Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/0/3134362e3234372e35392e302f32342d3234203d3e203234383531.roa
File:                     3134362e3234372e35392e302f32342d3234203d3e203234383531.roa (raw, json)
Hash identifier:          co04o4yOqjluJluLN/EAh7E6V/2N57PD6eI6kqSWy04=
Subject key identifier:   62:C1:A5:3B:61:2C:EE:2F:51:9E:2A:58:88:8E:2A:F0:1D:96:08:0F
Certificate issuer:       /CN=e903858f0abab52add2a8fca3f14998a35291a7a
Certificate serial:       27DD963FEFA9A621532FF447C29C874A71BD6D9E
Authority key identifier: E9:03:85:8F:0A:BA:B5:2A:DD:2A:8F:CA:3F:14:99:8A:35:29:1A:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6QOFjwq6tSrdKo_KPxSZijUpGno.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/0/3134362e3234372e35392e302f32342d3234203d3e203234383531.roa
Signing time:             Mon 23 Jan 2023 11:27:47 +0000
ROA not before:           Mon 23 Jan 2023 11:22:47 +0000
ROA not after:            Mon 22 Jan 2024 11:27:47 +0000
asID:                     24851
IP address blocks:        146.247.59.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:dd:96:3f:ef:a9:a6:21:53:2f:f4:47:c2:9c:87:4a:71:bd:6d:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e903858f0abab52add2a8fca3f14998a35291a7a
        Validity
            Not Before: Jan 23 11:22:47 2023 GMT
            Not After : Jan 22 11:27:47 2024 GMT
        Subject: CN=62C1A53B612CEE2F519E2A58888E2AF01D96080F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c0:dd:c7:ec:ba:f8:d1:9d:6c:da:98:8e:ed:
                    c7:0d:90:e4:fc:d6:29:ac:0d:11:0f:72:35:97:59:
                    e7:f6:5a:4d:e8:e3:8d:31:50:bf:2d:ff:87:26:a1:
                    9f:0e:62:bb:48:46:96:ba:eb:34:06:4c:b3:44:c9:
                    06:dc:43:d5:bb:78:a9:f1:5d:86:22:2b:c0:6b:b4:
                    b8:29:73:bc:13:1e:af:52:15:87:bb:02:65:5d:12:
                    41:33:70:92:2e:e9:00:38:da:f7:66:92:69:c3:ca:
                    42:db:69:1d:eb:fa:b3:00:a2:79:a0:66:05:61:81:
                    2e:79:35:e2:d2:68:6e:89:e3:4f:9d:43:73:8f:c5:
                    6f:ce:13:7e:0e:1c:c1:58:df:4a:97:88:ee:b6:30:
                    bd:cf:97:05:57:86:eb:7a:61:48:ad:6f:f2:23:c0:
                    ca:45:3e:2d:05:8d:f0:fa:33:56:e8:c4:c1:01:cb:
                    2c:73:84:3e:77:d9:f0:ce:10:21:68:e5:18:51:75:
                    77:e7:03:37:fa:6e:51:20:90:43:28:35:96:e2:df:
                    c8:c3:0f:8e:05:ce:1c:0d:02:56:f6:63:75:cb:04:
                    01:6d:54:aa:ac:09:ff:3a:7d:2d:fd:d3:26:92:2b:
                    86:9d:fa:b8:5f:55:65:a7:e1:6e:7c:97:ec:15:ce:
                    e8:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:C1:A5:3B:61:2C:EE:2F:51:9E:2A:58:88:8E:2A:F0:1D:96:08:0F
            X509v3 Authority Key Identifier:
                keyid:E9:03:85:8F:0A:BA:B5:2A:DD:2A:8F:CA:3F:14:99:8A:35:29:1A:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/0/E903858F0ABAB52ADD2A8FCA3F14998A35291A7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QOFjwq6tSrdKo_KPxSZijUpGno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/0/3134362e3234372e35392e302f32342d3234203d3e203234383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.247.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:2f:b9:71:47:5b:9d:92:b1:ef:0c:4c:08:5e:52:45:a9:ff:
         68:6a:14:5a:4b:f6:50:f9:8b:f9:c7:09:2e:02:da:21:f6:d8:
         6e:4f:4b:ad:04:42:95:ef:56:35:35:09:9f:77:63:21:96:cf:
         db:5b:2e:54:51:77:88:22:e9:16:ec:fe:d6:7c:ba:d6:44:59:
         bf:6a:5f:c3:b1:b4:65:91:57:7e:38:fe:18:89:03:6e:c2:06:
         0c:54:1b:9c:c0:3d:5b:81:b4:a6:eb:dd:a4:ea:f4:a2:1a:11:
         0a:33:c3:e4:ba:94:cd:9a:84:1f:ca:97:ae:b4:2a:84:ec:62:
         9f:8f:06:71:73:b0:69:94:13:79:fe:53:83:bb:52:5f:f3:84:
         6e:c2:20:25:c9:98:bd:94:ee:b5:60:11:ca:b0:b6:b0:36:89:
         87:12:e9:a4:1c:d9:e5:6a:73:24:e0:36:97:89:52:b5:29:e5:
         5e:76:4a:57:ff:2a:51:98:d6:96:18:de:7a:16:ec:60:02:2c:
         aa:6e:4c:6a:2d:4e:70:fc:2a:ac:a9:37:6b:35:ff:5c:7a:97:
         b9:d8:ac:c4:4b:c5:74:c4:a0:bc:41:18:0f:01:02:83:ff:26:
         1c:77:c2:c7:2f:a2:65:4a:e6:e1:52:a3:9f:35:dc:bf:52:3c:
         ad:8c:f6:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:10 2023 by rpki-client on console.sobornost.net