Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/QSoz5Rx02x_vzqqOPymubFkPHpI.roa
File:                     QSoz5Rx02x_vzqqOPymubFkPHpI.roa (raw, json)
Hash identifier:          LemdJzkU9tq8QS+txSA9sFOKvNd6hgKmEq3hzzdXLEc=
Subject key identifier:   41:2A:33:E5:1C:74:DB:1F:EF:CE:AA:8E:3F:29:AE:6C:59:0F:1E:92
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       DB
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/QSoz5Rx02x_vzqqOPymubFkPHpI.roa
Signing time:             Fri 01 Sep 2023 01:30:56 +0000
ROA not before:           Fri 01 Sep 2023 01:30:56 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        202.161.192.0/18 maxlen: 18

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 219 (0xdb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Sep  1 01:30:56 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=412A33E51C74DB1FEFCEAA8E3F29AE6C590F1E92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:de:de:82:24:87:0c:63:6f:cf:a3:18:97:27:
                    52:87:8b:25:45:fc:37:76:e9:bb:93:cd:bb:fc:27:
                    76:2e:c1:c1:ce:fc:bd:51:07:9f:74:a2:9a:9c:bd:
                    4b:66:48:73:4d:b9:15:a5:18:64:89:30:96:9e:6a:
                    ce:5c:fd:a6:8a:30:6d:1f:f6:0b:45:2a:11:2d:00:
                    3b:64:44:fa:02:18:d7:cc:96:a3:1e:6a:cb:ad:d5:
                    92:d7:eb:66:f9:e3:f3:45:75:16:11:7d:a2:b6:ff:
                    e0:e7:01:d3:31:d7:48:c8:72:58:6c:a5:16:bd:05:
                    5f:a7:87:68:c7:98:5b:61:99:74:54:be:df:22:ef:
                    cc:59:1e:63:85:2d:d9:64:d6:21:9d:66:3f:38:b4:
                    fa:c1:4a:e1:0f:c9:fa:3f:77:5a:ca:12:cd:d2:ca:
                    57:29:f6:bf:09:b0:2f:0b:87:62:90:fa:9b:15:9e:
                    66:1e:51:45:8d:5c:96:d6:bd:e2:78:d2:3f:ae:d2:
                    cb:4f:01:fc:cb:a2:46:69:9f:b0:b6:3c:87:d6:c0:
                    dc:99:6a:6a:b7:4c:0e:4c:9b:cc:91:ac:2e:cd:b9:
                    3a:b5:90:1d:3e:f3:bc:a2:82:f5:23:02:92:e3:9c:
                    8b:0d:cc:b4:f3:ae:90:dc:e0:a6:a8:6f:7d:14:e9:
                    6b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:2A:33:E5:1C:74:DB:1F:EF:CE:AA:8E:3F:29:AE:6C:59:0F:1E:92
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/QSoz5Rx02x_vzqqOPymubFkPHpI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.161.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         61:f6:df:1e:b4:ad:e0:e7:84:e5:86:b1:4a:3f:88:e1:81:a1:
         e9:ac:e5:ac:c9:e0:81:e5:5b:3b:69:c8:7f:ba:34:21:ef:db:
         fa:5e:b9:af:1d:d3:57:8e:cb:9d:c6:a8:ca:5e:0b:ef:49:9f:
         5d:07:0f:64:37:97:c8:67:3a:84:35:5f:98:41:ba:58:e6:cd:
         11:df:4d:06:90:bb:4c:bc:8b:c8:88:98:20:b2:ba:25:ae:1c:
         37:24:92:96:f9:44:76:02:24:f6:90:aa:2c:f4:f8:8d:15:ef:
         98:81:ae:5b:01:8c:da:5f:f7:ea:54:87:e4:17:a6:ae:74:55:
         d6:91:9a:8b:11:03:a4:e1:05:db:21:7b:07:28:d3:fa:ce:99:
         67:ed:a1:b9:07:e9:5e:ae:1b:3a:6f:0b:cd:d8:ea:35:aa:81:
         24:4c:9e:a1:fd:28:7a:4b:ed:23:8b:0b:d4:95:b2:ff:ef:db:
         fe:e9:f8:9d:f0:b4:0a:8b:74:15:58:39:7c:eb:2d:1d:9e:9c:
         27:d2:dc:d1:c5:33:3a:44:7d:76:26:df:57:24:88:84:de:16:
         12:01:d4:2c:cf:3b:a8:44:17:6f:72:4a:5d:30:47:a3:20:cc:
         b9:5f:1b:c3:c4:96:f0:34:05:6b:d1:64:50:bf:29:1c:78:97:
         28:c2:95:b8
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgICANswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzc2
MUEzQTlGQUU4N0Y4RjA2OUQ2ODI0NzFDQkUxQzkzNUZCRTMyMTAeFw0yMzA5MDEw
MTMwNTZaFw0yNDA4MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDQxMkEzM0U1MUM3NERC
MUZFRkNFQUE4RTNGMjlBRTZDNTkwRjFFOTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCl3t6CJIcMY2/PoxiXJ1KHiyVF/Dd26buTzbv8J3YuwcHO/L1R
B590opqcvUtmSHNNuRWlGGSJMJaeas5c/aaKMG0f9gtFKhEtADtkRPoCGNfMlqMe
asut1ZLX62b54/NFdRYRfaK2/+DnAdMx10jIclhspRa9BV+nh2jHmFthmXRUvt8i
78xZHmOFLdlk1iGdZj84tPrBSuEPyfo/d1rKEs3Sylcp9r8JsC8Lh2KQ+psVnmYe
UUWNXJbWveJ40j+u0stPAfzLokZpn7C2PIfWwNyZamq3TA5Mm8yRrC7NuTq1kB0+
87yigvUjApLjnIsNzLTzrpDc4Kaob30U6WsZAgMBAAGjggIoMIICJDAdBgNVHQ4E
FgQUQSoz5Rx02x/vzqqOPymubFkPHpIwHwYDVR0jBBgwFoAUx2Gjqfrof48GnWgk
ccvhyTX74yEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEzMzQ3L3gyR2pxZnJvZjQ4R25XZ2tjY3ZoeVRYNzR5RS5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3gyR2pxZnJvZjQ4R25XZ2tjY3Zo
eVRYNzR5RS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8xMzM0Ny9RU296NVJ4MDJ4X3Z6cXFPUHltdWJGa1BIcEku
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQGyqHAMA0GCSqGSIb3DQEBCwUAA4IBAQBh9t8etK3g54TlhrFKP4jh
gaHprOWsyeCB5Vs7ach/ujQh79v6XrmvHdNXjsudxqjKXgvvSZ9dBw9kN5fIZzqE
NV+YQbpY5s0R300GkLtMvIvIiJggsrolrhw3JJKW+UR2AiT2kKos9PiNFe+Yga5b
AYzaX/fqVIfkF6audFXWkZqLEQOk4QXbIXsHKNP6zpln7aG5B+lerhs6bwvN2Oo1
qoEkTJ6h/Sh6S+0jiwvUlbL/79v+6fid8LQKi3QVWDl86y0dnpwn0tzRxTM6RH12
Jt9XJIiE3hYSAdQszzuoRBdvckpdMEejIMy5XxvDxJbwNAVr0WRQvykceJcowpW4
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:33 2024 by rpki-client on console-ams.rpki-client.org