Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS57043.roa
File:                     AS57043.roa (raw, json)
Hash identifier:          d96DAJZ5sHeisc8GfbMDtNyXGaiWXkP/lA4gBnMxExE=
Subject key identifier:   04:02:2E:E3:38:2D:57:09:2D:F5:BF:A7:83:DF:79:59:14:C1:41:AF
Certificate issuer:       /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial:       2E93CC60E08ED08E12E0EC2188CB6409E74300B3
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS57043.roa
Signing time:             Fri 30 Oct 2026 13:43:42 +0000
ROA not before:           Fri 30 Oct 2026 13:38:42 +0000
ROA not after:            Fri 29 Oct 2027 13:43:42 +0000
asID:                     57043
IP address blocks:        45.87.184.0/24 maxlen: 24
                          181.41.216.0/24 maxlen: 24
                          181.214.115.0/24 maxlen: 24
                          185.135.156.0/24 maxlen: 24
                          191.101.113.0/24 maxlen: 24
                          191.101.136.0/24 maxlen: 24
                          191.101.137.0/24 maxlen: 24
                          191.101.144.0/24 maxlen: 24
                          191.101.175.0/24 maxlen: 24
                          191.101.176.0/24 maxlen: 24
                          191.101.177.0/24 maxlen: 24
                          191.101.180.0/24 maxlen: 24
                          191.101.189.0/24 maxlen: 24
                          191.101.193.0/24 maxlen: 24
                          191.101.200.0/24 maxlen: 24
                          191.101.204.0/24 maxlen: 24
                          191.101.206.0/24 maxlen: 24
                          191.101.210.0/24 maxlen: 24
                          191.101.223.0/24 maxlen: 24
                          191.101.236.0/24 maxlen: 24
                          191.101.240.0/24 maxlen: 24
                          191.101.247.0/24 maxlen: 24
                          193.7.203.0/24 maxlen: 24
                          193.107.210.0/24 maxlen: 24
                          193.107.211.0/24 maxlen: 24
                          194.110.242.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:93:cc:60:e0:8e:d0:8e:12:e0:ec:21:88:cb:64:09:e7:43:00:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
        Validity
            Not Before: Oct 30 13:38:42 2026 GMT
            Not After : Oct 29 13:43:42 2027 GMT
        Subject: CN=04022EE3382D57092DF5BFA783DF795914C141AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:87:ea:7c:68:20:59:89:f3:83:78:31:ba:0e:
                    09:98:7e:86:5f:55:0e:a0:ec:d7:25:3f:77:15:3e:
                    cf:dd:09:5a:12:2a:37:d0:59:f1:1a:a9:4e:c4:7f:
                    86:70:aa:01:13:b8:2d:d2:f3:53:54:3d:46:ac:89:
                    56:b2:57:34:a1:fe:5f:1f:46:f3:74:65:78:16:ee:
                    c5:69:6c:63:16:9c:60:ad:1d:82:b3:8d:83:1e:3a:
                    50:81:06:ae:70:23:4d:31:49:43:dd:27:5c:5c:01:
                    53:fa:a5:e5:a1:e4:cd:7a:dd:d1:99:07:8c:6f:05:
                    49:23:1a:4c:bd:91:ab:7d:27:34:51:dd:02:6e:77:
                    fb:05:c2:1b:b1:02:cb:ca:df:69:b3:48:64:f5:96:
                    b8:dc:a9:0e:cb:e0:d5:a6:ca:80:6f:5b:d7:aa:25:
                    0e:73:7e:f3:19:a7:ea:fb:0e:45:7b:6b:93:e3:bd:
                    cf:64:c6:7d:b4:1f:7d:2e:a0:0d:37:88:ea:b8:62:
                    6e:26:5a:90:fd:77:bc:d8:4e:1d:d5:b2:91:b1:8d:
                    3c:56:f7:82:3e:12:40:05:30:4d:a2:2c:7d:6b:48:
                    c4:42:5c:dd:20:0d:77:24:97:a9:c9:e4:8f:ef:ea:
                    c8:5f:b3:c4:79:bf:37:11:2d:36:41:f6:55:f1:4b:
                    0c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:02:2E:E3:38:2D:57:09:2D:F5:BF:A7:83:DF:79:59:14:C1:41:AF
            X509v3 Authority Key Identifier:
                keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS57043.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.87.184.0/24
                  181.41.216.0/24
                  181.214.115.0/24
                  185.135.156.0/24
                  191.101.113.0/24
                  191.101.136.0/23
                  191.101.144.0/24
                  191.101.175.0-191.101.177.255
                  191.101.180.0/24
                  191.101.189.0/24
                  191.101.193.0/24
                  191.101.200.0/24
                  191.101.204.0/24
                  191.101.206.0/24
                  191.101.210.0/24
                  191.101.223.0/24
                  191.101.236.0/24
                  191.101.240.0/24
                  191.101.247.0/24
                  193.7.203.0/24
                  193.107.210.0/23
                  194.110.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:a2:22:6f:70:31:2d:2b:26:b7:f0:5d:f5:27:29:a4:ea:93:
         fc:3f:a8:d0:f2:4a:6a:24:bf:70:9e:bb:70:7e:5b:ba:cd:17:
         6d:9f:72:b5:39:e7:cf:23:ec:57:29:bf:02:5f:9d:7d:eb:af:
         e3:fc:d5:06:43:ab:4c:74:d4:55:7e:74:b0:26:cd:5b:bb:02:
         1e:1a:37:70:0b:41:44:c6:f3:da:a4:d5:c3:6e:c2:9b:42:02:
         90:dc:2a:85:4c:ac:13:89:70:9c:7c:82:40:0b:12:e1:25:7a:
         3a:cb:e7:5a:85:44:1e:7c:2b:e7:19:a8:c5:95:04:1a:3e:11:
         22:98:14:1a:cc:b4:d5:79:76:75:cb:a8:73:a0:6e:1d:19:06:
         69:bb:82:de:41:e2:2c:c3:c4:c9:32:1d:33:13:c1:c1:89:ae:
         fe:57:23:b5:2c:e3:2c:dd:65:05:63:0f:1f:f4:26:20:73:cc:
         e2:68:e5:9c:0e:10:51:71:15:e1:46:98:14:03:79:e2:8e:4f:
         6d:ef:46:52:0e:31:02:f8:24:7e:c0:b6:e8:97:df:34:18:03:
         62:38:c5:c7:fe:5d:fe:c0:04:94:f0:8f:7d:39:15:59:de:1c:
         bb:4e:f8:0a:c0:53:a0:b0:59:fd:c3:1e:26:ce:20:e1:ab:8f:
         f8:b7:81:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----