Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/20dbGEa_ZrQAwItNiFCvtSeMlk0.roa
File:                     20dbGEa_ZrQAwItNiFCvtSeMlk0.roa (raw, json)
Hash identifier:          a2jHl3V5nD3+jyotgdDTU7SN74L+n6Q3Fer99yn6YKE=
Subject key identifier:   DB:47:5B:18:46:BF:66:B4:00:C0:8B:4D:88:50:AF:B5:27:8C:96:4D
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       013C
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/20dbGEa_ZrQAwItNiFCvtSeMlk0.roa
Signing time:             Sun 01 Oct 2023 01:33:15 +0000
ROA not before:           Sun 01 Oct 2023 01:33:15 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     2516
IP address blocks:        211.10.190.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 316 (0x13c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct  1 01:33:15 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=DB475B1846BF66B400C08B4D8850AFB5278C964D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a1:52:05:9e:01:c8:22:f5:9a:49:86:4b:74:
                    69:7e:e7:ca:31:df:1e:ff:09:49:af:22:0d:22:70:
                    ee:7b:09:6c:8f:d7:e3:93:5f:67:5a:dd:b4:46:96:
                    90:69:5b:07:a6:ee:e9:a6:0c:d4:6f:c6:c3:fc:1e:
                    f6:ff:5d:c2:99:18:56:86:48:ac:ad:9a:4d:4f:c1:
                    17:b6:7d:4d:4c:84:62:b2:27:f6:a8:2c:70:f0:4a:
                    de:d6:c5:7c:c5:04:de:4c:16:c9:bf:23:7f:60:9a:
                    cb:c9:28:44:a8:59:cd:82:df:3d:59:c3:d2:5f:98:
                    cb:2f:3e:2c:05:fb:82:6e:6e:d0:69:1b:74:11:f6:
                    f4:a1:95:0c:79:4e:8f:d9:c8:7e:de:cb:b9:30:be:
                    bc:9f:dd:76:93:3c:d8:fd:7a:db:cb:91:66:cf:42:
                    05:95:af:a9:41:bb:fd:5f:ab:d0:23:38:72:1f:ac:
                    88:c9:4c:fc:ed:cd:09:bb:8f:ee:a8:47:65:48:71:
                    14:73:11:80:4d:ee:ce:83:d7:33:b1:36:0d:d3:59:
                    69:53:41:e3:15:01:9c:d1:32:08:e1:5b:0a:94:83:
                    4b:d3:87:cd:09:0e:6b:ea:2f:32:fb:37:e5:30:88:
                    94:24:3d:60:2c:5c:e6:8b:96:c2:70:fb:41:77:aa:
                    78:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:47:5B:18:46:BF:66:B4:00:C0:8B:4D:88:50:AF:B5:27:8C:96:4D
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/20dbGEa_ZrQAwItNiFCvtSeMlk0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.10.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:6e:f1:b9:d4:7e:b1:d1:4d:b3:37:2d:4f:bb:fd:ee:de:9f:
         17:de:b5:6c:7c:24:1c:67:36:27:50:e0:4c:39:e0:3e:f8:11:
         b1:41:03:50:df:94:c8:c2:8c:9f:b3:00:c6:99:ee:c7:77:7c:
         b1:c7:83:32:6c:1d:53:8a:81:e2:63:a6:bf:ac:4f:fc:95:98:
         f1:b7:cf:bd:f7:e6:7a:60:58:a9:a5:35:9e:76:7f:3e:1d:05:
         a3:aa:24:2f:c7:9a:97:ec:33:ae:c6:75:de:bc:22:55:a8:b6:
         d9:2f:b3:79:c9:89:a9:79:dc:b1:84:65:c3:9e:ce:c0:17:a8:
         98:11:25:33:74:80:14:7f:16:6f:a7:dd:b6:b4:24:b6:7d:1e:
         ae:32:b5:32:b5:48:7f:e1:9a:fc:71:dd:73:be:eb:eb:9f:b3:
         6f:4b:14:52:f1:d1:b1:0c:21:d0:79:be:3d:c3:8f:b6:86:94:
         41:60:d0:93:aa:a8:21:d4:e1:98:01:db:46:6d:dc:9a:13:4c:
         38:a0:d8:25:14:be:10:3a:c6:a4:2f:b0:c6:d3:cb:a2:73:bd:
         17:49:c6:10:aa:e1:99:1d:81:ee:0b:01:19:12:9f:f7:f1:43:
         60:fc:a5:5d:1f:e3:e7:1a:53:7e:59:c6:4f:95:c2:d2:4a:5d:
         8d:a5:a2:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:33 2024 by rpki-client on console-ams.rpki-client.org