun 03 Dec 2023 21:33:28 +0000
ROA not after:            Sun 01 Dec 2024 21:38:28 +0000
asID:                     57695
IP address blocks:        185.189.72.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:55:1b:cf:26:b8:c4:39:b4:47:8a:fc:7d:f2:39:66:49:c5:d7:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a66bb45ae5394c7b0194ee291e013d40962a4b86
        Validity
            Not Before: Dec  3 21:33:28 2023 GMT
            Not After : Dec  1 21:38:28 2024 GMT
        Subject: CN=197F00704563B2CDE460DCAA6FA7A516A98A7682
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:18:ba:14:e0:1e:53:e5:45:9e:7b:cb:06:a0:
                    70:9f:eb:e4:e1:0e:73:94:54:da:50:8f:3a:da:4d:
                    30:d5:74:17:ce:59:a6:6c:ae:f8:97:3e:4e:26:1b:
                    6d:88:77:01:e2:32:5f:99:dc:11:d3:81:dd:ce:60:
                    98:49:5d:de:2a:15:b2:c5:84:25:65:08:21:fb:6a:
                    7f:7e:f3:32:61:ed:6e:a7:24:ad:9c:5e:98:0e:6e:
                    83:34:57:2b:50:5a:d0:e0:9a:40:61:2e:ad:2a:cd:
                    91:95:ed:e9:fe:26:77:29:34:4c:58:4c:02:b3:fd:
                    7a:5d:4f:f4:b4:6e:6c:db:d8:65:3d:45:6d:27:5a:
                    a0:44:2d:54:59:0c:63:92:8f:ad:08:d2:22:57:52:
                    50:5d:ab:8e:2f:25:e9:98:24:4f:a8:e5:5c:5d:c8:
                    44:6a:7c:3d:1c:71:c8:cd:9e:0c:f1:d0:87:60:4e:
                    72:07:0f:69:b4:24:b8:f4:42:a8:61:c0:35:05:b8:
                    74:a8:55:23:6e:81:91:7b:4c:41:81:93:a6:b7:e0:
                    97:27:14:93:bf:da:e5:30:ad:5c:e1:58:32:3b:4b:
                    e8:bb:1e:25:15:89:00:7f:d7:a2:cb:6e:d7:59:a2:
                    a3:39:1a:c1:30:40:eb:ba:c0:27:f9:cc:21:a8:e4:
                    05:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:7F:00:70:45:63:B2:CD:E4:60:DC:AA:6F:A7:A5:16:A9:8A:76:82
            X509v3 Authority Key Identifier:
                keyid:A6:6B:B4:5A:E5:39:4C:7B:01:94:EE:29:1E:01:3D:40:96:2A:4B:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/3/A66BB45AE5394C7B0194EE291E013D40962A4B86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pmu0WuU5THsBlO4pHgE9QJYqS4Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/3/3138352e3138392e37322e302f32342d3234203d3e203537363935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.189.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:71:72:0b:62:10:60:07:12:81:01:61:38:e4:33:f4:d1:3f:
         be:57:d1:73:7e:a5:e0:fc:0b:2f:58:21:13:e0:5a:fe:60:db:
         68:f9:f2:41:21:0b:3c:32:cc:d3:92:e1:57:4b:18:df:11:93:
