Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3139332e32342e3233322e302f32332d3234203d3e20383334.roa
File:                     3139332e32342e3233322e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier:          YiIR4il+mvmZ8RdkdgOlHmQu2mM9An3rCWqNaUiJcdA=
Subject key identifier:   B8:A5:53:12:CF:9F:7B:EA:A1:AB:2F:AB:AA:81:60:50:B2:65:0F:13
Certificate issuer:       /CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
Certificate serial:       09C9FFB2D706C7192F24DF907514DCB917A4FA68
Authority key identifier: 8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3139332e32342e3233322e302f32332d3234203d3e20383334.roa
Signing time:             Wed 28 Aug 2024 00:01:49 +0000
ROA not before:           Tue 27 Aug 2024 23:56:49 +0000
ROA not after:            Wed 27 Aug 2025 00:01:49 +0000
asID:                     834
IP address blocks:        193.24.232.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:c9:ff:b2:d7:06:c7:19:2f:24:df:90:75:14:dc:b9:17:a4:fa:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
        Validity
            Not Before: Aug 27 23:56:49 2024 GMT
            Not After : Aug 27 00:01:49 2025 GMT
        Subject: CN=B8A55312CF9F7BEAA1AB2FABAA816050B2650F13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:e9:69:e8:a0:e5:7e:5d:69:60:33:3d:a0:35:
                    c2:1e:ca:16:fb:ef:05:0b:88:90:e4:f7:b5:5b:c1:
                    3e:b7:fd:f6:93:85:43:62:9d:4c:ee:bd:f3:bf:01:
                    aa:42:95:67:4c:42:f6:9c:3b:e7:b7:a3:7a:3f:fc:
                    bc:42:5c:a4:59:75:4c:a1:72:7c:22:29:1a:6c:dd:
                    2d:9e:d7:ba:ba:23:ce:37:e8:8a:ac:52:a7:af:e6:
                    6d:26:4b:0d:e7:32:2a:55:c0:f1:16:3b:8d:96:d4:
                    c0:70:fe:76:0b:d0:44:be:e3:dd:41:57:f5:02:b8:
                    76:38:02:f0:fd:86:ce:e8:a8:a7:88:be:c0:4f:b1:
                    d3:e6:2b:bf:eb:96:16:d5:60:4f:19:c2:a2:8a:cd:
                    3b:46:79:d0:3b:d4:ca:88:94:a1:17:d8:bf:aa:85:
                    ad:63:74:1e:ad:72:20:8a:9c:91:9a:d1:68:0c:a3:
                    48:99:93:66:80:db:b6:bc:b5:51:6d:a6:6c:95:16:
                    2f:1d:af:87:92:f9:39:7d:f0:9b:c2:75:ff:ff:d0:
                    d0:fd:f5:b3:4f:92:df:e2:fd:54:c4:b8:b9:19:6e:
                    10:6c:99:db:1b:67:bf:c3:e1:49:0c:3f:61:d6:78:
                    6b:61:e3:4d:48:3f:fb:82:e8:74:17:b1:7a:36:dd:
                    f5:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:A5:53:12:CF:9F:7B:EA:A1:AB:2F:AB:AA:81:60:50:B2:65:0F:13
            X509v3 Authority Key Identifier:
                keyid:8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3139332e32342e3233322e302f32332d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.24.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         71:c3:4f:61:72:00:f9:0f:18:ed:cb:94:9f:ed:77:63:9b:1a:
         1b:d3:cb:90:ea:22:05:f4:48:ec:d7:52:26:bb:f8:43:2e:c4:
         91:24:d0:3a:de:b8:2c:73:1e:af:12:57:58:de:1d:73:ac:f7:
         e8:bb:38:22:b8:2e:f9:4c:b6:e3:96:f7:2c:0f:fd:22:c9:7b:
         3f:0b:92:9a:b9:84:fb:4b:70:d1:6b:09:09:7e:9e:57:79:56:
         23:6e:43:ef:fd:b6:46:e5:22:25:d0:93:32:a7:91:17:51:1b:
         0f:be:f9:09:e9:02:c2:ed:4f:6d:06:dc:97:6c:ee:0c:22:6c:
         7b:d5:a3:7e:e2:c5:89:72:90:da:de:43:30:22:79:e7:5b:65:
         19:ea:5d:29:45:ed:df:c3:b5:31:61:f6:cf:7f:0a:62:3f:2b:
         74:bb:00:de:a1:66:c5:34:ea:92:dd:e6:aa:7a:8e:cc:6f:53:
         3f:6f:43:f7:d7:93:e6:69:3b:77:12:38:68:4a:7a:cf:c1:b5:
         33:0a:7a:a6:19:ff:f3:46:4c:a9:de:8f:90:76:82:27:62:70:
         d8:66:e1:9a:f4:d7:dd:bc:81:35:6d:a4:fc:b2:d9:0e:31:d4:
         5c:1f:aa:1e:99:91:08:28:86:43:1a:db:60:92:2d:70:f8:d7:
         e6:ce:f8:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 11 06:27:56 2024 by rpki-client on console.sobornost.net