Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A914BC7A0000/0/33362e35302e33362e302f32342d3234203d3e20313438303032.roa
File:                     33362e35302e33362e302f32342d3234203d3e20313438303032.roa (raw, json)
Hash identifier:          3rI0HDvsL/eIj1Ua7ECpPMidIEMrNBwZonj1r75gTAA=
Subject key identifier:   15:F6:5F:61:4F:D3:E0:8B:49:2B:66:55:F2:6C:0E:98:41:79:3A:4F
Certificate issuer:       /CN=A914BC7A0000/serialNumber=2C067158AEC26270809CF62CF59FA1FE4F81FAB9
Certificate serial:       7F64BC7C8C84917921E77C44AF2662B91AA7D043
Authority key identifier: 2C:06:71:58:AE:C2:62:70:80:9C:F6:2C:F5:9F:A1:FE:4F:81:FA:B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LAZxWK7CYnCAnPYs9Z-h_k-B-rk.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A914BC7A0000/0/33362e35302e33362e302f32342d3234203d3e20313438303032.roa
Signing time:             Tue 20 Jun 2023 06:57:51 +0000
ROA not before:           Tue 20 Jun 2023 06:52:51 +0000
ROA not after:            Tue 18 Jun 2024 06:57:51 +0000
asID:                     148002
IP address blocks:        36.50.36.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:64:bc:7c:8c:84:91:79:21:e7:7c:44:af:26:62:b9:1a:a7:d0:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914BC7A0000/serialNumber=2C067158AEC26270809CF62CF59FA1FE4F81FAB9
        Validity
            Not Before: Jun 20 06:52:51 2023 GMT
            Not After : Jun 18 06:57:51 2024 GMT
        Subject: CN=15F65F614FD3E08B492B6655F26C0E9841793A4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:92:aa:12:04:01:07:01:7c:c8:d3:3c:ed:f5:
                    b0:2f:44:0b:ed:f0:75:5d:2d:6e:04:07:bc:60:59:
                    4b:02:f3:e6:84:2b:5c:52:54:08:fd:c3:e6:40:df:
                    20:92:1a:22:21:6a:18:5d:90:5f:6a:24:9e:54:93:
                    db:b6:39:d2:0e:d8:89:2d:bf:af:78:a8:84:91:5e:
                    f1:47:fe:0b:5e:dd:8f:d4:12:0a:7d:16:7e:0b:b3:
                    7a:aa:89:e5:54:49:8b:60:1c:c8:16:ac:f0:bb:a5:
                    46:70:96:2f:90:4d:38:f3:f9:e6:20:6d:13:48:0c:
                    b5:53:a1:ba:99:85:f4:20:f8:ce:7e:be:e1:ba:11:
                    34:fd:b0:5a:37:2f:ad:c7:1e:1d:06:6e:1b:79:78:
                    ce:f0:28:33:72:e5:36:8e:e6:fd:e5:9a:55:f1:0f:
                    a8:96:81:ad:12:5a:6a:e1:2c:ac:06:20:b0:1e:8e:
                    2c:c1:77:8e:2d:5c:f4:7c:88:93:5a:7c:45:51:05:
                    1b:84:82:25:cf:c1:da:05:31:62:34:48:84:27:83:
                    9e:7f:f3:cd:d5:28:c3:75:bd:ae:44:e2:e0:0e:a2:
                    8e:fb:71:a6:aa:37:0b:d4:61:22:ff:26:f7:de:31:
                    91:c0:39:be:00:4c:d0:7c:f2:8e:8c:7d:a4:d0:db:
                    c5:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:F6:5F:61:4F:D3:E0:8B:49:2B:66:55:F2:6C:0E:98:41:79:3A:4F
            X509v3 Authority Key Identifier:
                keyid:2C:06:71:58:AE:C2:62:70:80:9C:F6:2C:F5:9F:A1:FE:4F:81:FA:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A914BC7A0000/0/2C067158AEC26270809CF62CF59FA1FE4F81FAB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LAZxWK7CYnCAnPYs9Z-h_k-B-rk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A914BC7A0000/0/33362e35302e33362e302f32342d3234203d3e20313438303032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:06:91:ea:c4:53:f2:0b:db:96:80:c7:19:6a:64:8a:e7:78:
         55:f5:88:32:e0:01:b8:f0:04:8c:cc:cd:cc:c9:fc:7d:8d:9b:
         9b:c3:b2:ea:fe:b3:91:b4:d4:ac:4b:2d:2c:e5:53:c9:6c:1c:
         ef:de:4d:85:18:17:10:46:b8:b8:7a:11:ce:ed:73:60:ed:b4:
         f5:9c:47:a7:31:da:87:33:b6:44:cd:c2:1a:7a:e3:f3:fa:6d:
         49:c1:e9:01:5f:de:1d:40:2a:7e:71:51:7c:1b:53:b8:e0:a6:
         9b:19:65:43:71:86:bb:d2:87:63:76:e3:ac:c8:eb:d5:ae:25:
         6f:20:c5:96:18:58:54:22:97:38:20:0c:66:62:38:58:27:15:
         c9:01:ff:dc:8b:de:c0:51:9e:09:bb:59:21:87:5b:28:02:80:
         41:c0:5d:cc:ce:26:50:1c:7e:00:95:40:6f:b9:6d:6f:37:47:
         1a:6a:32:ad:17:31:14:cc:e5:a1:36:56:10:c5:8d:f7:a0:17:
         9f:01:a3:45:5d:a7:de:43:eb:1e:87:0c:95:9a:db:02:65:16:
         8b:ec:93:fc:be:9b:5b:66:1f:4a:9c:8c:69:82:77:13:cc:2a:
         f8:9a:b5:d7:36:a8:d6:1d:75:65:de:9b:21:42:61:c8:a0:5a:
         f3:ce:5c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:50 2024 by rpki-client on console-ams.rpki-client.org