Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/3130332e3137372e39332e302f32342d3234203d3e20313437313435.roa
File:                     3130332e3137372e39332e302f32342d3234203d3e20313437313435.roa (raw, json)
Hash identifier:          v7MhMAJXwywfKNpvZVGmK8aNTXn4lXBf1MXFy8E2vnM=
Subject key identifier:   FB:4E:9D:74:89:08:22:14:6D:B6:12:B6:D1:B7:02:C5:95:F6:32:CC
Certificate issuer:       /CN=0D05EF7BA71D640B784F72C7D8F0F4DCD285029E
Certificate serial:       3CE08D0511A7BEDC1175D549C8DB53B5D066A353
Authority key identifier: 0D:05:EF:7B:A7:1D:64:0B:78:4F:72:C7:D8:F0:F4:DC:D2:85:02:9E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/3130332e3137372e39332e302f32342d3234203d3e20313437313435.roa
Signing time:             Tue 03 Dec 2024 20:00:01 +0000
ROA not before:           Tue 03 Dec 2024 19:55:01 +0000
ROA not after:            Tue 02 Dec 2025 20:00:01 +0000
asID:                     147145
IP address blocks:        103.177.93.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:e0:8d:05:11:a7:be:dc:11:75:d5:49:c8:db:53:b5:d0:66:a3:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D05EF7BA71D640B784F72C7D8F0F4DCD285029E
        Validity
            Not Before: Dec  3 19:55:01 2024 GMT
            Not After : Dec  2 20:00:01 2025 GMT
        Subject: CN=FB4E9D74890822146DB612B6D1B702C595F632CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:be:37:15:55:64:bb:1d:26:b0:95:04:a2:69:
                    d9:fd:84:65:cb:5e:37:a0:29:cc:b0:11:a7:90:08:
                    9a:92:5d:c5:b2:73:16:35:45:6b:76:6e:83:b4:59:
                    3f:b5:ba:7b:e2:87:be:ca:d7:76:73:56:ed:1b:fe:
                    4c:52:36:1f:99:a0:16:8a:a8:e8:d7:cc:66:b9:5e:
                    67:77:0d:2d:39:6e:d2:8c:d9:fb:77:17:10:28:3c:
                    20:e1:73:cf:40:cf:a3:b8:14:42:a3:8a:e4:07:af:
                    d6:ca:00:5b:8c:75:86:4c:f8:8c:f5:f9:84:3d:0f:
                    37:56:08:b3:e9:71:70:5f:1b:72:75:a2:57:d7:44:
                    13:64:94:b2:97:c3:81:b6:d9:f9:6a:73:cb:37:a3:
                    6d:c2:81:b2:c6:a0:10:0e:e7:58:d6:97:db:cc:ae:
                    0f:86:73:b7:72:96:9c:e5:34:3b:d0:8d:a0:92:44:
                    16:36:21:37:9d:b2:9f:96:8f:f9:11:9b:97:f3:dd:
                    20:e7:d3:5a:19:4a:65:0a:1b:1d:5b:52:00:8d:f9:
                    f7:3f:4f:a8:d1:61:3c:c7:f1:a4:6f:39:79:98:47:
                    95:ce:34:6d:5c:d3:52:fe:11:c6:a7:5a:f8:71:b6:
                    d0:97:94:e0:98:2b:e3:0a:0f:31:a7:f3:22:e3:44:
                    af:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:4E:9D:74:89:08:22:14:6D:B6:12:B6:D1:B7:02:C5:95:F6:32:CC
            X509v3 Authority Key Identifier:
                keyid:0D:05:EF:7B:A7:1D:64:0B:78:4F:72:C7:D8:F0:F4:DC:D2:85:02:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/3130332e3137372e39332e302f32342d3234203d3e20313437313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:aa:d5:63:9d:12:50:f8:9d:17:64:26:6f:bd:08:31:44:76:
