Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/-0XH8qOsseoJVAhufNS7AVVanE0.roa
File:                     -0XH8qOsseoJVAhufNS7AVVanE0.roa (raw, json)
Hash identifier:          MLrEij35yxhb4PRdyZZzsAHC04N29InmySkj/ITe6a4=
Subject key identifier:   FB:45:C7:F2:A3:AC:B1:EA:09:54:08:6E:7C:D4:BB:01:55:5A:9C:4D
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       011D
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/-0XH8qOsseoJVAhufNS7AVVanE0.roa
Signing time:             Sun 01 Oct 2023 01:30:39 +0000
ROA not before:           Sun 01 Oct 2023 01:30:39 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     2516
IP address blocks:        211.7.52.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 285 (0x11d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct  1 01:30:39 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=FB45C7F2A3ACB1EA0954086E7CD4BB01555A9C4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:76:f3:41:6f:a7:85:94:1d:25:9f:39:b8:40:
                    81:9b:cb:0b:1c:f0:78:0f:4f:6c:02:62:bf:43:ba:
                    c6:c7:ed:6b:75:20:68:53:08:50:be:8c:14:38:b4:
                    1e:3b:67:f0:85:62:39:cd:87:51:ed:35:1c:fe:70:
                    f5:e2:5f:2b:b1:59:70:b9:eb:28:c9:4a:00:53:ad:
                    c2:c2:3a:b7:2d:3e:43:0d:36:38:3e:7e:eb:39:36:
                    de:19:a4:9a:9b:46:57:23:a5:a5:98:83:44:58:7c:
                    3c:98:f3:28:97:b3:3a:96:ff:ab:e8:dd:14:0e:97:
                    d4:1e:9d:d4:78:f6:b5:5c:4b:c7:3e:d0:36:ee:c9:
                    d9:96:eb:b2:9d:16:db:eb:92:93:4b:fe:ff:37:9e:
                    d3:50:c4:c7:81:b8:1c:f3:e0:9e:b0:3c:53:12:e3:
                    41:60:c8:3d:f5:97:a8:f6:88:fd:23:39:70:ee:ae:
                    6b:f2:52:30:35:12:bd:ee:ee:7f:41:35:19:68:86:
                    6a:86:79:38:ea:d0:61:ab:9a:2e:8f:f6:f1:79:59:
                    59:e1:5f:18:de:78:b3:21:2c:c7:23:ad:00:89:80:
                    cb:54:54:77:a8:0e:db:9c:8f:08:98:83:fc:49:82:
                    6e:82:56:e7:53:65:c5:ec:92:5f:71:f9:40:03:58:
                    83:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:45:C7:F2:A3:AC:B1:EA:09:54:08:6E:7C:D4:BB:01:55:5A:9C:4D
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/-0XH8qOsseoJVAhufNS7AVVanE0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.7.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3e:ba:ec:06:eb:b0:ac:c0:3a:d7:cc:83:27:23:8f:4d:2d:81:
         91:30:8e:cc:8e:b6:9b:c4:ee:05:0e:7d:cd:82:4c:b2:24:66:
         75:c3:21:52:1e:a3:cf:b7:5c:1a:66:74:4b:a2:72:a1:48:10:
         03:05:39:f7:6a:7b:09:a0:9b:22:02:07:96:93:13:2f:c4:a4:
         cd:7f:5a:47:a3:8d:28:1c:58:89:3d:17:1a:68:da:ed:34:7e:
         74:12:4a:90:70:03:3c:83:6f:9b:77:bc:6f:c2:56:e5:bc:eb:
         27:18:6b:ec:52:91:cf:7e:2b:10:80:84:c9:b4:98:d7:63:e9:
         71:a3:10:66:b4:82:14:ca:6b:e0:0a:88:0c:dc:8b:3a:63:a3:
         f4:f6:27:46:89:df:59:02:19:32:e9:2c:48:d0:9a:db:10:db:
         bd:a3:1b:bd:3c:ca:d7:4c:a4:1f:65:9c:29:e9:17:7f:62:e1:
         2c:ab:c0:e7:e6:9a:6b:e4:26:6a:59:4c:52:b8:0c:59:91:55:
         0e:48:68:db:cc:2f:25:f4:0c:9a:4f:13:33:2e:11:c6:6a:f8:
         26:50:c0:ba:9a:28:08:ff:38:0d:ab:7c:c1:fb:27:3d:53:f9:
         f9:37:83:9f:23:67:19:6d:b1:54:3d:b5:c5:8b:76:da:50:49:
         e6:51:d5:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org