Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38392e3134372e3130302e302f32342d3332203d3e203531313637.roa
File:                     38392e3134372e3130302e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier:          kVsk2hcBHMvTMtlXOy6UAbUiWCDrEgD4Pa50Hw98tpY=
Subject key identifier:   2A:AE:D1:5A:6F:AD:B2:3C:F6:9D:71:51:95:ED:62:BC:3A:83:90:8F
Certificate issuer:       /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial:       1344BAB96BDA99FE93CB4037B0CE866010DBBB0F
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38392e3134372e3130302e302f32342d3332203d3e203531313637.roa
Signing time:             Thu 27 Mar 2025 08:45:54 +0000
ROA not before:           Thu 27 Mar 2025 08:40:54 +0000
ROA not after:            Thu 26 Mar 2026 08:45:54 +0000
asID:                     51167
IP address blocks:        89.147.100.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:44:ba:b9:6b:da:99:fe:93:cb:40:37:b0:ce:86:60:10:db:bb:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
        Validity
            Not Before: Mar 27 08:40:54 2025 GMT
            Not After : Mar 26 08:45:54 2026 GMT
        Subject: CN=2AAED15A6FADB23CF69D715195ED62BC3A83908F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:4a:32:79:b7:65:be:b5:b7:74:3d:60:a5:e0:
                    ad:e8:7f:a2:ff:e0:28:60:ea:7e:cf:d8:f8:12:85:
                    34:59:30:43:e6:49:d9:5c:1d:3b:d2:4c:95:cd:70:
                    9b:ab:7b:d1:41:0c:9f:f7:56:ba:eb:88:ad:37:12:
                    6a:65:9c:26:87:3b:3b:5d:19:50:84:f3:2f:a9:4c:
                    89:7a:39:7e:c4:85:e0:68:87:fd:72:f4:4c:30:1d:
                    8b:93:cd:d7:51:5c:90:a8:78:69:de:7a:bc:06:6b:
                    af:f1:11:41:5c:8b:41:d3:78:a2:c3:b7:07:dc:81:
                    02:76:cb:9d:1e:6e:80:ed:8d:aa:98:03:b6:c2:35:
                    ed:3a:9d:81:d6:8c:2b:9c:a6:b4:cd:4d:62:07:5a:
                    69:80:df:08:6c:2a:41:96:8a:e9:be:63:4d:df:56:
                    b8:83:9d:d2:18:a8:66:e1:1c:6b:f4:53:3e:81:80:
                    97:49:b4:44:ba:27:bd:04:36:a3:47:90:46:88:f1:
                    04:e5:97:df:56:c2:16:47:5e:1a:ee:82:56:fb:7c:
                    25:88:af:cd:10:87:9f:93:50:70:d7:e1:51:31:2b:
                    72:6d:7a:bb:01:49:39:73:17:e9:2e:59:2a:9f:14:
                    cc:0f:90:5a:57:a0:73:df:f4:f7:0f:52:d8:d0:4e:
                    1f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:AE:D1:5A:6F:AD:B2:3C:F6:9D:71:51:95:ED:62:BC:3A:83:90:8F
            X509v3 Authority Key Identifier:
                keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38392e3134372e3130302e302f32342d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.147.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:57:98:14:83:28:e0:50:05:85:3b:7c:d0:76:56:16:81:07:
         7b:eb:21:7c:0f:7b:81:80:b8:57:5f:83:d0:c3:48:25:f2:cf:
         c7:dd:d8:2a:f5:a6:60:16:cc:42:35:cd:3c:16:20:1e:9a:fd:
         1d:51:63:18:67:c6:4c:10:b4:64:f5:2d:23:17:cc:f7:8f:63:
         ae:67:43:5a:09:32:a3:e2:b8:6d:16:db:db:ee:fc:f9:2a:e2:
         aa:e1:c2:15:2c:6d:5b:42:d2:4c:7a:de:37:96:fd:01:50:74:
         ed:9a:63:67:b4:19:80:00:50:e7:10:29:e5:db:60:35:0c:2e:
         46:18:04:47:ac:59:52:82:ad:8f:9c:2f:e2:e6:cf:12:49:00:
         eb:04:ca:3d:74:8b:16:1f:01:99:9b:01:7a:90:44:b1:c0:59:
         8b:55:d1:d2:a8:ac:5f:4a:b4:b3:60:48:88:b1:09:5c:b3:b5:
         ca:61:06:57:f4:ac:a8:a7:0e:45:88:f0:33:52:05:8b:e3:36:
         51:95:f6:76:01:a5:c4:85:0e:6a:83:a6:7d:5e:52:8f:82:ce:
         b8:96:74:a7:6c:e9:c2:99:1c:fc:b1:af:8d:e2:02:c0:ee:38:
         d0:44:89:f4:b8:5f:f8:c6:89:de:6b:e8:f8:fe:c2:f3:b5:a2:
         08:c8:67:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----