Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/48623960-4163-4ccb-9f0d-89c6ca0c92c2/0/3130332e3234372e382e302f32332d3233203d3e203538343837.roa
File:                     3130332e3234372e382e302f32332d3233203d3e203538343837.roa (raw, json)
Hash identifier:          fZ9iBK+2UjZ+6uhnehWPuH27iqJO3AfMQZrql5ZpRnA=
Subject key identifier:   E0:9F:89:D2:F1:C6:4D:70:4D:33:D7:53:57:43:54:55:44:A3:35:D9
Certificate issuer:       /CN=6DD3E1860BFDEC3D3695C7B9DCCEE54287308546
Certificate serial:       36D68027269452D5E53BD84792F3F8024EB40475
Authority key identifier: 6D:D3:E1:86:0B:FD:EC:3D:36:95:C7:B9:DC:CE:E5:42:87:30:85:46
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DD3E1860BFDEC3D3695C7B9DCCEE54287308546.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/48623960-4163-4ccb-9f0d-89c6ca0c92c2/0/3130332e3234372e382e302f32332d3233203d3e203538343837.roa
Signing time:             Wed 01 Dec 2021 08:00:02 +0000
ROA not before:           Wed 01 Dec 2021 07:55:02 +0000
ROA not after:            Thu 01 Dec 2022 08:00:02 +0000
asID:                     58487
IP address blocks:        103.247.8.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:d6:80:27:26:94:52:d5:e5:3b:d8:47:92:f3:f8:02:4e:b4:04:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6DD3E1860BFDEC3D3695C7B9DCCEE54287308546
        Validity
            Not Before: Dec  1 07:55:02 2021 GMT
            Not After : Dec  1 08:00:02 2022 GMT
        Subject: CN=3082010A0282010100BE487A120D7F7F60640EEAB0E6F30C3EA0BAC7A45231B96970CB65F6B219D5D40B7F8CC0B9F1A842F0F852F88B2759B2A79171A3CD895E9C49F9AF894301C90CEF53536CEBF554C99C31C96CE99D20D9CF2F9D19BF6F36A3C27845F320D837AF9481E88BF73850B2455286C03B0DB9BFDFA90BC3374517B8E07CFEECEC523B294C7799F51DF0D5C9122666D8A25E76F9A7888171FA4368051808905DA4BFF6B6C7E58EC8F8BE165DE048FE175DD265D9C91AAF71F54C3EEA10183E73040F544E1A8F0D836251084418D87356729C970520C57383EB490D85D06C828008770C6AB8C977EE946FD625A8CC1AEBC89AFAEE362C284F6BFEE9ACAE58B6FB5C36BDCD0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:48:7a:12:0d:7f:7f:60:64:0e:ea:b0:e6:f3:
                    0c:3e:a0:ba:c7:a4:52:31:b9:69:70:cb:65:f6:b2:
                    19:d5:d4:0b:7f:8c:c0:b9:f1:a8:42:f0:f8:52:f8:
                    8b:27:59:b2:a7:91:71:a3:cd:89:5e:9c:49:f9:af:
                    89:43:01:c9:0c:ef:53:53:6c:eb:f5:54:c9:9c:31:
                    c9:6c:e9:9d:20:d9:cf:2f:9d:19:bf:6f:36:a3:c2:
                    78:45:f3:20:d8:37:af:94:81:e8:8b:f7:38:50:b2:
                    45:52:86:c0:3b:0d:b9:bf:df:a9:0b:c3:37:45:17:
                    b8:e0:7c:fe:ec:ec:52:3b:29:4c:77:99:f5:1d:f0:
                    d5:c9:12:26:66:d8:a2:5e:76:f9:a7:88:81:71:fa:
                    43:68:05:18:08:90:5d:a4:bf:f6:b6:c7:e5:8e:c8:
                    f8:be:16:5d:e0:48:fe:17:5d:d2:65:d9:c9:1a:af:
                    71:f5:4c:3e:ea:10:18:3e:73:04:0f:54:4e:1a:8f:
                    0d:83:62:51:08:44:18:d8:73:56:72:9c:97:05:20:
                    c5:73:83:eb:49:0d:85:d0:6c:82:80:08:77:0c:6a:
                    b8:c9:77:ee:94:6f:d6:25:a8:cc:1a:eb:c8:9a:fa:
                    ee:36:2c:28:4f:6b:fe:e9:ac:ae:58:b6:fb:5c:36:
                    bd:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:9F:89:D2:F1:C6:4D:70:4D:33:D7:53:57:43:54:55:44:A3:35:D9
            X509v3 Authority Key Identifier:
                keyid:6D:D3:E1:86:0B:FD:EC:3D:36:95:C7:B9:DC:CE:E5:42:87:30:85:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/48623960-4163-4ccb-9f0d-89c6ca0c92c2/0/6DD3E1860BFDEC3D3695C7B9DCCEE54287308546.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DD3E1860BFDEC3D3695C7B9DCCEE54287308546.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/48623960-4163-4ccb-9f0d-89c6ca0c92c2/0/3130332e3234372e382e302f32332d3233203d3e203538343837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.247.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         81:35:b3:81:76:06:a2:6e:23:51:ee:4c:a8:d6:d5:3a:5b:ba:
         b5:bf:6d:1c:e5:37:c4:73:60:e3:75:b2:cf:35:2d:b8:9d:b9:
         78:06:20:32:9e:d3:ea:2c:98:8c:4a:72:f3:3c:29:95:78:af:
         39:27:9a:42:e7:5f:de:3f:0c:85:0a:9a:02:8e:29:b9:50:26:
         dd:ca:ab:8d:2f:ce:5d:bf:e4:f0:41:de:23:fa:d8:19:e4:c0:
         9c:4e:04:03:e6:23:76:14:d0:e7:1e:81:e6:ab:b4:b2:a9:90:
         21:71:0a:68:2f:e1:67:7c:a7:3f:c9:57:e5:0a:5d:bc:51:30:
         86:7d:e2:02:21:c8:20:ba:d1:39:24:f7:f1:97:ce:49:2e:29:
         87:ab:57:83:9b:13:c7:ba:90:43:10:ce:9a:3b:3a:8e:34:4f:
         28:a3:e9:a5:88:da:15:61:7d:10:84:99:48:4f:10:60:6b:9b:
         1d:d4:89:06:31:1b:f3:32:ca:a8:c1:6c:33:e4:7a:86:3e:5e:
         65:1f:f1:4c:27:de:eb:54:11:ff:ab:e0:a5:c8:4e:96:77:83:
         9c:a3:69:36:44:2d:38:27:d4:0e:7f:cb:6e:64:77:66:5d:67:
         66:6a:e9:7c:49:f7:eb:37:7a:b2:1b:23:34:29:9b:a4:c7:0a:
         ec:69:6f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:06 2024 by rpki-client on console-fra.rpki-client.org