Route Origin Authorization

$ rpki-client -vvf rov-measurements.nlnetlabs.net/repo/rov-measurements/0/3230332e3131392e32322e302f32332d3233203d3e2030.roa
File:                     3230332e3131392e32322e302f32332d3233203d3e2030.roa (raw, json)
Hash identifier:          OHg6NBzRur7UcOdVMCX+K9Yp4N0o2H0d4PAeTHhz/ZY=
Subject key identifier:   00:F8:8F:A8:BE:31:0F:A9:BE:D5:83:3E:45:33:11:41:A4:90:E8:4E
Certificate issuer:       /CN=A91DA6130000/serialNumber=A8ED7B87DB2755716942AF35716AA89A6293E82E
Certificate serial:       12BC94477A6A5E66B8737BABC4C61F34577346E1
Authority key identifier: A8:ED:7B:87:DB:27:55:71:69:42:AF:35:71:6A:A8:9A:62:93:E8:2E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qO17h9snVXFpQq81cWqommKT6C4.cer
Subject info access:      rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/0/3230332e3131392e32322e302f32332d3233203d3e2030.roa
Signing time:             Mon 09 Jan 2023 14:53:38 +0000
ROA not before:           Mon 09 Jan 2023 14:48:38 +0000
ROA not after:            Mon 08 Jan 2024 14:53:38 +0000
asID:                     0
IP address blocks:        203.119.22.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:bc:94:47:7a:6a:5e:66:b8:73:7b:ab:c4:c6:1f:34:57:73:46:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DA6130000/serialNumber=A8ED7B87DB2755716942AF35716AA89A6293E82E
        Validity
            Not Before: Jan  9 14:48:38 2023 GMT
            Not After : Jan  8 14:53:38 2024 GMT
        Subject: CN=00F88FA8BE310FA9BED5833E45331141A490E84E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:56:18:ab:cc:69:72:8b:66:df:0a:55:b3:0b:
                    16:8b:e3:ff:34:22:f9:46:40:e3:24:44:6a:a1:ed:
                    a9:54:21:f4:47:8d:87:c7:ab:c8:60:63:37:69:60:
                    4c:35:98:8d:87:49:fd:25:52:d7:44:ca:60:36:aa:
                    ca:c4:1b:9d:36:52:ee:f3:c7:a1:22:bf:85:23:37:
                    ec:6a:35:8e:31:5c:4a:70:bb:81:ec:6b:3f:10:80:
                    85:dd:7c:61:57:e3:4a:9a:6a:5e:75:dd:2b:80:de:
                    57:4c:70:08:98:8f:3b:cc:8f:f3:2f:6f:0f:54:9d:
                    c0:df:f3:0a:51:5e:ee:4f:6a:fa:e3:a2:8d:6b:a7:
                    de:e7:f4:9f:7f:a3:be:fe:42:43:54:39:78:29:df:
                    82:d8:fb:a5:93:c5:68:8f:16:ab:b4:d4:98:ae:93:
                    a1:25:de:ca:7f:6c:9c:99:72:36:9a:6b:96:c2:fd:
                    5a:1b:a6:3b:b6:6c:27:a7:39:e5:13:e0:be:25:d2:
                    f0:18:2c:c9:13:e1:6a:a9:34:8c:24:3c:99:07:fb:
                    3f:e0:49:d6:18:77:07:db:c9:38:31:9f:98:20:a6:
                    81:72:57:66:95:8d:81:96:a5:f3:27:f5:64:14:c1:
                    ec:cc:01:e8:a3:a9:0b:c9:45:41:46:12:0b:3a:1a:
                    71:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:F8:8F:A8:BE:31:0F:A9:BE:D5:83:3E:45:33:11:41:A4:90:E8:4E
            X509v3 Authority Key Identifier:
                keyid:A8:ED:7B:87:DB:27:55:71:69:42:AF:35:71:6A:A8:9A:62:93:E8:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/0/A8ED7B87DB2755716942AF35716AA89A6293E82E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qO17h9snVXFpQq81cWqommKT6C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/0/3230332e3131392e32322e302f32332d3233203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.119.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7b:7b:4f:f3:f0:63:59:0e:5c:9b:f3:ed:aa:b5:ba:54:73:cc:
         8b:26:42:88:9c:b8:53:87:2e:86:f2:c4:10:09:ab:b0:b7:5c:
         53:d4:1b:7f:61:ec:b2:93:3e:dd:bd:6e:b4:bf:0f:58:48:0f:
         16:80:0a:5a:ea:eb:59:2c:75:a9:03:87:27:2c:cf:47:01:b6:
         38:67:52:98:85:f6:b9:c7:0e:1b:d7:04:8e:7b:1c:b1:b1:31:
         3a:71:81:27:cd:e5:fb:92:f8:ba:bd:e3:fa:b8:4f:27:3a:e2:
         c6:5e:da:f6:af:2e:12:59:de:8a:b5:d4:2d:4e:56:c9:99:3c:
         d5:ee:ea:06:d4:c8:b7:cf:e3:2e:b1:b5:56:85:69:a2:30:77:
         f0:1a:97:14:3f:62:db:8a:06:f8:3e:a2:7d:38:0b:a3:eb:c9:
         f8:5f:e0:3e:50:32:d9:5b:7d:97:2e:be:bf:9e:ee:9d:41:5c:
         ee:e7:2e:4d:be:ad:71:88:42:df:5a:93:3b:c2:a6:1d:d8:e3:
         4c:03:a2:8a:12:c8:8e:4a:61:a5:5f:05:ce:61:53:1a:34:b8:
         3b:eb:32:d6:af:61:d0:4e:9e:ce:b2:58:10:3d:d0:fb:6d:e3:
         08:f3:d9:8a:f3:a0:20:3c:5e:b8:86:36:84:32:b7:15:76:e5:
         a4:39:6f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:16 2024 by rpki-client on console-fra.rpki-client.org