Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/3/3138352e3138392e37322e302f32342d3234203d3e20393137.roa
File:                     3138352e3138392e37322e302f32342d3234203d3e20393137.roa (raw, json)
Hash identifier:          9c+bdnvQmidnHhELVqo04n3H8jLif9I9Dz2WO3Kw6Ec=
Subject key identifier:   41:92:AD:FA:4A:D4:6C:11:FD:BF:C3:B5:A7:82:85:10:DD:E9:60:FF
Certificate issuer:       /CN=a66bb45ae5394c7b0194ee291e013d40962a4b86
Certificate serial:       71C7A50E8D2936732F7548D041A985A21F89CE56
Authority key identifier: A6:6B:B4:5A:E5:39:4C:7B:01:94:EE:29:1E:01:3D:40:96:2A:4B:86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pmu0WuU5THsBlO4pHgE9QJYqS4Y.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/3/3138352e3138392e37322e302f32342d3234203d3e20393137.roa
Signing time:             Sun 03 Dec 2023 21:38:28 +0000
ROA not before:           Sun 03 Dec 2023 21:33:28 +0000
ROA not after:            Sun 01 Dec 2024 21:38:28 +0000
asID:                     917
IP address blocks:        185.189.72.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:c7:a5:0e:8d:29:36:73:2f:75:48:d0:41:a9:85:a2:1f:89:ce:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a66bb45ae5394c7b0194ee291e013d40962a4b86
        Validity
            Not Before: Dec  3 21:33:28 2023 GMT
            Not After : Dec  1 21:38:28 2024 GMT
        Subject: CN=4192ADFA4AD46C11FDBFC3B5A7828510DDE960FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:32:2e:50:62:be:c0:cc:83:21:43:c1:45:46:
                    d4:17:8a:17:ee:7d:b9:34:a0:d0:28:06:ff:8c:ff:
                    62:c2:5c:1e:cc:84:bf:9e:18:95:24:fb:7c:46:bc:
                    73:c4:e0:79:15:bb:20:29:32:59:97:de:57:2c:9a:
                    e2:34:1c:7d:6a:85:ec:53:46:8a:f8:1c:c7:0a:24:
                    1c:df:3a:00:3b:19:98:90:d9:57:78:3c:c4:f1:39:
                    5a:c7:df:5e:f1:2d:85:67:0c:3f:a7:85:58:22:50:
                    ed:57:49:1f:36:e9:03:94:32:d8:32:d0:67:e8:8c:
                    d8:4c:72:dc:03:28:91:b4:92:d0:b1:ae:8a:dc:9d:
                    5c:58:bd:c5:b4:4f:c0:f9:2f:a4:1c:2d:6a:57:40:
                    7a:a2:97:4d:56:2c:fa:18:49:6b:da:4b:d8:57:31:
                    48:46:3b:c8:28:97:70:c2:d9:82:87:5e:73:a7:fb:
                    78:73:5c:c0:16:41:c6:ab:60:be:91:5c:7d:b4:e3:
                    ff:11:e1:01:77:64:e2:81:6b:46:ce:ed:85:c5:57:
                    96:32:45:8a:52:aa:f2:74:c8:61:78:c6:a0:c2:78:
                    91:fc:c3:f3:f5:75:6a:90:f3:6d:18:be:c5:27:c5:
                    d7:38:48:b9:ad:21:39:16:87:ce:1d:ad:90:0f:61:
                    71:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:92:AD:FA:4A:D4:6C:11:FD:BF:C3:B5:A7:82:85:10:DD:E9:60:FF
            X509v3 Authority Key Identifier:
                keyid:A6:6B:B4:5A:E5:39:4C:7B:01:94:EE:29:1E:01:3D:40:96:2A:4B:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/3/A66BB45AE5394C7B0194EE291E013D40962A4B86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pmu0WuU5THsBlO4pHgE9QJYqS4Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/3/3138352e3138392e37322e302f32342d3234203d3e20393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.189.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:52:24:44:99:83:77:91:6e:2c:d7:72:ca:0d:df:56:10:e2:
         9d:30:61:08:0b:c7:52:02:07:9c:df:93:be:06:19:cf:05:87:
         f1:99:b3:b3:f0:c0:26:82:f3:6d:62:c8:fc:e0:29:5c:c9:ec:
         09:51:4e:e7:9e:65:de:70:ee:23:ce:96:7e:da:4a:52:fc:03:
         a3:cc:e9:4e:4e:6b:76:d8:e4:ac:04:33:d9:6f:e2:7d:43:aa:
         4a:65:56:ec:3b:1f:55:7b:a3:73:64:b5:fc:58:15:8b:f0:ed:
         76:d2:fb:43:31:c9:37:c4:8f:7b:d9:79:b9:8f:ed:99:f7:6c:
         db:86:bc:cd:5d:d3:ce:4f:59:5b:64:9a:9e:2e:6d:bb:f8:42:
         00:24:f8:97:ec:d4:ad:00:6e:12:7f:89:ba:27:5f:1e:4e:b7:
         7c:73:70:14:7c:9f:13:af:09:38:f5:1a:bb:77:a1:25:3c:f7:
         dd:cf:76:2f:b2:da:a6:1a:1e:2f:7a:6a:d6:79:41:e8:7b:7a:
         0b:ee:63:ca:29:93:01:fb:35:54:51:05:a2:30:1c:35:50:34:
         6c:f8:bd:7c:84:55:44:50:59:f4:da:83:08:75:b7:6b:77:db:
         1e:69:d4:fc:40:9d:f1:71:b1:90:43:42:ed:e7:31:54:a0:38:
         c6:f7:e9:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:24 2024 by rpki-client on console-fra.rpki-client.org