Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/vf_bDBzZ_NZU9G2C07euO6lgIII.roa
File:                     vf_bDBzZ_NZU9G2C07euO6lgIII.roa (raw, json)
Hash identifier:          WshOUR/KJbh+mMNoGQk7dkACqZqHie+PsbiBVZjvahg=
Subject key identifier:   BD:FF:DB:0C:1C:D9:FC:D6:54:F4:6D:82:D3:B7:AE:3B:A9:60:20:82
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       1D
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/vf_bDBzZ_NZU9G2C07euO6lgIII.roa
Signing time:             Tue 11 Oct 2022 09:28:16 +0000
ROA not before:           Tue 11 Oct 2022 09:28:16 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     2516
IP address blocks:        210.224.135.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29 (0x1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct 11 09:28:16 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=BDFFDB0C1CD9FCD654F46D82D3B7AE3BA9602082
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:77:06:21:18:9d:59:40:f8:5a:73:2c:a1:6a:
                    0c:6c:1a:fe:89:9f:0b:03:16:da:9a:cb:3e:eb:70:
                    86:a2:7d:43:90:aa:39:38:f1:2a:0b:f0:b6:1f:1e:
                    51:f2:02:66:83:29:c4:fa:1b:4e:c4:ee:ce:02:b4:
                    8e:4d:0e:97:fc:67:be:17:03:b1:d5:df:0e:ad:43:
                    3b:e8:cf:e1:5e:38:10:37:94:d0:8e:90:c7:ec:9d:
                    6d:d0:53:8d:47:ee:4a:6e:a4:f7:16:01:0d:58:c5:
                    bd:69:8a:bb:63:33:a5:58:0b:6c:61:91:57:08:e3:
                    3f:02:16:65:50:e3:1c:77:2a:c7:03:a8:18:a5:42:
                    78:1a:e1:01:47:14:00:66:49:da:84:59:cb:2e:bd:
                    14:66:7b:da:cd:af:c9:a4:3c:a2:9a:b4:12:b1:2a:
                    d4:67:60:c0:f3:f6:2e:d7:7c:83:12:45:3f:d9:30:
                    79:8d:df:8e:70:1a:e6:e3:ef:6e:f6:8e:31:71:f3:
                    42:a2:28:08:9b:d8:f8:e8:af:5a:d1:9f:b3:00:14:
                    14:ab:9b:92:df:b4:ad:7f:8b:bd:d4:34:14:a7:7c:
                    8c:2f:ed:9f:96:3e:1a:6c:7d:f4:3c:30:f1:97:6f:
                    c6:e0:ac:42:ef:f7:6d:46:c3:d8:e8:93:13:6c:e5:
                    46:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:FF:DB:0C:1C:D9:FC:D6:54:F4:6D:82:D3:B7:AE:3B:A9:60:20:82
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/vf_bDBzZ_NZU9G2C07euO6lgIII.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.224.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:07:3c:6b:19:b9:08:cf:b3:36:08:6d:e6:fe:ed:e6:3e:9f:
         6a:b3:1b:f9:9c:41:0f:dc:ab:c7:72:14:e7:c2:67:8e:a1:aa:
         6a:5f:b5:e9:fe:db:c4:fa:28:ee:a7:05:5b:f8:a1:27:ec:94:
         ed:0a:4e:55:a8:0e:45:20:19:58:f7:e3:4c:32:04:db:e0:fa:
         e9:3b:b3:af:9b:02:57:35:e7:d5:9c:2d:6b:ea:a5:c2:23:6b:
         0f:29:a0:db:b3:b5:71:11:c6:ca:a9:7b:47:64:63:bd:06:50:
         2c:ce:bf:2e:3d:1d:c2:d2:94:ec:9c:49:dc:34:35:59:9b:b4:
         2c:a3:55:55:1f:8b:36:bc:1e:eb:78:74:6d:23:ca:21:c7:0f:
         53:92:9f:44:81:0d:a7:f8:e3:88:db:09:93:a5:82:c1:54:a8:
         c8:83:b0:16:f7:b9:63:a1:99:45:12:6b:2f:37:cd:e2:70:5f:
         55:db:52:31:28:bb:22:3d:a1:5d:52:a3:bf:48:99:93:01:73:
         7a:da:b4:f1:4b:78:7b:e1:77:36:3d:39:92:13:d7:1e:4b:dc:
         d9:a9:6c:99:76:90:2d:2c:75:a9:eb:81:ef:24:09:be:0b:21:
         98:4d:1b:07:e3:03:90:ec:5c:27:58:01:30:e5:7f:7a:9d:7c:
         c2:81:ee:c9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:37 2024 by rpki-client on console-ams.rpki-client.org