Route Origin Authorization

$ rpki-client -vvf rpki-rsync.mnihyc.com/repo/mnihyc/0/323630323a666564613a6262303a3a2f34342d3438203d3e20313430393338.roa
File:                     323630323a666564613a6262303a3a2f34342d3438203d3e20313430393338.roa (raw, json)
Hash identifier:          7iLG13WUMK+3brDINqE15F3CAUnKcRWT+p7l0iCkFcI=
Subject key identifier:   51:8D:5D:3E:EB:E4:1B:9B:B5:8E:B4:0E:F3:56:EB:B6:15:9F:C6:92
Certificate issuer:       /CN=368B4CE2B4E5ABE8639CDD6D75E538CA59521572
Certificate serial:       1CC88BCBC643D0D00AE11570AA30D03B20497CF7
Authority key identifier: 36:8B:4C:E2:B4:E5:AB:E8:63:9C:DD:6D:75:E5:38:CA:59:52:15:72
Authority info access:    rsync://sakuya.nat.moe/repo/NATOCA/0/368B4CE2B4E5ABE8639CDD6D75E538CA59521572.cer
Subject info access:      rsync://rpki-rsync.mnihyc.com/repo/mnihyc/0/323630323a666564613a6262303a3a2f34342d3438203d3e20313430393338.roa
Signing time:             Wed 07 Sep 2022 00:44:42 +0000
ROA not before:           Wed 07 Sep 2022 00:39:42 +0000
ROA not after:            Wed 06 Sep 2023 00:44:42 +0000
asID:                     140938
IP address blocks:        2602:feda:bb0::/44 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:c8:8b:cb:c6:43:d0:d0:0a:e1:15:70:aa:30:d0:3b:20:49:7c:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=368B4CE2B4E5ABE8639CDD6D75E538CA59521572
        Validity
            Not Before: Sep  7 00:39:42 2022 GMT
            Not After : Sep  6 00:44:42 2023 GMT
        Subject: CN=518D5D3EEBE41B9BB58EB40EF356EBB6159FC692
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:73:30:2c:6a:99:44:bb:a4:9f:64:95:5d:d4:
                    66:38:30:db:eb:db:1b:b0:27:c5:a7:a5:70:8c:13:
                    73:a5:db:3a:6b:3a:76:33:25:52:a7:ce:77:b1:26:
                    d0:30:64:e8:c1:f4:91:43:13:df:20:64:67:0a:62:
                    2d:cd:cd:94:02:57:3f:74:a2:b8:27:7a:44:0a:1a:
                    ec:66:37:60:0e:8b:ae:e2:77:d7:8e:5f:33:b8:cf:
                    63:b7:58:59:de:40:4a:ae:68:16:26:b9:f7:78:d0:
                    e9:45:fb:ae:53:21:f3:8d:b3:99:5f:db:38:98:1d:
                    01:a5:c4:be:37:0a:c8:a5:c3:1e:26:c4:52:e7:20:
                    02:9a:69:ae:a0:86:6a:05:b7:32:d0:7d:73:ec:20:
                    de:5b:72:e1:c0:75:99:35:cc:df:6a:31:e9:24:75:
                    d8:22:68:ab:59:9e:86:eb:d9:79:48:e5:50:e7:78:
                    69:e9:e0:77:ec:cc:d1:16:86:2f:5f:5a:38:54:0b:
                    2f:b7:de:a7:2c:3e:86:b4:30:18:ce:af:4e:db:8b:
                    ef:87:b8:91:2f:0a:a7:4b:0b:8f:c1:82:47:27:d3:
                    b0:b1:6c:11:41:5f:f5:61:9e:c2:b5:22:f7:2e:8f:
                    e6:8f:9b:30:3b:5f:c8:61:88:ba:51:cb:6b:a1:77:
                    75:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:8D:5D:3E:EB:E4:1B:9B:B5:8E:B4:0E:F3:56:EB:B6:15:9F:C6:92
            X509v3 Authority Key Identifier:
                keyid:36:8B:4C:E2:B4:E5:AB:E8:63:9C:DD:6D:75:E5:38:CA:59:52:15:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.mnihyc.com/repo/mnihyc/0/368B4CE2B4E5ABE8639CDD6D75E538CA59521572.crl

            Authority Information Access:
                CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/368B4CE2B4E5ABE8639CDD6D75E538CA59521572.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.mnihyc.com/repo/mnihyc/0/323630323a666564613a6262303a3a2f34342d3438203d3e20313430393338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:bb0::/44

