Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/3130332e3134352e33342e302f32332d3234203d3e20313339343439.roa
File:                     3130332e3134352e33342e302f32332d3234203d3e20313339343439.roa (raw, json)
Hash identifier:          LHa8Gk6p3lZ7S7/Rp7IyQ5LobLYaYL270fNDeWRq1/Y=
Subject key identifier:   FF:74:2A:D0:40:13:A7:61:D2:6E:4C:E8:BC:20:98:72:A3:EF:83:16
Certificate issuer:       /CN=D681DB990E904642A480AE9546646329FF5D0162
Certificate serial:       6DE5126F51CBDA6FA8927C6A90623ABFDDA6ED32
Authority key identifier: D6:81:DB:99:0E:90:46:42:A4:80:AE:95:46:64:63:29:FF:5D:01:62
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D681DB990E904642A480AE9546646329FF5D0162.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/3130332e3134352e33342e302f32332d3234203d3e20313339343439.roa
Signing time:             Thu 12 Dec 2024 08:01:35 +0000
ROA not before:           Thu 12 Dec 2024 07:56:35 +0000
ROA not after:            Thu 11 Dec 2025 08:01:35 +0000
asID:                     139449
IP address blocks:        103.145.34.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:e5:12:6f:51:cb:da:6f:a8:92:7c:6a:90:62:3a:bf:dd:a6:ed:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D681DB990E904642A480AE9546646329FF5D0162
        Validity
            Not Before: Dec 12 07:56:35 2024 GMT
            Not After : Dec 11 08:01:35 2025 GMT
        Subject: CN=FF742AD04013A761D26E4CE8BC209872A3EF8316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a0:0e:22:12:3c:26:14:d4:9e:9f:89:37:5b:
                    96:4a:f7:da:ea:35:5d:01:e3:91:c2:f3:03:06:d9:
                    4a:da:0d:a8:20:ec:56:bb:04:e9:02:b8:f3:7a:9c:
                    b0:c7:af:ba:a6:90:b8:32:18:d3:97:65:7b:b1:b2:
                    fe:04:2d:b3:97:00:3d:e7:2b:3d:87:54:7d:eb:cc:
                    91:26:ff:9e:f9:a1:ca:82:b8:1f:dd:22:21:83:ac:
                    ae:7f:f0:05:c4:ae:32:47:93:cb:19:a8:ef:8b:84:
                    a9:2b:65:d6:37:fb:7a:eb:69:5e:51:48:e7:1b:f6:
                    02:ac:55:00:b7:1a:41:06:41:9f:d2:50:41:63:4d:
                    f7:56:1d:37:ea:4e:e4:d1:6e:63:9f:a7:2b:4f:6c:
                    43:54:8e:e9:71:6c:51:c0:85:e0:fa:7e:33:52:6d:
                    d5:31:04:4e:8e:30:d4:65:7e:24:fc:36:56:41:2a:
                    89:26:f2:b2:8f:9b:42:d0:26:0b:87:91:9f:57:be:
                    64:48:c7:91:09:5b:6e:9b:78:a5:ab:bb:df:38:93:
                    6c:8c:fb:7d:5e:2d:bc:b7:7d:ff:28:27:18:74:2a:
                    c2:a2:96:01:f5:09:c0:34:da:05:8c:4b:b0:f7:31:
                    a1:4e:91:0a:a9:85:c0:be:aa:32:f8:9a:bf:b5:76:
                    d3:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:74:2A:D0:40:13:A7:61:D2:6E:4C:E8:BC:20:98:72:A3:EF:83:16
            X509v3 Authority Key Identifier:
