Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/r4Olo_Ad49FLzt4o3sw3JqHRfw0.roa
File:                     r4Olo_Ad49FLzt4o3sw3JqHRfw0.roa (raw, json)
Hash identifier:          NasxG8hczc4JEnO1ewVouoJHELCNTxGjeCxUTeTEG0o=
Subject key identifier:   AF:83:A5:A3:F0:1D:E3:D1:4B:CE:DE:28:DE:CC:37:26:A1:D1:7F:0D
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       77
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/r4Olo_Ad49FLzt4o3sw3JqHRfw0.roa
Signing time:             Tue 18 Oct 2022 02:20:18 +0000
ROA not before:           Tue 18 Oct 2022 02:20:18 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     2516
IP address blocks:        211.9.190.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119 (0x77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct 18 02:20:18 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=AF83A5A3F01DE3D14BCEDE28DECC3726A1D17F0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:2e:3c:12:d5:7f:db:3f:3d:20:e9:12:5e:28:
                    20:f8:bb:eb:36:65:8f:f9:6d:5b:11:ee:73:04:db:
                    6f:98:25:8b:87:ab:1b:bc:9f:de:b9:b1:50:1b:28:
                    96:45:5d:99:cb:34:dd:f5:90:26:3c:0e:2a:ec:ff:
                    03:c7:ff:d4:30:c6:40:fb:81:80:e7:96:03:a7:a5:
                    99:4d:64:1a:83:3e:ce:3e:6b:56:a9:33:ce:eb:f3:
                    24:47:fb:fd:7e:18:03:45:70:a1:d4:8a:a1:3a:b0:
                    00:79:ff:68:e6:c0:93:67:af:9d:3e:30:49:fd:23:
                    c0:2a:a1:5f:ea:8c:56:23:b3:6e:1e:09:db:e4:20:
                    60:84:df:ff:38:d6:65:57:a3:3c:c9:2f:0b:c0:b1:
                    16:b9:38:8f:d3:79:4c:4e:05:24:41:a9:04:d8:0a:
                    dd:5e:b9:1d:df:85:6e:16:c1:e9:6f:4d:de:83:b1:
                    22:08:f0:09:7c:1d:bb:39:5a:3b:b2:89:f1:2c:6e:
                    a1:1c:9d:38:8a:fc:41:f3:c8:95:02:5d:86:ee:07:
                    be:7d:4f:9e:83:1a:be:ff:60:60:36:9d:7c:3b:27:
                    f5:86:ca:28:a1:5b:da:60:77:27:73:3a:85:a1:43:
                    44:81:fd:7a:3c:f8:1b:58:c8:ee:78:8a:4b:20:ed:
                    10:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:83:A5:A3:F0:1D:E3:D1:4B:CE:DE:28:DE:CC:37:26:A1:D1:7F:0D
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/r4Olo_Ad49FLzt4o3sw3JqHRfw0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.9.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5f:7e:1b:25:3e:89:37:be:b4:ba:2c:dc:8b:ee:6b:c4:ac:3c:
         6b:67:0b:0c:87:10:0e:a1:34:b1:14:62:7b:a0:e9:64:5f:03:
         60:95:7e:10:8d:e9:2c:f9:cc:44:36:45:f0:55:89:92:85:82:
         89:ce:df:f2:23:85:37:6a:f4:c5:ca:79:4e:eb:7d:ab:a1:f0:
         1d:3c:da:96:20:9d:7a:91:b0:bb:c8:55:0d:79:34:ef:9a:9a:
         20:71:49:79:e8:52:88:37:f0:a8:8c:3a:4c:ba:ec:3e:a7:f6:
         8b:53:f2:96:ed:70:8d:4d:16:5c:9f:dd:3a:6c:0a:b8:31:41:
         e1:f6:9c:fb:16:82:d8:eb:aa:75:cc:de:ee:b0:e9:d5:d8:e8:
         42:fc:7c:c0:40:15:27:3b:cc:4d:d8:31:3b:75:d8:1f:ba:ac:
         59:2d:01:6f:93:b7:88:c3:bb:ea:68:2d:48:cc:c9:8f:49:70:
         d1:cf:a6:52:cd:4d:c0:9b:11:ed:50:1b:7c:6d:c8:47:f4:2b:
         c9:a6:2a:1b:45:13:fc:22:8c:47:c9:e6:c0:f1:19:b0:67:9e:
         5e:da:67:6e:f2:22:f1:93:39:22:6b:a4:a7:75:85:1a:94:7e:
         b8:33:70:fa:f6:40:3d:db:c9:60:89:4a:46:85:eb:63:3e:a7:
         f7:ce:ad:76
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org