Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/3c64ad-fe08-43d8-aba7-0c5573cab8c0/1/by37SRJrmgyByXKgtM1MmWnFK6w.roa
File:                     by37SRJrmgyByXKgtM1MmWnFK6w.roa (raw, json)
Hash identifier:          K7na2h1qcZwInzMKEMUdclxGAl+J8RtqMZsFXTX4OTw=
Subject key identifier:   6F:2D:FB:49:12:6B:9A:0C:81:C9:72:A0:B4:CD:4C:99:69:C5:2B:AC
Certificate issuer:       /CN=83306a3a8d8bcba39f92ef1ac49a559b0bce8a58
Certificate serial:       019C6A92
Authority key identifier: 83:30:6A:3A:8D:8B:CB:A3:9F:92:EF:1A:C4:9A:55:9B:0B:CE:8A:58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gzBqOo2Ly6Ofku8axJpVmwvOilg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/3c64ad-fe08-43d8-aba7-0c5573cab8c0/1/by37SRJrmgyByXKgtM1MmWnFK6w.roa
Signing time:             Sat 05 Feb 2022 20:22:33 +0000
ROA not before:           Sat 05 Feb 2022 20:22:33 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210542
IP address blocks:        193.36.132.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27028114 (0x19c6a92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83306a3a8d8bcba39f92ef1ac49a559b0bce8a58
        Validity
            Not Before: Feb  5 20:22:33 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6f2dfb49126b9a0c81c972a0b4cd4c9969c52bac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a0:16:97:f2:9e:66:f9:78:c9:0e:6d:fa:d7:
                    47:28:8a:52:d7:83:a8:04:69:c4:fd:1d:08:16:e4:
                    7c:07:f7:0a:86:1f:57:b0:07:eb:60:70:70:9d:c7:
                    49:02:ba:e4:28:9d:19:02:58:6a:fc:ee:25:31:71:
                    f0:83:b7:1c:0c:bb:d1:5f:0a:d8:6c:a7:b8:31:e8:
                    0c:59:30:d9:2f:df:98:60:5a:66:49:6d:fc:63:bf:
                    01:79:50:bc:c5:08:1e:89:24:f9:ee:ae:2c:5c:02:
                    0d:ae:fa:f3:40:7b:79:2c:50:ea:b4:27:c3:db:c0:
                    e7:2c:21:52:a8:24:ad:e7:27:5a:2b:1f:d0:ad:5a:
                    35:89:49:56:5a:b8:1c:24:71:19:f5:f8:9b:b8:d3:
                    47:8e:56:ea:46:51:1a:3d:15:74:4d:af:45:d0:a2:
                    24:1d:2f:ac:cc:72:16:e7:2b:c3:68:18:23:f8:76:
                    15:b0:80:57:76:ab:f4:a5:a0:4e:bb:b1:70:3f:22:
                    a9:7f:69:d2:87:9d:b1:7c:da:2f:46:97:5c:7d:e7:
                    7a:39:08:d6:36:e9:de:32:c3:01:6b:5a:d5:8d:45:
                    2d:9b:e2:26:73:e7:6c:dc:af:ab:39:10:bf:c4:7b:
                    9a:db:09:ba:d1:c2:fa:61:d2:01:17:64:a7:6a:8d:
                    85:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:2D:FB:49:12:6B:9A:0C:81:C9:72:A0:B4:CD:4C:99:69:C5:2B:AC
            X509v3 Authority Key Identifier:
                keyid:83:30:6A:3A:8D:8B:CB:A3:9F:92:EF:1A:C4:9A:55:9B:0B:CE:8A:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzBqOo2Ly6Ofku8axJpVmwvOilg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3c64ad-fe08-43d8-aba7-0c5573cab8c0/1/by37SRJrmgyByXKgtM1MmWnFK6w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3c64ad-fe08-43d8-aba7-0c5573cab8c0/1/gzBqOo2Ly6Ofku8axJpVmwvOilg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.36.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d0:b9:06:b2:c3:ae:c9:05:d7:04:8a:b4:e5:e0:58:bc:ea:45:
         ec:ac:1c:be:b1:6d:bf:80:34:23:58:25:ea:ad:48:cd:90:68:
         7e:b2:64:f5:28:16:a4:3b:7a:b9:75:61:44:ae:9a:a2:95:93:
         68:79:af:e1:25:cb:df:1d:9a:4e:98:c7:6c:d9:bd:d8:08:b1:
         59:4d:ba:27:89:8c:16:3a:5a:cc:e2:dd:43:ec:09:60:37:1a:
         23:39:15:ae:25:37:a9:25:ff:78:a2:1d:ba:1a:54:ac:70:86:
         91:e7:77:5e:54:69:ed:ed:6d:38:fe:0f:58:b6:6c:3e:c8:f5:
         d7:0b:14:0b:22:71:21:24:4a:13:7a:5b:d9:7d:f4:15:7c:1a:
         c0:f7:c0:a7:9a:6d:fa:81:f9:02:7c:22:3b:ca:00:dd:40:5a:
         20:5b:50:4d:ca:62:97:81:25:f3:2f:2d:b0:d2:41:9d:fc:dd:
         69:50:52:43:d0:bb:29:ce:b8:b6:1b:18:32:a1:8e:c2:ae:a6:
         65:28:7a:18:e4:d8:dc:ae:b8:49:d2:ea:58:65:f4:e8:85:65:
         4d:c5:db:67:f7:d0:b4:b6:ab:10:f1:2d:8b:d3:b2:79:4e:53:
         78:98:37:93:8d:62:31:ac:b9:aa:60:04:98:65:92:13:52:e9:
         69:e9:b7:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:29 2023 by rpki-client on console.sobornost.net