Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/77742516-b459-4506-b4de-f69e193d5cde/0/3130332e3235352e3136322e302f32332d3234203d3e20313532303137.roa
File:                     3130332e3235352e3136322e302f32332d3234203d3e20313532303137.roa (raw, json)
Hash identifier:          jESiHsbZB8s+njMG6Qa+vwhGg9wfzpmRvCv4oVoRfKA=
Subject key identifier:   76:CB:66:2C:79:09:C2:EB:71:E3:4E:A1:51:29:BF:EB:9E:6F:49:86
Certificate issuer:       /CN=6ED97449A90175F41CA7139C43ABDB1DE992C510
Certificate serial:       7303C5A47A0E429A692C8F92616C9747880C9290
Authority key identifier: 6E:D9:74:49:A9:01:75:F4:1C:A7:13:9C:43:AB:DB:1D:E9:92:C5:10
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6ED97449A90175F41CA7139C43ABDB1DE992C510.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/77742516-b459-4506-b4de-f69e193d5cde/0/3130332e3235352e3136322e302f32332d3234203d3e20313532303137.roa
Signing time:             Thu 26 Dec 2024 05:00:00 +0000
ROA not before:           Thu 26 Dec 2024 04:55:00 +0000
ROA not after:            Thu 25 Dec 2025 05:00:00 +0000
asID:                     152017
IP address blocks:        103.255.162.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:03:c5:a4:7a:0e:42:9a:69:2c:8f:92:61:6c:97:47:88:0c:92:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ED97449A90175F41CA7139C43ABDB1DE992C510
        Validity
            Not Before: Dec 26 04:55:00 2024 GMT
            Not After : Dec 25 05:00:00 2025 GMT
        Subject: CN=76CB662C7909C2EB71E34EA15129BFEB9E6F4986
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:82:13:6c:62:ca:f0:96:6d:f5:99:34:ea:7a:
                    6f:14:b6:62:a2:39:63:39:00:3b:7b:fe:c0:8d:dd:
                    ec:40:5e:53:d4:1e:3a:c7:3a:09:d3:d8:4f:ef:7c:
                    4e:0d:6d:f8:2f:aa:de:1d:02:a8:e6:f0:c4:b4:c4:
                    50:a6:dc:c6:c2:8f:28:ea:e2:74:05:1e:bd:d1:a9:
                    96:d8:8b:9b:5f:be:b3:9c:2d:3b:07:2b:c5:49:8a:
                    bf:49:f4:62:e7:9a:da:38:ce:03:3a:15:72:c5:b7:
                    ce:84:e9:fb:8b:9e:64:c4:36:6d:4b:c8:2e:36:5c:
                    af:b6:1f:b9:7d:dd:2a:bb:44:e8:4b:84:7d:5e:46:
                    c0:2a:55:05:a9:81:36:69:6e:f8:43:a3:de:41:e7:
                    3c:e1:4c:79:14:d0:8a:4c:40:fb:0a:ce:e1:68:de:
                    dc:a0:7d:57:b4:f2:2a:83:7d:0c:b8:43:fc:a0:4c:
                    b8:1b:4a:1c:25:bb:d8:61:e1:2a:14:0d:5c:cc:7c:
                    07:0d:e3:fe:e6:71:9b:b6:a0:9a:54:0d:9f:17:86:
                    d9:57:29:84:03:45:0f:40:62:30:bf:44:a6:a6:7a:
                    f7:bc:b2:e5:b0:90:af:c8:12:8f:92:a4:50:b1:87:
                    c1:77:6c:bc:a5:99:f6:75:bb:cd:14:b9:1e:e2:c6:
                    53:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:CB:66:2C:79:09:C2:EB:71:E3:4E:A1:51:29:BF:EB:9E:6F:49:86
            X509v3 Authority Key Identifier:
                keyid:6E:D9:74:49:A9:01:75:F4:1C:A7:13:9C:43:AB:DB:1D:E9:92:C5:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/77742516-b459-4506-b4de-f69e193d5cde/0/6ED97449A90175F41CA7139C43ABDB1DE992C510.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6ED97449A90175F41CA7139C43ABDB1DE992C510.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/77742516-b459-4506-b4de-f69e193d5cde/0/3130332e3235352e3136322e302f32332d3234203d3e20313532303137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.255.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         27:ee:0e:f0:59:07:6b:0e:ad:9f:2e:37:42:12:a3:8b:48:18:
         57:f6:04:1f:21:c2:06:93:a5:77:62:45:45:b3:94:a6:95:ff:
         12:33:c3:e2:81:be:b5:ec:69:99:11:7a:de:b2:1e:f3:0c:6b:
         bb:bf:a0:96:a0:fe:7a:d7:f2:3d:0b:bc:de:c1:d2:63:65:5e:
         cc:e2:d2:79:ce:7b:52:3e:c7:c9:b7:3b:cc:6a:7b:31:8a:0c:
         38:98:08:a3:46:0d:37:af:86:93:0d:1e:71:32:3c:be:e2:df:
         29:09:56:f1:c2:2c:66:de:8d:a3:f4:aa:df:4c:5e:40:d3:51:
         9f:f9:1e:64:f0:71:87:ed:99:93:92:67:d2:91:9d:d0:96:0e:
         fd:26:1f:03:be:47:4b:1e:a7:a5:a7:2f:7a:ef:7a:7f:bc:92:
         4e:a2:42:2e:ba:94:74:7d:a2:c7:b8:be:9d:7f:7b:19:7f:af:
         b7:42:4f:06:da:b3:ea:3c:aa:de:e1:94:a8:ac:7b:b5:33:c6:
         f8:ad:ed:83:09:0d:d4:c4:c7:f2:a3:6b:37:38:f2:af:45:8e:
         42:0b:a9:79:7b:99:b4:2f:ad:30:d8:bc:a9:14:7f:54:11:63:
         5a:bc:98:59:45:09:75:ae:15:9a:bb:6b:d5:b9:56:11:a5:11:
         5e:32:08:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:36:24 2025 by rpki-client