Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/48623960-4163-4ccb-9f0d-89c6ca0c92c2/0/3130332e3234372e382e302f32342d3234203d3e203538343837.roa
File:                     3130332e3234372e382e302f32342d3234203d3e203538343837.roa (raw, json)
Hash identifier:          iEFteZ1NUltCvNVVBH5Ei5HQ3dmGbPucOxST02PZiHI=
Subject key identifier:   95:C0:27:BD:69:D8:4B:89:AF:34:1A:1F:F2:47:A6:4A:4D:39:CB:A6
Certificate issuer:       /CN=6DD3E1860BFDEC3D3695C7B9DCCEE54287308546
Certificate serial:       2D5079BAF8843AE21CA7B44AD3D0F93CEE0DD78D
Authority key identifier: 6D:D3:E1:86:0B:FD:EC:3D:36:95:C7:B9:DC:CE:E5:42:87:30:85:46
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DD3E1860BFDEC3D3695C7B9DCCEE54287308546.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/48623960-4163-4ccb-9f0d-89c6ca0c92c2/0/3130332e3234372e382e302f32342d3234203d3e203538343837.roa
Signing time:             Wed 01 Dec 2021 08:00:02 +0000
ROA not before:           Wed 01 Dec 2021 07:55:02 +0000
ROA not after:            Thu 01 Dec 2022 08:00:02 +0000
asID:                     58487
IP address blocks:        103.247.8.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:50:79:ba:f8:84:3a:e2:1c:a7:b4:4a:d3:d0:f9:3c:ee:0d:d7:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6DD3E1860BFDEC3D3695C7B9DCCEE54287308546
        Validity
            Not Before: Dec  1 07:55:02 2021 GMT
            Not After : Dec  1 08:00:02 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:cc:a7:ee:04:83:b5:6f:79:e3:9d:6f:33:eb:
                    82:eb:c5:04:83:98:94:8c:fc:b1:2a:a1:b5:71:2a:
                    46:d9:a9:b1:cc:c2:0b:f5:e8:cd:e7:89:79:dc:f9:
                    e5:ce:27:2e:ee:17:55:b4:5d:bb:a6:e2:02:40:75:
                    7e:49:81:c8:57:6e:2c:05:ab:ab:6f:ec:ea:b5:e1:
                    36:fb:40:26:0e:28:52:8a:64:fd:4f:e1:6b:3e:1e:
                    a9:61:d9:5c:15:f4:f8:fd:fc:e2:db:58:84:c3:9d:
                    de:91:6f:34:d5:25:fc:29:2c:e5:b7:67:64:f3:61:
                    82:0b:6e:84:3e:c4:ef:cc:50:4c:5c:ed:da:a0:e0:
                    6d:ae:2f:2d:95:6e:bc:5c:2c:50:61:20:0e:43:ab:
                    8e:df:13:09:b8:25:f9:c9:21:ec:88:2d:f6:d7:28:
                    c5:61:7a:4f:3e:d3:6b:39:2c:54:9f:51:c6:af:5d:
                    8d:51:91:8d:8f:6a:08:22:40:84:d0:aa:13:a2:8b:
                    0a:eb:e7:d3:00:ad:b7:c0:27:40:57:b8:6f:7d:02:
                    b5:50:f7:56:3a:ee:29:c9:0c:59:14:c9:af:09:53:
                    b2:c1:d2:60:53:6e:53:fa:98:fc:72:2d:a7:e9:39:
                    d3:5a:e5:f9:3a:94:b4:42:3f:0e:68:86:bd:0d:77:
                    6a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:C0:27:BD:69:D8:4B:89:AF:34:1A:1F:F2:47:A6:4A:4D:39:CB:A6
            X509v3 Authority Key Identifier:
                keyid:6D:D3:E1:86:0B:FD:EC:3D:36:95:C7:B9:DC:CE:E5:42:87:30:85:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/48623960-4163-4ccb-9f0d-89c6ca0c92c2/0/6DD3E1860BFDEC3D3695C7B9DCCEE54287308546.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DD3E1860BFDEC3D3695C7B9DCCEE54287308546.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/48623960-4163-4ccb-9f0d-89c6ca0c92c2/0/3130332e3234372e382e302f32342d3234203d3e203538343837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.247.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:e9:67:5a:f1:d6:7e:2e:83:28:51:47:6b:59:19:76:26:9a:
         50:36:91:f9:b4:fb:01:21:1e:a5:29:26:30:3e:d0:6a:d8:7b:
         81:f5:04:5e:c1:4c:78:b6:81:21:df:e7:7a:ad:d9:a5:48:04:
         8c:99:06:79:34:d7:0d:36:40:a6:24:10:fb:23:2d:36:5f:7d:
         a9:0d:d9:5a:7d:92:7d:57:10:92:a5:91:bc:e2:6d:4d:39:c2:
         42:40:51:7c:8b:d0:5e:9b:5a:8c:45:a9:b3:b7:5d:83:43:d5:
         78:74:51:e8:c7:81:ef:a4:7c:75:6b:d7:07:da:76:16:7b:14:
         90:8c:0e:60:2d:34:ab:5d:f1:78:68:8c:32:25:cb:e4:26:37:
         5e:17:0d:f0:b4:83:9a:3e:08:b4:5f:64:76:e1:d7:36:f7:cf:
         0f:72:83:39:aa:83:42:77:8b:4c:6d:0d:e5:3a:07:e6:69:47:
         bc:f9:95:d4:6c:14:c5:6a:27:c4:15:76:b4:3d:0e:20:ad:35:
         ae:81:f9:08:51:88:08:01:79:0b:e2:2a:4c:03:70:b6:74:ec:
         29:42:ac:2f:12:39:0e:91:6f:a0:64:af:83:83:a6:6d:b8:9a:
         f2:73:e9:97:29:7d:6c:d3:c3:3d:3f:a0:73:b1:1b:70:94:28:
         29:b2:2e:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:39 2024 by rpki-client on console-ams.rpki-client.org