Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a363030303a3a2f33362d3336203d3e20313337333136.roa
File:                     323430323a376163303a363030303a3a2f33362d3336203d3e20313337333136.roa (raw, json)
Hash identifier:          rzPXe+qoQFG3iyMxPybRvsvUxIeyqk5RwAISOMBx27I=
Subject key identifier:   9D:EC:73:FE:73:BF:A1:2B:F9:8C:65:1F:39:A5:6A:8C:FD:CA:16:F4
Certificate issuer:       /CN=7B35834A4704C7ED85D62212FC62C46FA5A0666D
Certificate serial:       47DF53C7CD742C52F2BBA833AE39630B421F532F
Authority key identifier: 7B:35:83:4A:47:04:C7:ED:85:D6:22:12:FC:62:C4:6F:A5:A0:66:6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a363030303a3a2f33362d3336203d3e20313337333136.roa
Signing time:             Fri 06 Dec 2024 13:25:32 +0000
ROA not before:           Fri 06 Dec 2024 13:20:32 +0000
ROA not after:            Fri 05 Dec 2025 13:25:32 +0000
asID:                     137316
IP address blocks:        2402:7ac0:6000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:df:53:c7:cd:74:2c:52:f2:bb:a8:33:ae:39:63:0b:42:1f:53:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B35834A4704C7ED85D62212FC62C46FA5A0666D
        Validity
            Not Before: Dec  6 13:20:32 2024 GMT
            Not After : Dec  5 13:25:32 2025 GMT
        Subject: CN=9DEC73FE73BFA12BF98C651F39A56A8CFDCA16F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:07:c2:7d:59:2c:79:ab:68:84:41:e9:50:ab:
                    f1:fc:b3:9b:d7:c8:29:a5:d5:59:9a:4b:bc:6f:42:
                    7f:af:ec:98:55:bc:db:a6:93:99:b4:ac:9a:69:88:
                    d1:dc:0c:93:7d:4c:e3:3f:61:b7:31:ca:88:c5:76:
                    9d:57:b6:1f:bd:54:ae:8c:9d:73:9d:d4:29:c2:63:
                    0c:31:05:9c:63:a0:59:3b:31:16:f6:03:62:4c:6a:
                    b9:c2:04:8a:d5:98:62:ca:00:ec:0b:38:6f:50:dc:
                    ff:8a:c7:dd:23:35:e6:83:d3:d9:30:8a:c3:6a:c3:
                    23:ac:ca:18:56:fb:ba:c7:2b:9f:db:c7:52:60:7a:
                    62:d1:e9:74:54:ed:b1:c3:af:9c:6a:36:57:38:7f:
                    9b:8c:d3:f2:69:d2:db:33:48:85:4c:64:af:60:46:
                    14:b6:de:e8:be:24:96:bb:80:cf:34:9c:74:3b:48:
                    d0:f8:0e:38:6b:b6:ef:9d:71:a4:48:e6:f7:c4:5a:
                    5a:79:b2:49:23:fc:77:75:9c:f6:fd:5f:98:96:97:
                    4b:b6:52:dd:2d:f9:6e:b6:33:67:f7:37:b2:99:47:
                    ee:f3:72:47:96:e9:21:cc:b3:17:00:dc:02:bd:59:
                    ec:28:89:1f:be:6b:34:2c:30:06:57:84:af:cb:c5:
                    a3:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:EC:73:FE:73:BF:A1:2B:F9:8C:65:1F:39:A5:6A:8C:FD:CA:16:F4
            X509v3 Authority Key Identifier:
                keyid:7B:35:83:4A:47:04:C7:ED:85:D6:22:12:FC:62:C4:6F:A5:A0:66:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a363030303a3a2f33362d3336203d3e20313337333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:7ac0:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         1e:57:a8:17:57:3a:6d:bf:c9:1b:6a:fb:44:92:00:7b:a0:48:
         7a:f5:0c:72:db:d1:d9:78:c6:12:06:b9:58:f9:5d:28:0e:3c:
         ba:ef:f7:08:b8:a0:36:20:be:c9:2d:78:dd:f9:0a:01:78:c8:
         c0:ec:98:d0:fe:63:93:51:82:c8:94:a5:a9:6f:c3:61:d4:1c:
         40:dd:4a:58:6d:3e:f9:0e:07:b8:4b:0d:5a:a6:72:18:6e:33:
         fd:b1:bd:1a:0a:b6:a6:1a:88:e7:ee:ee:cd:6b:b3:c6:37:20:
         d2:c6:23:a4:33:38:a1:51:8b:fc:8c:7e:79:f5:36:d3:98:e9:
         9e:33:73:5e:08:5c:99:a6:c1:a5:b8:df:87:c5:cd:d8:6c:3d:
         68:c0:57:55:30:dc:ca:54:d8:be:48:23:df:e7:6a:7b:bc:7e:
         a6:46:61:ba:50:28:19:34:42:97:da:d1:a9:d9:72:4d:38:66:
         0e:36:6a:5f:c4:7c:ee:03:0d:00:cb:24:5a:25:af:b1:cd:6e:
         d4:33:1c:2d:e1:d5:58:f1:d3:f8:5a:13:80:d1:b0:61:05:61:
         fa:71:f4:ff:d2:e0:6c:73:2e:fb:74:73:3b:4c:e2:fd:83:c6:
         67:4b:df:3d:2d:83:5a:51:7c:75:af:db:86:fe:0e:d4:db:fb:
         3b:84:c1:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:03:25 2025 by rpki-client