Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/va3-VeAzNbQPeUvjAipog0El4Xw.roa
File:                     va3-VeAzNbQPeUvjAipog0El4Xw.roa (raw, json)
Hash identifier:          uFlvbLEbjEFrxJssBW8LHiF5aJYtzo+6apgTo+Fr0FE=
Subject key identifier:   BD:AD:FE:55:E0:33:35:B4:0F:79:4B:E3:02:2A:68:83:41:25:E1:7C
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       0149
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/va3-VeAzNbQPeUvjAipog0El4Xw.roa
Signing time:             Sun 01 Oct 2023 01:33:22 +0000
ROA not before:           Sun 01 Oct 2023 01:33:22 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     2516
IP address blocks:        211.10.218.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 329 (0x149)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct  1 01:33:22 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=BDADFE55E03335B40F794BE3022A68834125E17C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:00:91:24:bc:63:91:3b:de:61:1e:82:74:37:
                    11:74:6e:65:0e:46:93:25:c1:76:c4:b6:2c:22:8e:
                    c7:73:fe:07:72:38:9b:fe:56:c5:43:8c:ca:50:75:
                    9f:b2:45:88:62:e7:75:95:7c:70:f4:c8:bf:11:cd:
                    45:72:d8:40:73:53:ae:59:95:fb:89:9e:5b:2d:b4:
                    6a:e4:b4:0f:d0:59:03:8a:dd:5e:c9:7b:7b:d2:6e:
                    cb:91:b6:a4:83:05:0a:f1:88:fb:a8:6b:9d:32:1c:
                    ed:75:14:11:b4:cd:76:ec:dc:9b:d6:fb:c9:db:e1:
                    ad:f7:76:84:a1:c7:ac:0d:52:4a:2c:9c:56:da:67:
                    c9:37:46:ea:b7:61:1e:99:bf:8c:cc:20:cb:b2:07:
                    64:67:8d:b8:d4:45:c8:b6:03:7f:29:f7:ea:6a:cb:
                    e8:9a:7d:a3:25:c3:ee:ae:0a:ef:a1:a9:b6:5d:ac:
                    f4:a2:fe:e3:22:c9:af:0c:c4:31:c4:86:3a:36:71:
                    da:f3:5a:d4:be:29:80:3e:5c:de:f7:7b:3f:fc:2d:
                    a0:8c:6e:72:29:5c:11:2e:dd:1b:03:88:c1:43:17:
                    38:fe:63:cf:aa:8a:b6:c9:3a:2d:d1:03:14:17:c6:
                    7d:0d:4b:16:e7:3e:0a:4a:f5:bf:e2:63:43:93:17:
                    28:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:AD:FE:55:E0:33:35:B4:0F:79:4B:E3:02:2A:68:83:41:25:E1:7C
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/va3-VeAzNbQPeUvjAipog0El4Xw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.10.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bb:a3:45:fa:3f:75:e4:0d:07:2a:2d:39:ad:9a:1d:93:ce:1a:
         5a:f6:db:39:4c:88:64:5e:2d:ce:c7:fd:b6:ed:7d:a0:84:96:
         d2:42:82:be:50:51:8d:b1:69:a8:b4:8e:4d:5f:73:4c:16:9a:
         25:a1:2b:e7:a6:5d:1b:42:f8:f4:13:e2:12:62:f2:92:b8:07:
         33:d4:da:ab:36:2b:fd:7d:48:19:09:fd:5c:b6:20:43:9b:bd:
         59:06:d1:f2:15:96:b2:c1:c9:b4:9a:8e:a8:91:95:54:9c:05:
         95:aa:b2:86:a1:02:1c:92:32:68:5d:78:3e:ee:6d:8c:b0:01:
         03:ce:70:e1:6e:0f:34:4c:41:bf:f7:91:51:43:3b:21:23:ba:
         62:26:39:5d:ee:4b:fc:9f:4a:1d:46:f8:8e:af:9f:26:92:93:
         59:64:7a:74:5d:4c:40:cc:a8:29:fa:ad:23:a4:24:6f:f4:4f:
         7a:89:dc:b9:02:4e:c3:30:ee:d0:17:f6:da:00:bc:7d:07:9c:
         d4:1a:71:88:90:35:54:ca:3a:ae:7c:38:cb:4c:00:79:1e:bb:
         2f:23:52:28:57:8e:3e:c6:cf:ca:5b:7f:d1:d4:53:d0:2f:4f:
         6b:81:ee:ed:4e:04:1c:c2:8e:8a:a7:06:11:04:c8:86:13:9b:
         7f:75:d4:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org