         91:4e:a4:ee:32:a9:77:89:0b:bb:df:7e:e6:74:94:a1:0a:e4:
         30:c2:05:f7:d4:56:ab:4b:8c:d3:a7:bd:36:4d:9c:96:dd:38:
         cd:dd:b1:95:1a:96:1e:c6:d3:e4:0c:d3:4d:a5:87:1b:56:6a:
         bd:e2:d6:18:9d:39:08:95:ab:0f:59:c1:82:7b:aa:d3:2d:00:
         63:74:83:9a:55:34:2c:2a:f4:46:3b:2b:67:62:bb:1c:f5:ed:
         3c:06:98:31:68:22:87:7f:d3:67:f2:c3:56:05:2c:fc:b2:57:
         47:c1:3a:09:be:7c:b1:92:76:3a:fc:0c:f2:5d:db:97:46:15:
         22:28:5c:07:42:b8:b4:f1:3f:98:3d:a1:95:ce:ab:76:24:89:
         0e:65:d5:40:73:02:8f:72:a5:a6:b5:97:67:a5:f0:e2:0e:6e:
         53:6a:3a:d2:85:c0:1c:6e:9f:16:31:a3:d2:90:29:62:a8:2b:
         95:12:91:04:b7:c2:e0:40:c4:97:92:40:97:59:63:0d:0f:7a:
         61:ac:c5:13
-----BEGIN CERTIFICATE-----
MIIEyjCCA7KgAwIBAgIUX1Ubzya4xDm0R4r8ffI5ZknF19EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTY2YmI0NWFlNTM5NGM3YjAxOTRlZTI5MWUwMTNkNDA5
NjJhNGI4NjAeFw0yMzEyMDMyMTMzMjhaFw0yNDEyMDEyMTM4MjhaMDMxMTAvBgNV
BAMTKDE5N0YwMDcwNDU2M0IyQ0RFNDYwRENBQTZGQTdBNTE2QTk4QTc2ODIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIGLoU4B5T5UWee8sGoHCf6+Th
DnOUVNpQjzraTTDVdBfOWaZsrviXPk4mG22IdwHiMl+Z3BHTgd3OYJhJXd4qFbLF
hCVlCCH7an9+8zJh7W6nJK2cXpgOboM0VytQWtDgmkBhLq0qzZGV7en+JncpNExY
TAKz/XpdT/S0bmzb2GU9RW0nWqBELVRZDGOSj60I0iJXUlBdq44vJemYJE+o5Vxd
yERqfD0cccjNngzx0IdgTnIHD2m0JLj0QqhhwDUFuHSoVSNugZF7TEGBk6a34Jcn
FJO/2uUwrVzhWDI7S+i7HiUViQB/16LLbtdZoqM5GsEwQOu6wCf5zCGo5AXPAgMB
AAGjggHUMIIB0DAdBgNVHQ4EFgQUGX8AcEVjss3kYNyqb6elFqmKdoIwHwYDVR0j
BBgwFoAUpmu0WuU5THsBlO4pHgE9QJYqS4YwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud
HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnN5bmMucnAua2kvcmVwby9taXNha2Fpby8z
L0E2NkJCNDVBRTUzOTRDN0IwMTk0RUUyOTFFMDEzRDQwOTYyQTRCODYuY3JsMGQG
CCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvREVGQVVMVC9wbXUwV3VVNVRIc0JsTzRwSGdFOVFKWXFTNFku
Y2VyMHoGCCsGAQUFBwELBG4wbDBqBggrBgEFBQcwC4ZecnN5bmM6Ly9yc3luYy5y
cC5raS9yZXBvL21pc2FrYWlvLzMvMzEzODM1MmUzMTM4MzkyZTM3MzIyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzNTM3MzYzOTM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAub1IMA0GCSqG
SIb3DQEBCwUAA4IBAQAccXILYhBgBxKBAWE45DP00T++V9FzfqXg/AsvWCET4Fr+
YNto+fJBIQs8MszTkuFXSxjfEZORTqTuMql3iQu7337mdJShCuQwwgX31FarS4zT
p702TZyW3TjN3bGVGpYextPkDNNNpYcbVmq94tYYnTkIlasPWcGCe6rTLQBjdIOa
VTQsKvRGOytnYrsc9e08BpgxaCKHf9Nn8sNWBSz8sldHwToJvnyxknY6/AzyXduX
RhUiKFwHQri08T+YPaGVzqt2JIkOZdVAcwKPcqWmtZdnpfDiDm5TajrShcAcbp8W
MaPSkCliqCuVEpEEt8LgQMSXkkCXWWMND3phrMUT
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:24 2024 by rpki-client on console-fra.rpki-client.org