Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/wr3-orAIejFRkbksMLLgo0TMAjY.roa
File:                     wr3-orAIejFRkbksMLLgo0TMAjY.roa (raw, json)
Hash identifier:          taT/obHmMalFJifJbMBG7xphoHjPxvxHZvw8bHw7VTs=
Subject key identifier:   C2:BD:FE:A2:B0:08:7A:31:51:91:B9:2C:30:B2:E0:A3:44:CC:02:36
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       76
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/wr3-orAIejFRkbksMLLgo0TMAjY.roa
Signing time:             Tue 18 Oct 2022 02:18:16 +0000
ROA not before:           Tue 18 Oct 2022 02:18:16 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     2516
IP address blocks:        211.9.136.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118 (0x76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct 18 02:18:16 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=C2BDFEA2B0087A315191B92C30B2E0A344CC0236
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:0b:98:16:ab:a6:b0:7e:a4:98:62:6b:c9:11:
                    01:e5:45:0b:45:fe:69:d6:d1:ed:61:65:61:93:d4:
                    d4:d6:d9:eb:b0:70:2d:43:75:e7:5f:cc:1c:eb:3c:
                    c4:23:56:70:30:f3:8b:6b:40:10:25:e3:75:dc:54:
                    a9:09:bf:b0:ad:f6:16:04:82:8a:69:fb:c8:67:07:
                    8e:bb:9c:98:71:67:e2:7b:eb:b0:12:82:98:80:b2:
                    85:b8:5e:c3:b6:14:76:43:6b:dc:33:ac:24:b7:13:
                    33:8a:cb:e8:24:0a:b3:c0:5e:07:a6:1f:23:6c:95:
                    a4:aa:55:50:dd:6c:f5:cf:8a:13:57:6b:48:be:96:
                    85:fe:95:62:ce:e9:4d:25:94:21:21:37:7e:dd:81:
                    24:4f:2b:85:0e:bf:19:eb:69:08:97:0c:23:71:a4:
                    db:3c:4c:d0:ba:93:58:22:9d:e6:91:7e:d3:0f:dc:
                    f8:70:56:b1:55:cc:d7:da:4f:35:52:c8:ba:9a:73:
                    cd:16:68:fc:35:3e:87:21:7b:9c:b0:84:1c:c7:4f:
                    c1:7e:31:27:15:66:09:1c:a3:54:d6:42:f7:e4:f4:
                    cc:aa:aa:b5:55:5c:07:71:7d:2a:58:ca:cf:bf:3e:
                    3b:30:47:bf:77:db:31:cb:6e:28:dd:a5:a6:cd:77:
                    ec:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:BD:FE:A2:B0:08:7A:31:51:91:B9:2C:30:B2:E0:A3:44:CC:02:36
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/wr3-orAIejFRkbksMLLgo0TMAjY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.9.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:d4:f6:ec:85:d9:ae:4a:37:d6:ff:6c:00:63:95:63:a4:3c:
         e5:13:bb:d8:85:67:d3:a5:0f:a5:49:a1:bd:ca:be:96:c1:89:
         3b:2b:77:fc:26:0f:57:e6:82:99:c4:ee:7f:84:90:5a:7d:93:
         b2:db:d1:d0:f2:71:26:7d:95:57:1b:b5:a2:fc:44:4e:0e:d1:
         51:b9:2b:71:69:9e:47:26:11:d6:24:e5:a8:64:96:f6:ab:a5:
         0c:ba:d8:ee:f3:78:bb:4d:23:17:e5:c9:19:7f:26:7e:09:a0:
         b8:61:49:61:84:07:7f:58:b4:49:3e:3d:85:10:24:3e:7d:6c:
         37:e7:f8:50:15:40:dd:90:13:65:05:55:2e:34:39:cf:c1:71:
         fc:4f:77:3d:41:7f:f5:7e:2d:f0:a0:50:ed:ec:bf:73:51:a3:
         79:3c:93:a6:9a:76:c7:c4:59:87:84:4f:d0:f3:ad:fc:3d:3a:
         5a:7e:63:5e:a6:a3:f5:6d:21:a5:2c:fb:fb:1c:69:06:13:c3:
         91:20:f6:ec:af:ab:60:88:e1:af:5e:fc:d6:80:c0:82:95:3a:
         d4:0a:06:ae:02:f9:44:d9:ba:f6:da:28:77:7c:39:dc:4a:5b:
         03:5d:af:c8:76:f1:c4:27:0b:5e:cb:cd:99:b4:1f:0d:95:48:
         32:aa:22:c1
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBdjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDNzYx
QTNBOUZBRTg3RjhGMDY5RDY4MjQ3MUNCRTFDOTM1RkJFMzIxMB4XDTIyMTAxODAy
MTgxNloXDTIzMTAxNTAxMzAwMlowMzExMC8GA1UEAxMoQzJCREZFQTJCMDA4N0Ez
MTUxOTFCOTJDMzBCMkUwQTM0NENDMDIzNjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOALmBarprB+pJhia8kRAeVFC0X+adbR7WFlYZPU1NbZ67BwLUN1
51/MHOs8xCNWcDDzi2tAECXjddxUqQm/sK32FgSCimn7yGcHjrucmHFn4nvrsBKC
mICyhbhew7YUdkNr3DOsJLcTM4rL6CQKs8BeB6YfI2yVpKpVUN1s9c+KE1drSL6W
hf6VYs7pTSWUISE3ft2BJE8rhQ6/GetpCJcMI3Gk2zxM0LqTWCKd5pF+0w/c+HBW
sVXM19pPNVLIuppzzRZo/DU+hyF7nLCEHMdPwX4xJxVmCRyjVNZC9+T0zKqqtVVc
B3F9KljKz78+OzBHv3fbMctuKN2lps137PcCAwEAAaOCAigwggIkMB0GA1UdDgQW
BBTCvf6isAh6MVGRuSwwsuCjRMwCNjAfBgNVHSMEGDAWgBTHYaOp+uh/jwadaCRx
y+HJNfvjITAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTMzNDcveDJHanFmcm9mNDhHbldna2Njdmh5VFg3NHlFLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAveDJHanFmcm9mNDhHbldna2Njdmh5
VFg3NHlFLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzEzMzQ3L3dyMy1vckFJZWpGUmtia3NNTExnbzBUTUFqWS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBADTCYgwDQYJKoZIhvcNAQELBQADggEBAFfU9uyF2a5KN9b/bABjlWOk
POUTu9iFZ9OlD6VJob3KvpbBiTsrd/wmD1fmgpnE7n+EkFp9k7Lb0dDycSZ9lVcb
taL8RE4O0VG5K3FpnkcmEdYk5ahklvarpQy62O7zeLtNIxflyRl/Jn4JoLhhSWGE
B39YtEk+PYUQJD59bDfn+FAVQN2QE2UFVS40Oc/BcfxPdz1Bf/V+LfCgUO3sv3NR
o3k8k6aadsfEWYeET9Dzrfw9Olp+Y16mo/VtIaUs+/scaQYTw5Eg9uyvq2CI4a9e
/NaAwIKVOtQKBq4C+UTZuvbaKHd8OdxKWwNdr8h28cQnC17LzZm0Hw2VSDKqIsE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:37 2024 by rpki-client on console-ams.rpki-client.org