Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3138322e32332e3136372e302f32342d3234203d3e203338343936.roa
File:                     3138322e32332e3136372e302f32342d3234203d3e203338343936.roa (raw, json)
Hash identifier:          6MW8SxjEoZdFfUxclQufWSlaZwmeFZkFI7MQlV1Aanc=
Subject key identifier:   82:11:FF:F5:40:41:82:8D:29:BD:D4:91:6E:68:CE:0F:40:CB:BF:FD
Certificate issuer:       /CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Certificate serial:       710B0E298E021628B98C03AF3B88C12588A682E3
Authority key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3138322e32332e3136372e302f32342d3234203d3e203338343936.roa
Signing time:             Mon 01 Jul 2024 01:05:35 +0000
ROA not before:           Mon 01 Jul 2024 01:00:35 +0000
ROA not after:            Mon 30 Jun 2025 01:05:35 +0000
asID:                     38496
IP address blocks:        182.23.167.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:0b:0e:29:8e:02:16:28:b9:8c:03:af:3b:88:c1:25:88:a6:82:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
        Validity
            Not Before: Jul  1 01:00:35 2024 GMT
            Not After : Jun 30 01:05:35 2025 GMT
        Subject: CN=8211FFF54041828D29BDD4916E68CE0F40CBBFFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:6f:68:bf:2a:8e:f3:d9:7a:f7:d0:e9:53:20:
                    11:e2:50:81:de:80:69:c4:5e:4c:90:11:ba:95:30:
                    ec:27:6b:ea:6c:65:73:6f:d6:80:2a:dd:c7:dd:5b:
                    bc:d9:2f:03:f2:ca:bf:1e:e5:8a:dd:08:e5:37:13:
                    b1:5e:44:2e:02:0e:71:28:5f:78:fa:67:05:58:b7:
                    2a:b2:45:0f:d7:27:f7:ac:3e:88:2b:5b:9a:f2:87:
                    16:8b:19:d4:82:b8:35:ff:dd:aa:a4:65:0e:d5:de:
                    42:2e:26:8d:5b:99:85:29:2c:d5:9c:ce:cb:2b:02:
                    22:de:f2:64:a9:9e:f6:da:f4:aa:da:e7:47:e4:10:
                    20:21:3e:49:81:5a:66:9d:41:1d:8c:aa:7e:15:02:
                    0e:dd:d7:7f:71:93:35:6b:18:ca:09:ac:20:7c:2a:
                    45:5f:7e:03:22:0a:89:e6:70:a0:de:96:a0:1e:cf:
                    08:76:67:70:a5:6a:e6:62:a3:44:cf:9a:8d:57:f1:
                    6a:5a:0a:04:75:15:e7:43:e8:59:c0:cc:2b:4b:db:
                    94:06:22:4b:03:1c:da:18:6b:48:bc:2b:2c:f5:ea:
                    d6:0c:7f:9a:04:09:2c:25:fd:7e:61:32:1a:e6:b9:
                    1c:b5:8c:49:fc:e0:a4:e9:d7:78:59:c4:96:34:f7:
                    27:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:11:FF:F5:40:41:82:8D:29:BD:D4:91:6E:68:CE:0F:40:CB:BF:FD
            X509v3 Authority Key Identifier:
                keyid:6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3138322e32332e3136372e302f32342d3234203d3e203338343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.23.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:4c:7c:24:7f:38:69:58:83:25:a1:0c:20:94:45:b7:77:e7:
         91:3c:e0:d9:28:f7:27:92:fc:77:76:10:e8:61:67:b8:37:49:
         1d:14:64:1a:8a:1c:2f:36:e0:8a:f6:8f:0e:5f:d5:e6:52:c6:
         f8:fc:bf:2e:a8:32:14:5f:79:46:eb:9c:69:34:02:81:35:0d:
         0d:98:01:ba:18:e0:9e:7c:dd:8d:4a:ad:78:29:e0:35:14:7b:
         ec:eb:d8:19:ea:7c:77:51:8e:bb:4b:b7:cd:33:b9:34:a6:9b:
         59:ec:b0:e6:c7:17:4b:f8:b6:c9:58:3b:1a:80:10:66:1f:19:
         13:c0:ad:39:ce:c6:d4:7a:86:86:e1:26:62:0a:8d:ff:4a:4b:
         09:59:47:2a:57:ff:7f:9b:95:39:ea:0c:04:f6:b9:1e:88:f4:
         ff:3d:74:1a:b4:c0:18:7a:c2:c3:a1:b9:b9:cc:5f:ab:bb:5d:
         d8:ec:4c:af:c9:f7:ab:b1:d6:ee:15:0a:94:8f:fc:13:fe:e8:
         d8:ea:84:bb:1e:0c:0f:f7:88:99:3c:b1:8c:72:7c:8e:b1:c3:
         c4:4e:12:c6:89:9c:a4:0a:74:0a:bf:75:ea:c7:9e:51:8e:64:
         7c:e3:27:50:a0:44:cd:51:a5:4d:ec:8d:c7:f2:d8:f8:40:24:
         81:58:e2:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 20:46:30 2025 by rpki-client