Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/_LNp64IdENFYYx37TJWyF9uMx1o.roa
File:                     _LNp64IdENFYYx37TJWyF9uMx1o.roa (raw, json)
Hash identifier:          e89OQMGFOgKoXoZclcr6r9ITDIfD+BJqzQ9u2NEmKMo=
Subject key identifier:   FC:B3:69:EB:82:1D:10:D1:58:63:1D:FB:4C:95:B2:17:DB:8C:C7:5A
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       43
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/_LNp64IdENFYYx37TJWyF9uMx1o.roa
Signing time:             Tue 11 Oct 2022 09:38:11 +0000
ROA not before:           Tue 11 Oct 2022 09:38:11 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     2516
IP address blocks:        210.166.128.0/18 maxlen: 18

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 67 (0x43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct 11 09:38:11 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=FCB369EB821D10D158631DFB4C95B217DB8CC75A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1e:2a:ce:14:49:07:9b:09:39:22:21:3f:42:
                    51:e5:d1:22:56:73:3c:8e:26:e4:15:20:28:3e:22:
                    f0:29:0c:f7:63:73:50:90:23:64:dd:2f:ac:a7:7b:
                    af:49:4a:36:8b:31:55:01:76:16:80:eb:c6:90:72:
                    f7:c5:fd:c0:33:a6:05:7a:72:f8:5e:3b:53:1b:9f:
                    39:b8:57:5a:ed:4b:c2:ac:cf:06:14:8d:a0:07:98:
                    87:31:22:69:a5:5e:40:5d:10:fe:ba:28:f8:4c:b5:
                    8c:bb:95:ef:9e:eb:d9:49:4f:6f:57:5c:fd:e2:53:
                    de:77:eb:46:82:9a:3e:2a:2e:f4:d1:8e:31:6e:2e:
                    0c:65:fa:a5:50:52:49:1f:d1:1c:84:33:e7:24:2c:
                    ad:29:3a:81:e2:01:96:f2:c9:8a:11:92:fb:fc:13:
                    8e:1d:62:f1:ab:30:16:0d:8f:bb:ec:df:e4:f9:07:
                    62:af:65:84:a5:92:70:a5:6a:f9:f2:aa:63:c0:64:
                    cd:ce:1b:f2:23:c7:63:10:b3:46:d2:53:2c:71:d3:
                    80:0b:11:b4:08:49:57:66:f3:f9:13:cc:85:17:04:
                    2d:4a:57:78:d7:af:3b:33:64:31:ae:58:26:6d:c8:
                    9b:5b:3b:dc:9c:c1:27:bf:14:81:2b:dd:31:c4:97:
                    08:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:B3:69:EB:82:1D:10:D1:58:63:1D:FB:4C:95:B2:17:DB:8C:C7:5A
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/_LNp64IdENFYYx37TJWyF9uMx1o.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.166.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         8c:9f:56:54:db:24:85:d7:2b:a1:d5:9b:e8:7f:97:98:40:6a:
         73:6b:20:bf:41:a6:9b:fd:41:31:c7:a9:7e:05:1e:20:3a:58:
         29:6d:0d:98:21:c6:e1:ae:0c:d6:1f:d4:ce:9a:8d:06:63:80:
         f7:9f:ff:56:9d:5b:a9:51:ae:72:11:b1:33:5f:0b:cd:1f:a6:
         7e:02:3c:11:15:43:92:17:d9:f3:4d:57:6e:3c:93:dd:cd:e8:
         4d:50:3c:9a:a8:ba:5d:a5:3c:ab:ec:26:42:e3:e9:54:72:6c:
         bf:2e:c7:27:73:91:1a:29:35:26:cf:ef:35:ed:e0:90:00:d9:
         ff:86:0f:3a:18:72:01:2b:75:5c:63:8e:6e:af:79:41:75:1e:
         ad:ff:bf:c9:13:92:ea:a4:99:60:11:9d:92:8e:0c:aa:98:13:
         39:f3:96:71:e5:e3:50:ed:bb:0f:e3:0a:0f:96:df:02:52:30:
         b9:36:7c:55:37:10:b0:57:50:74:ee:71:ae:ae:ba:8d:a9:f8:
         5b:df:21:3e:2f:41:bd:2e:67:87:ed:b9:33:69:0d:92:da:97:
         5b:46:4c:17:8a:f0:f0:db:e5:32:cc:06:db:b2:93:e8:d4:9f:
         38:c6:e5:66:62:34:87:1d:37:c0:91:40:1f:b9:f2:4f:40:8a:
         04:fa:15:68
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBQzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDNzYx
QTNBOUZBRTg3RjhGMDY5RDY4MjQ3MUNCRTFDOTM1RkJFMzIxMB4XDTIyMTAxMTA5
MzgxMVoXDTIzMDkxNTAxMzAwM1owMzExMC8GA1UEAxMoRkNCMzY5RUI4MjFEMTBE
MTU4NjMxREZCNEM5NUIyMTdEQjhDQzc1QTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALUeKs4USQebCTkiIT9CUeXRIlZzPI4m5BUgKD4i8CkM92NzUJAj
ZN0vrKd7r0lKNosxVQF2FoDrxpBy98X9wDOmBXpy+F47UxufObhXWu1LwqzPBhSN
oAeYhzEiaaVeQF0Q/roo+Ey1jLuV757r2UlPb1dc/eJT3nfrRoKaPiou9NGOMW4u
DGX6pVBSSR/RHIQz5yQsrSk6geIBlvLJihGS+/wTjh1i8aswFg2Pu+zf5PkHYq9l
hKWScKVq+fKqY8Bkzc4b8iPHYxCzRtJTLHHTgAsRtAhJV2bz+RPMhRcELUpXeNev
OzNkMa5YJm3Im1s73JzBJ78UgSvdMcSXCKcCAwEAAaOCAigwggIkMB0GA1UdDgQW
BBT8s2nrgh0Q0VhjHftMlbIX24zHWjAfBgNVHSMEGDAWgBTHYaOp+uh/jwadaCRx
y+HJNfvjITAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTMzNDcveDJHanFmcm9mNDhHbldna2Njdmh5VFg3NHlFLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAveDJHanFmcm9mNDhHbldna2Njdmh5
VFg3NHlFLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzEzMzQ3L19MTnA2NElkRU5GWVl4MzdUSld5Rjl1TXgxby5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAbSpoAwDQYJKoZIhvcNAQELBQADggEBAIyfVlTbJIXXK6HVm+h/l5hA
anNrIL9Bppv9QTHHqX4FHiA6WCltDZghxuGuDNYf1M6ajQZjgPef/1adW6lRrnIR
sTNfC80fpn4CPBEVQ5IX2fNNV248k93N6E1QPJqoul2lPKvsJkLj6VRybL8uxydz
kRopNSbP7zXt4JAA2f+GDzoYcgErdVxjjm6veUF1Hq3/v8kTkuqkmWARnZKODKqY
EznzlnHl41Dtuw/jCg+W3wJSMLk2fFU3ELBXUHTuca6uuo2p+FvfIT4vQb0uZ4ft
uTNpDZLal1tGTBeK8PDb5TLMBtuyk+jUnzjG5WZiNIcdN8CRQB+58k9AigT6FWg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:33 2024 by rpki-client on console-ams.rpki-client.org