Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/48623960-4163-4ccb-9f0d-89c6ca0c92c2/0/3130332e3234372e31312e302f32342d3234203d3e203538343837.roa
File:                     3130332e3234372e31312e302f32342d3234203d3e203538343837.roa (raw, json)
Hash identifier:          U7r90m2F4rRr9rtVmexNrfpE7wV4qU7ERNY1FV8a/+s=
Subject key identifier:   17:F2:70:41:10:DA:E0:84:AC:45:0C:E6:DE:48:64:3C:79:16:A2:9D
Certificate issuer:       /CN=6DD3E1860BFDEC3D3695C7B9DCCEE54287308546
Certificate serial:       77B68D8A24B974DC75AB79C83C73A8957AE3D3A9
Authority key identifier: 6D:D3:E1:86:0B:FD:EC:3D:36:95:C7:B9:DC:CE:E5:42:87:30:85:46
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DD3E1860BFDEC3D3695C7B9DCCEE54287308546.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/48623960-4163-4ccb-9f0d-89c6ca0c92c2/0/3130332e3234372e31312e302f32342d3234203d3e203538343837.roa
Signing time:             Wed 01 Dec 2021 08:00:02 +0000
ROA not before:           Wed 01 Dec 2021 07:55:02 +0000
ROA not after:            Thu 01 Dec 2022 08:00:02 +0000
asID:                     58487
IP address blocks:        103.247.11.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:b6:8d:8a:24:b9:74:dc:75:ab:79:c8:3c:73:a8:95:7a:e3:d3:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6DD3E1860BFDEC3D3695C7B9DCCEE54287308546
        Validity
            Not Before: Dec  1 07:55:02 2021 GMT
            Not After : Dec  1 08:00:02 2022 GMT
        Subject: CN=3082010A0282010100B7791A5F5000C7DB7FA00C25EFFCA2A42D5455DC4FFC91AE154CCB66CDF1711F8B5402174F133243547634CD1660753162C1002D8AB79AB2BF8D268DA7E6268FC53E7C60BF3CCF51B926C97E609B6BF0A9FC5816FF1B4917788D7D11AD8DB3C9C0EA98C0D5616D3B65B81281FB2279380C8188ACB60AA60B42A66053437AA95D640EB036075126B647A136F003FC0FA6877C98F34912B42F88FD3CBB2C8685B993D16398AFBAB004ECBFF2B2B9AF359863B0A46BE45AA58FDBCD85A6873827F563CB879BE59A2684EF653A479F956FC50F5B8286FD26FF04C2821F24F5B607B909B07E14ECF6DC8E8B8B7FD9C814568D82AD3F7E8F83879943FEA3C142C583730203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:79:1a:5f:50:00:c7:db:7f:a0:0c:25:ef:fc:
                    a2:a4:2d:54:55:dc:4f:fc:91:ae:15:4c:cb:66:cd:
                    f1:71:1f:8b:54:02:17:4f:13:32:43:54:76:34:cd:
                    16:60:75:31:62:c1:00:2d:8a:b7:9a:b2:bf:8d:26:
                    8d:a7:e6:26:8f:c5:3e:7c:60:bf:3c:cf:51:b9:26:
                    c9:7e:60:9b:6b:f0:a9:fc:58:16:ff:1b:49:17:78:
                    8d:7d:11:ad:8d:b3:c9:c0:ea:98:c0:d5:61:6d:3b:
                    65:b8:12:81:fb:22:79:38:0c:81:88:ac:b6:0a:a6:
                    0b:42:a6:60:53:43:7a:a9:5d:64:0e:b0:36:07:51:
                    26:b6:47:a1:36:f0:03:fc:0f:a6:87:7c:98:f3:49:
                    12:b4:2f:88:fd:3c:bb:2c:86:85:b9:93:d1:63:98:
                    af:ba:b0:04:ec:bf:f2:b2:b9:af:35:98:63:b0:a4:
                    6b:e4:5a:a5:8f:db:cd:85:a6:87:38:27:f5:63:cb:
                    87:9b:e5:9a:26:84:ef:65:3a:47:9f:95:6f:c5:0f:
                    5b:82:86:fd:26:ff:04:c2:82:1f:24:f5:b6:07:b9:
                    09:b0:7e:14:ec:f6:dc:8e:8b:8b:7f:d9:c8:14:56:
                    8d:82:ad:3f:7e:8f:83:87:99:43:fe:a3:c1:42:c5:
                    83:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:F2:70:41:10:DA:E0:84:AC:45:0C:E6:DE:48:64:3C:79:16:A2:9D
            X509v3 Authority Key Identifier:
                keyid:6D:D3:E1:86:0B:FD:EC:3D:36:95:C7:B9:DC:CE:E5:42:87:30:85:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/48623960-4163-4ccb-9f0d-89c6ca0c92c2/0/6DD3E1860BFDEC3D3695C7B9DCCEE54287308546.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DD3E1860BFDEC3D3695C7B9DCCEE54287308546.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/48623960-4163-4ccb-9f0d-89c6ca0c92c2/0/3130332e3234372e31312e302f32342d3234203d3e203538343837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.247.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:26:20:46:8a:59:3d:0a:8c:41:58:cb:ce:fd:3d:24:1d:4b:
         26:65:35:5d:c2:d6:f1:19:6c:c5:93:1c:9a:32:00:fe:61:95:
         4e:ed:a5:47:a7:a7:a4:0b:15:49:58:9c:a5:c5:12:17:82:f4:
         a8:c3:a7:ef:76:bc:89:f4:c3:79:7b:fe:13:32:f0:a5:f3:64:
         19:e8:05:c0:50:73:bb:1c:c0:e4:51:09:8a:72:27:c2:40:d6:
         f3:71:da:0d:b9:15:ef:c2:f9:31:71:2a:0f:53:18:68:80:86:
         49:76:c1:17:66:da:47:cb:2d:93:3e:44:ab:bb:be:2e:41:10:
         08:67:a4:d5:22:ad:45:2c:0f:6a:09:f4:10:be:90:d2:7f:86:
         e3:11:5e:4c:76:51:08:40:f4:32:6e:a7:90:70:c5:c1:21:89:
         65:f9:d0:e6:4b:3d:ac:c0:74:d9:69:14:55:97:96:fb:bf:52:
         90:8e:77:ac:ca:7f:7e:20:bd:3f:e7:bb:e8:5e:1e:12:12:27:
         ef:f4:5f:45:27:51:7d:9f:4c:b2:3a:15:42:93:87:cc:9b:76:
         ff:a8:cb:e0:3d:58:d6:90:93:92:b5:2c:0b:65:53:45:b1:7e:
         89:59:af:9c:07:02:04:e1:9e:c2:b1:26:71:85:60:3e:8d:cc:
         d4:72:32:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:06 2024 by rpki-client on console-fra.rpki-client.org