    Signature Algorithm: sha256WithRSAEncryption
         b7:ad:c9:56:a0:18:ef:c0:59:b6:9c:65:dc:2d:ce:8a:c5:3d:
         11:6c:d3:b0:c6:7a:d6:3a:1b:bb:c7:9e:07:75:7c:f8:7e:b5:
         22:b1:ce:54:f7:e6:97:8f:72:46:68:33:f0:aa:67:d3:05:50:
         cc:78:16:40:c7:60:7b:a9:a8:26:a6:99:04:3a:e9:c6:61:97:
         e9:db:12:9f:e3:5c:f8:c2:ac:f5:a0:a0:11:e1:a7:6b:57:b5:
         4c:53:d3:ee:9c:9a:05:9d:fb:22:d2:a0:ea:4a:e2:86:2f:93:
         c0:8f:67:3b:b3:7b:7e:8d:b8:fb:16:10:83:4c:db:90:d3:28:
         f5:81:0a:81:c0:41:af:e8:80:f9:b0:8b:86:be:40:d4:ed:e2:
         02:71:b8:a5:dc:bd:ae:17:36:35:96:79:09:71:f3:ba:0b:0d:
         e7:53:27:0d:2b:4f:0c:8c:b7:cb:a7:07:7f:82:a5:2e:a0:22:
         ba:ba:11:e8:21:c0:09:95:bb:e4:36:15:0d:74:bd:c8:9f:df:
         a8:1e:12:a8:cf:cd:a7:22:7b:76:fe:b2:91:bf:d9:0f:83:9b:
         94:cc:dc:40:46:60:4f:70:ac:d7:8c:58:e0:97:6a:08:a8:63:
         e7:3e:17:b4:0d:c0:6a:c3:fe:03:93:d3:cd:3e:88:5f:42:58:
         1c:b7:22:24
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIUHMiLy8ZD0NAK4RVwqjDQOyBJfPcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzY4QjRDRTJCNEU1QUJFODYzOUNERDZENzVFNTM4Q0E1
OTUyMTU3MjAeFw0yMjA5MDcwMDM5NDJaFw0yMzA5MDYwMDQ0NDJaMDMxMTAvBgNV
BAMTKDUxOEQ1RDNFRUJFNDFCOUJCNThFQjQwRUYzNTZFQkI2MTU5RkM2OTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdczAsaplEu6SfZJVd1GY4MNvr
2xuwJ8WnpXCME3Ol2zprOnYzJVKnznexJtAwZOjB9JFDE98gZGcKYi3NzZQCVz90
orgnekQKGuxmN2AOi67id9eOXzO4z2O3WFneQEquaBYmufd40OlF+65TIfONs5lf
2ziYHQGlxL43Csilwx4mxFLnIAKaaa6ghmoFtzLQfXPsIN5bcuHAdZk1zN9qMekk
ddgiaKtZnobr2XlI5VDneGnp4HfszNEWhi9fWjhUCy+33qcsPoa0MBjOr07bi++H
uJEvCqdLC4/Bgkcn07CxbBFBX/VhnsK1Ivcuj+aPmzA7X8hhiLpRy2uhd3WBAgMB
AAGjggH5MIIB9TAdBgNVHQ4EFgQUUY1dPuvkG5u1jrQO81brthWfxpIwHwYDVR0j
BBgwFoAUNotM4rTlq+hjnN1tdeU4yllSFXIwDgYDVR0PAQH/BAQDAgeAMGkGA1Ud
HwRiMGAwXqBcoFqGWHJzeW5jOi8vcnBraS1yc3luYy5tbmloeWMuY29tL3JlcG8v
bW5paHljLzAvMzY4QjRDRTJCNEU1QUJFODYzOUNERDZENzVFNTM4Q0E1OTUyMTU3
Mi5jcmwwbQYIKwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Nha3V5
YS5uYXQubW9lL3JlcG8vTkFUT0NBLzAvMzY4QjRDRTJCNEU1QUJFODYzOUNERDZE
NzVFNTM4Q0E1OTUyMTU3Mi5jZXIwgYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcw
C4ZucnN5bmM6Ly9ycGtpLXJzeW5jLm1uaWh5Yy5jb20vcmVwby9tbmloeWMvMC8z
MjM2MzAzMjNhNjY2NTY0NjEzYTYyNjIzMDNhM2EyZjM0MzQyZDM0MzgyMDNkM2Uy
MDMxMzQzMDM5MzMzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCYC/toLsDANBgkqhkiG9w0BAQsFAAOC
AQEAt63JVqAY78BZtpxl3C3OisU9EWzTsMZ61jobu8eeB3V8+H61IrHOVPfml49y
Rmgz8Kpn0wVQzHgWQMdge6moJqaZBDrpxmGX6dsSn+Nc+MKs9aCgEeGna1e1TFPT
7pyaBZ37ItKg6krihi+TwI9nO7N7fo24+xYQg0zbkNMo9YEKgcBBr+iA+bCLhr5A
1O3iAnG4pdy9rhc2NZZ5CXHzugsN51MnDStPDIy3y6cHf4KlLqAiuroR6CHACZW7
5DYVDXS9yJ/fqB4SqM/NpyJ7dv6ykb/ZD4OblMzcQEZgT3Cs14xY4JdqCKhj5z4X
tA3AasP+A5PTzT6IX0JYHLciJA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:43:33 2025 by rpki-client