Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS216129.roa
File:                     AS216129.roa (raw, json)
Hash identifier:          yqIbeONZE/5oyN/TxcJ2bAkjTDNFkKArCa5qLzzJfbI=
Subject key identifier:   B9:A4:24:43:76:8E:03:6C:90:CE:42:C9:BB:85:CB:E6:69:E5:57:D7
Certificate issuer:       /CN=60D5CF86368D32D8BD736410814916DA300E83CF
Certificate serial:       2D9FF368AE7A3499A8B07E3B96C547E14AFDD4C1
Authority key identifier: 60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS216129.roa
Signing time:             Wed 28 Oct 2026 11:28:29 +0000
ROA not before:           Wed 28 Oct 2026 11:23:29 +0000
ROA not after:            Wed 27 Oct 2027 11:28:29 +0000
asID:                     216129
IP address blocks:        177.177.230.0/24 maxlen: 24
                          177.177.237.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:9f:f3:68:ae:7a:34:99:a8:b0:7e:3b:96:c5:47:e1:4a:fd:d4:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60D5CF86368D32D8BD736410814916DA300E83CF
        Validity
            Not Before: Oct 28 11:23:29 2026 GMT
            Not After : Oct 27 11:28:29 2027 GMT
        Subject: CN=B9A42443768E036C90CE42C9BB85CBE669E557D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:59:2c:a2:28:60:85:30:29:d2:03:2f:b2:9a:
                    d0:98:d8:c5:a4:26:68:a1:25:1e:3a:8e:ac:ed:90:
                    3c:d6:70:af:70:a3:cd:73:98:93:70:38:8c:c3:87:
                    42:35:10:dd:da:03:98:4e:af:cf:f7:da:1f:02:b7:
                    2d:66:76:46:fa:84:01:3c:82:89:11:69:f1:11:c6:
                    c2:a7:c6:2b:76:1b:b9:2e:5d:98:b3:1e:bf:60:5a:
                    ee:04:38:75:13:86:78:0c:01:5f:1f:41:6d:f3:76:
                    ce:c2:75:36:ca:f7:fa:2d:bd:d1:69:1f:1c:c6:61:
                    80:68:57:ed:de:d5:ab:0f:69:b7:52:d1:e0:ff:5d:
                    35:e1:07:fd:1c:e7:e0:b4:1c:fd:86:a5:7b:c1:da:
                    5c:ac:4b:15:ec:d9:e6:70:d4:22:dc:72:15:ec:5d:
                    78:56:2e:bb:55:ce:b5:90:d9:81:35:a3:e8:6f:be:
                    b3:20:f2:11:7a:c4:36:52:50:56:4a:bd:6d:57:90:
                    57:5f:ec:d7:78:05:20:34:cd:4a:30:a1:93:f9:9b:
                    96:f7:08:85:16:7b:cd:1c:23:95:fd:06:1f:a3:3a:
                    73:25:b0:13:66:b5:54:37:dd:63:3f:56:3f:7d:60:
                    65:9b:fa:4e:ee:11:a8:d5:19:2e:64:50:fb:4b:e9:
                    d8:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:A4:24:43:76:8E:03:6C:90:CE:42:C9:BB:85:CB:E6:69:E5:57:D7
            X509v3 Authority Key Identifier:
                keyid:60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS216129.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.177.230.0/24
                  177.177.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:5b:35:f3:72:e6:3b:8b:49:43:c1:23:5d:61:c2:32:73:ec:
         cf:2a:2e:ad:0d:6b:4f:58:74:f6:7d:6b:97:fe:8f:0a:55:c3:
         43:d4:c2:92:d9:41:27:82:1b:23:ca:e9:7c:c7:6c:3b:b0:f7:
         5f:1e:24:20:02:51:b9:9a:87:cb:7e:9e:41:db:ee:bd:9b:05:
         7f:9c:19:90:4c:23:ed:3c:18:74:59:e2:09:04:a7:0c:03:11:
         a8:48:4e:bc:2d:51:45:6b:be:f2:9d:88:11:ae:3c:27:02:bc:
         ce:b5:e2:00:d6:f0:1d:2c:e8:5b:aa:2b:90:95:eb:98:1b:49:
         51:06:53:2f:44:69:9e:d6:9b:e5:12:c2:47:7d:46:19:f2:16:
         cd:7b:ae:0f:34:cc:1b:52:c6:94:ba:fe:64:c0:4c:1c:36:d5:
         bb:f7:5e:1b:ab:95:1c:2e:1c:64:a9:f0:5b:67:c9:47:bd:12:
         42:29:b2:91:de:52:49:e3:c3:5f:f6:3c:12:49:30:19:13:3d:
         07:e9:0d:d4:21:ae:3a:34:ea:90:95:d9:2a:f3:7a:90:9e:fb:
         8e:82:b4:ea:43:4b:47:be:e0:64:b0:4a:06:b2:0c:6e:5a:6c:
         af:0b:e7:95:4e:26:bb:3e:71:18:2a:69:0f:83:d6:f9:a4:0f:
         38:2b:03:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----