                keyid:D6:81:DB:99:0E:90:46:42:A4:80:AE:95:46:64:63:29:FF:5D:01:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/D681DB990E904642A480AE9546646329FF5D0162.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D681DB990E904642A480AE9546646329FF5D0162.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/3130332e3134352e33342e302f32332d3234203d3e20313339343439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.145.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4e:e8:17:7c:a3:d9:60:fc:9e:d6:73:0f:6b:d4:6a:ec:36:d1:
         17:a4:5c:49:c4:f1:17:39:02:0f:95:4a:5d:28:a7:f1:1b:df:
         cb:34:0d:15:88:70:98:af:ac:ad:17:cc:cf:bd:b1:59:57:93:
         4e:7c:80:34:ab:7d:87:f1:06:6c:a8:78:55:9d:f0:85:87:bc:
         87:2a:e6:6e:8b:61:89:c9:fe:e2:0b:30:47:62:ab:54:8e:76:
         4b:71:e5:63:6b:c7:0d:d7:f6:37:8c:35:ae:5b:88:5d:0f:8d:
         18:b8:fa:2a:03:71:c7:3f:be:df:6c:9a:fa:04:e9:ce:16:8a:
         6f:23:62:cc:20:e4:ba:57:5b:36:da:0e:fd:fd:9e:76:fd:44:
         17:82:1c:cf:4f:d5:7e:12:9f:b3:e4:3c:86:72:ed:e5:e4:d2:
         cf:fd:fb:ab:40:aa:27:e9:4b:ba:3f:5d:4c:d7:4a:c1:90:64:
         b9:bb:fa:41:4d:b2:5e:15:d1:63:fc:3f:67:fb:fd:11:9d:6d:
         3d:cc:05:e5:53:dd:f8:6d:2f:6c:62:98:62:ff:ec:2d:90:34:
         d3:05:c6:db:a1:aa:c2:5e:94:55:e6:af:58:d1:84:12:bb:e3:
         7b:0e:a6:22:83:37:de:96:20:07:b2:82:90:02:8f:13:11:68:
         04:94:e3:6d
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUbeUSb1HL2m+oknxqkGI6v92m7TIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDY4MURCOTkwRTkwNDY0MkE0ODBBRTk1NDY2NDYzMjlG
RjVEMDE2MjAeFw0yNDEyMTIwNzU2MzVaFw0yNTEyMTEwODAxMzVaMDMxMTAvBgNV
BAMTKEZGNzQyQUQwNDAxM0E3NjFEMjZFNENFOEJDMjA5ODcyQTNFRjgzMTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdoA4iEjwmFNSen4k3W5ZK99rq
NV0B45HC8wMG2UraDagg7Fa7BOkCuPN6nLDHr7qmkLgyGNOXZXuxsv4ELbOXAD3n
Kz2HVH3rzJEm/575ocqCuB/dIiGDrK5/8AXErjJHk8sZqO+LhKkrZdY3+3rraV5R
SOcb9gKsVQC3GkEGQZ/SUEFjTfdWHTfqTuTRbmOfpytPbENUjulxbFHAheD6fjNS
bdUxBE6OMNRlfiT8NlZBKokm8rKPm0LQJguHkZ9XvmRIx5EJW26beKWru984k2yM
+31eLby3ff8oJxh0KsKilgH1CcA02gWMS7D3MaFOkQqphcC+qjL4mr+1dtM9AgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU/3Qq0EATp2HSbkzovCCYcqPvgxYwHwYDVR0j
BBgwFoAU1oHbmQ6QRkKkgK6VRmRjKf9dAWIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
OWZiZTA4OC0wZDg0LTQ3ODktYjQwNS0yNWMyZTc2OTM3ZjYvMC9ENjgxREI5OTBF
OTA0NjQyQTQ4MEFFOTU0NjY0NjMyOUZGNUQwMTYyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRDY4MURCOTkwRTkwNDY0MkE0ODBBRTk1NDY2NDYzMjlGRjVE
MDE2Mi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc5ZmJlMDg4LTBkODQtNDc4OS1i
NDA1LTI1YzJlNzY5MzdmNi8wLzMxMzAzMzJlMzEzNDM1MmUzMzM0MmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzEzMzM5MzQzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ5EiMA0GCSqG
SIb3DQEBCwUAA4IBAQBO6Bd8o9lg/J7Wcw9r1GrsNtEXpFxJxPEXOQIPlUpdKKfx
G9/LNA0ViHCYr6ytF8zPvbFZV5NOfIA0q32H8QZsqHhVnfCFh7yHKuZui2GJyf7i
CzBHYqtUjnZLceVja8cN1/Y3jDWuW4hdD40YuPoqA3HHP77fbJr6BOnOFopvI2LM
IOS6V1s22g79/Z52/UQXghzPT9V+Ep+z5DyGcu3l5NLP/furQKon6Uu6P11M10rB
kGS5u/pBTbJeFdFj/D9n+/0RnW09zAXlU934bS9sYphi/+wtkDTTBcbboarCXpRV
5q9Y0YQSu+N7DqYigzfeliAHsoKQAo8TEWgElONt
-----END CERTIFICATE-----
Generated at Sun Apr 6 14:10:31 2025 by rpki-client