Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/48623960-4163-4ccb-9f0d-89c6ca0c92c2/0/3130332e3234372e31302e302f32342d3234203d3e203538343837.roa
File:                     3130332e3234372e31302e302f32342d3234203d3e203538343837.roa (raw, json)
Hash identifier:          1NeiiezGZ/0YUkF2QhIznqPdabNTEuS8XZR8KkvQznc=
Subject key identifier:   6B:13:BA:9A:0C:21:9D:7F:73:75:4E:D2:FC:52:6D:46:01:CC:FE:45
Certificate issuer:       /CN=6DD3E1860BFDEC3D3695C7B9DCCEE54287308546
Certificate serial:       6279301839AC7D3B8E1659C77FB19E15DED8434B
Authority key identifier: 6D:D3:E1:86:0B:FD:EC:3D:36:95:C7:B9:DC:CE:E5:42:87:30:85:46
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DD3E1860BFDEC3D3695C7B9DCCEE54287308546.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/48623960-4163-4ccb-9f0d-89c6ca0c92c2/0/3130332e3234372e31302e302f32342d3234203d3e203538343837.roa
Signing time:             Wed 01 Dec 2021 08:00:01 +0000
ROA not before:           Wed 01 Dec 2021 07:55:01 +0000
ROA not after:            Thu 01 Dec 2022 08:00:01 +0000
asID:                     58487
IP address blocks:        103.247.10.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:79:30:18:39:ac:7d:3b:8e:16:59:c7:7f:b1:9e:15:de:d8:43:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6DD3E1860BFDEC3D3695C7B9DCCEE54287308546
        Validity
            Not Before: Dec  1 07:55:01 2021 GMT
            Not After : Dec  1 08:00:01 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ed:3f:69:ee:20:cc:42:e9:dc:43:0c:6d:e0:
                    33:a9:8f:bc:5f:d4:dd:cb:67:3b:a2:82:20:64:44:
                    05:20:46:5e:ed:ed:8b:75:21:7a:12:2f:4c:4d:e9:
                    82:b8:be:2e:39:a7:7c:09:fc:86:11:a6:26:f5:ae:
                    f4:4b:1a:9a:29:1f:42:ef:4b:fd:1b:ac:4d:71:1a:
                    7d:09:ca:de:01:ab:2c:59:58:07:6f:f5:8d:d5:44:
                    8a:33:7a:cc:de:d4:ff:5f:ed:13:1f:1f:c7:7e:80:
                    be:51:7a:6b:c6:94:05:3b:d9:88:85:fb:80:e7:f6:
                    43:79:52:a3:41:b5:ad:71:c7:98:84:4e:3c:b3:94:
                    4c:41:9f:ed:ad:68:d4:87:19:e4:de:fa:39:c8:92:
                    5c:23:d3:07:26:f9:08:fe:5a:91:93:2b:30:50:c5:
                    ce:bd:2e:74:ec:ae:03:c6:2e:05:1a:59:b0:9a:37:
                    38:a2:2e:01:34:ad:9d:96:f6:ad:92:b0:dc:65:fc:
                    91:0d:4a:30:df:8e:4e:1a:9d:33:9d:28:de:c7:11:
                    d9:97:40:ad:64:02:53:03:b9:8b:b7:9a:b8:f6:95:
                    60:e4:c7:b7:c6:a1:9b:ca:cf:0c:cc:f7:6f:46:cb:
                    6b:dc:1e:fe:c3:4e:dc:83:3a:9b:b2:99:a1:45:dd:
                    48:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:13:BA:9A:0C:21:9D:7F:73:75:4E:D2:FC:52:6D:46:01:CC:FE:45
            X509v3 Authority Key Identifier:
                keyid:6D:D3:E1:86:0B:FD:EC:3D:36:95:C7:B9:DC:CE:E5:42:87:30:85:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/48623960-4163-4ccb-9f0d-89c6ca0c92c2/0/6DD3E1860BFDEC3D3695C7B9DCCEE54287308546.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DD3E1860BFDEC3D3695C7B9DCCEE54287308546.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/48623960-4163-4ccb-9f0d-89c6ca0c92c2/0/3130332e3234372e31302e302f32342d3234203d3e203538343837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.247.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:8a:33:40:40:d0:62:b3:12:7a:51:f4:ea:41:9a:10:7a:b9:
         49:44:c8:6b:90:1f:d9:ac:11:9e:95:2f:60:10:9e:2a:a7:0f:
         58:0c:f8:fa:80:40:06:62:7a:f9:f4:1b:12:37:a5:eb:f5:a6:
         08:e9:f5:58:3e:dd:31:c7:08:67:c1:c7:5e:fd:13:48:51:34:
         90:2b:41:ab:e8:b4:8d:b6:b4:c5:2d:66:35:97:e9:2e:b5:bf:
         4a:95:af:af:fc:6b:83:99:8d:86:76:47:88:b6:d8:bb:b0:3a:
         e6:ac:e2:b9:e0:b8:34:1d:a2:2a:79:61:51:71:08:d2:bb:9c:
         47:9f:2b:20:e8:39:e2:cd:b5:52:8d:61:49:ce:6f:fd:59:1c:
         53:f0:2a:77:97:73:97:70:63:fa:72:89:86:cb:e5:63:26:55:
         77:66:2d:64:21:bf:63:ae:91:dc:3a:2a:62:9a:62:3e:0c:de:
         b9:5a:ad:b9:5e:ee:ab:47:47:84:9c:2b:4b:f6:00:e4:93:e5:
         2a:a5:2e:2e:dd:19:02:33:51:45:32:91:8a:12:4e:e8:aa:8a:
         91:a8:f0:48:86:e9:dc:73:cd:38:ae:bd:b9:3e:d5:93:30:1a:
         98:b8:04:a6:00:e7:c8:98:17:b9:43:62:93:04:a9:ec:cc:77:
         01:00:28:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:06 2024 by rpki-client on console-fra.rpki-client.org