         7b:22:87:a7:01:c2:06:80:45:a9:c4:bb:95:44:66:82:75:38:
         cd:e6:ff:0b:31:0b:df:99:42:33:73:70:e5:ff:f1:71:1c:bf:
         93:c5:e4:30:14:32:a5:99:05:30:1f:17:c0:81:88:64:18:76:
         6c:39:69:a4:bb:43:4c:28:1a:d0:52:3a:20:0c:9b:1e:ff:f5:
         bd:4d:3b:ef:ac:5c:57:a0:ba:fc:ea:d4:9d:a4:d2:88:83:81:
         8c:8f:8c:a0:85:74:63:f6:b6:d1:95:d1:d8:51:b6:47:a7:47:
         42:ef:79:a0:cf:86:87:0e:7f:a3:46:72:df:ec:09:c7:94:25:
         f7:3e:a2:fe:56:e4:18:b3:5c:ce:da:a3:21:a7:e1:47:1c:51:
         5f:54:98:ec:d4:52:69:5d:bc:7d:96:f6:69:4b:42:76:d6:82:
         16:2f:82:7d:72:0c:69:53:c6:04:07:f9:10:de:40:55:a7:91:
         7e:2f:3d:0a:a4:49:bb:63:d9:1c:69:d7:1c:d8:33:02:78:26:
         08:97:e4:c3:9b:12:38:6c:3b:2e:dc:60:77:bd:db:13:20:89:
         18:bf:fb:c7:67:f1:28:5e:5a:a9:94:e0:33:17:45:32:4b:39:
         30:12:e2:90
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUPOCNBRGnvtwRddVJyNtTtdBmo1MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEQwNUVGN0JBNzFENjQwQjc4NEY3MkM3RDhGMEY0RENE
Mjg1MDI5RTAeFw0yNDEyMDMxOTU1MDFaFw0yNTEyMDIyMDAwMDFaMDMxMTAvBgNV
BAMTKEZCNEU5RDc0ODkwODIyMTQ2REI2MTJCNkQxQjcwMkM1OTVGNjMyQ0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChvjcVVWS7HSawlQSiadn9hGXL
XjegKcywEaeQCJqSXcWycxY1RWt2boO0WT+1unvih77K13ZzVu0b/kxSNh+ZoBaK
qOjXzGa5Xmd3DS05btKM2ft3FxAoPCDhc89Az6O4FEKjiuQHr9bKAFuMdYZM+Iz1
+YQ9DzdWCLPpcXBfG3J1olfXRBNklLKXw4G22flqc8s3o23CgbLGoBAO51jWl9vM
rg+Gc7dylpzlNDvQjaCSRBY2ITedsp+Wj/kRm5fz3SDn01oZSmUKGx1bUgCN+fc/
T6jRYTzH8aRvOXmYR5XONG1c01L+EcanWvhxttCXlOCYK+MKDzGn8yLjRK+RAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU+06ddIkIIhRtthK20bcCxZX2MswwHwYDVR0j
BBgwFoAUDQXve6cdZAt4T3LH2PD03NKFAp4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
OWI4NjA0Zi0zOTVhLTQyYmUtYjk5Ny1lODBmYzFkZjkwZjkvMC8wRDA1RUY3QkE3
MUQ2NDBCNzg0RjcyQzdEOEYwRjREQ0QyODUwMjlFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMEQwNUVGN0JBNzFENjQwQjc4NEY3MkM3RDhGMEY0RENEMjg1
MDI5RS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg5Yjg2MDRmLTM5NWEtNDJiZS1i
OTk3LWU4MGZjMWRmOTBmOS8wLzMxMzAzMzJlMzEzNzM3MmUzOTMzMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNDM3MzEzNDM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ7FdMA0GCSqG
SIb3DQEBCwUAA4IBAQCTqtVjnRJQ+J0XZCZvvQgxRHZ7IoenAcIGgEWpxLuVRGaC
dTjN5v8LMQvfmUIzc3Dl//FxHL+TxeQwFDKlmQUwHxfAgYhkGHZsOWmku0NMKBrQ
UjogDJse//W9TTvvrFxXoLr86tSdpNKIg4GMj4yghXRj9rbRldHYUbZHp0dC73mg
z4aHDn+jRnLf7AnHlCX3PqL+VuQYs1zO2qMhp+FHHFFfVJjs1FJpXbx9lvZpS0J2
1oIWL4J9cgxpU8YEB/kQ3kBVp5F+Lz0KpEm7Y9kcadcc2DMCeCYIl+TDmxI4bDsu
3GB3vdsTIIkYv/vHZ/EoXlqplOAzF0UySzkwEuKQ
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:48:53 2025 by rpki-client