Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/3130332e3131392e3233312e302f32342d3234203d3e203634333135.roa
File:                     3130332e3131392e3233312e302f32342d3234203d3e203634333135.roa (raw, json)
Hash identifier:          0+AKGvkqe3yPdpTOBe1yYju8yoZN5zcfBbZcccA3J7o=
Subject key identifier:   9A:31:75:A8:EC:25:19:A9:0B:B2:AA:BF:EA:3D:6E:F4:A2:F6:F5:97
Certificate issuer:       /CN=90508FF980097E19CEF65ED72A856616A6F690AB
Certificate serial:       7725AF1CA922B76965AFC7B6814C9417B0F891B2
Authority key identifier: 90:50:8F:F9:80:09:7E:19:CE:F6:5E:D7:2A:85:66:16:A6:F6:90:AB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90508FF980097E19CEF65ED72A856616A6F690AB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/3130332e3131392e3233312e302f32342d3234203d3e203634333135.roa
Signing time:             Sat 23 Mar 2024 04:00:02 +0000
ROA not before:           Sat 23 Mar 2024 03:55:02 +0000
ROA not after:            Sat 22 Mar 2025 04:00:02 +0000
asID:                     64315
IP address blocks:        103.119.231.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:25:af:1c:a9:22:b7:69:65:af:c7:b6:81:4c:94:17:b0:f8:91:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90508FF980097E19CEF65ED72A856616A6F690AB
        Validity
            Not Before: Mar 23 03:55:02 2024 GMT
            Not After : Mar 22 04:00:02 2025 GMT
        Subject: CN=9A3175A8EC2519A90BB2AABFEA3D6EF4A2F6F597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5b:0c:d3:58:b4:c3:12:ef:88:70:ea:88:51:
                    8e:5e:fe:69:2d:83:6d:1d:cc:16:37:97:83:7c:ee:
                    d9:37:c4:3c:98:19:82:8f:87:e3:5c:27:cc:21:0f:
                    22:ae:05:66:63:bf:a5:c8:2d:66:11:b3:c5:37:e6:
                    53:45:eb:33:77:1a:2a:b5:ec:66:95:11:30:59:80:
                    2e:12:e9:de:6b:e7:14:45:6f:4f:94:99:18:2a:26:
                    98:b6:5f:5e:12:31:33:a3:c2:2d:5f:11:b0:a5:2d:
                    a3:e2:e1:3c:5a:89:6a:89:fa:25:1e:ad:42:f4:38:
                    48:e1:d1:a0:49:a6:75:b0:3a:92:cb:66:73:33:2d:
                    89:cc:b0:5c:63:09:a7:ac:cc:45:5b:cc:24:2a:74:
                    a8:89:81:dd:b0:e9:94:93:63:f7:91:18:9e:4f:e2:
                    5d:3d:32:28:ff:83:ef:47:0d:09:13:68:2f:f4:aa:
                    3e:a4:18:56:c8:6a:88:b9:8d:d2:c3:6a:3d:db:47:
                    ec:d4:45:1a:31:b4:1a:26:0b:f0:ae:32:56:60:96:
                    7e:9b:95:79:ca:02:51:2b:26:b8:7f:a2:4a:06:d9:
                    9f:26:2d:57:4b:da:dd:ec:fb:8a:fd:d8:1e:2e:9e:
                    37:5b:91:7e:f9:50:1d:84:a5:0b:15:99:3f:ee:f5:
                    e1:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:31:75:A8:EC:25:19:A9:0B:B2:AA:BF:EA:3D:6E:F4:A2:F6:F5:97
            X509v3 Authority Key Identifier:
                keyid:90:50:8F:F9:80:09:7E:19:CE:F6:5E:D7:2A:85:66:16:A6:F6:90:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/90508FF980097E19CEF65ED72A856616A6F690AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90508FF980097E19CEF65ED72A856616A6F690AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/3130332e3131392e3233312e302f32342d3234203d3e203634333135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.119.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:55:42:86:5a:bf:a8:92:d7:45:39:35:01:30:3d:41:f8:4a:
         08:d8:1b:94:3b:04:cf:8c:f7:f7:27:ac:48:ca:15:3c:19:df:
         4c:83:7d:03:6c:0f:06:c5:92:25:8c:95:b5:91:2f:e6:74:45:
         75:47:fb:f6:09:3a:44:74:f0:5d:14:f3:3c:13:d7:c3:b0:51:
         57:40:45:47:07:6d:b2:2e:4f:f5:7a:e8:a6:f4:e9:54:85:42:
         f4:9a:e9:15:6a:8f:0c:b3:e0:20:7f:9f:99:93:69:c8:93:44:
         ad:07:8a:c1:a0:58:0c:97:07:60:98:2a:24:f2:2f:34:9c:8f:
         a5:fe:3a:cb:81:9a:42:6a:5b:7e:70:dc:30:d4:68:ac:9f:8f:
         28:08:38:cf:42:e6:c4:8b:58:08:31:83:ae:f9:c5:26:b5:30:
         1a:b6:ae:d0:72:b9:32:ad:52:67:85:b1:05:24:07:ee:19:82:
         e2:ad:ab:b5:93:d7:f0:32:72:ba:f4:d9:9a:64:d3:c1:06:c5:
         e6:26:27:d0:f5:af:e7:d5:18:41:f3:d6:89:9f:09:aa:a7:9c:
         c3:49:ef:d9:5a:80:62:39:8f:26:10:25:bf:47:b9:ed:63:f6:
         fa:86:45:77:66:33:b5:87:88:1d:b6:85:f3:2f:6a:82:7b:ee:
         7f:23:76:1b
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUdyWvHKkit2llr8e2gUyUF7D4kbIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTA1MDhGRjk4MDA5N0UxOUNFRjY1RUQ3MkE4NTY2MTZB
NkY2OTBBQjAeFw0yNDAzMjMwMzU1MDJaFw0yNTAzMjIwNDAwMDJaMDMxMTAvBgNV
BAMTKDlBMzE3NUE4RUMyNTE5QTkwQkIyQUFCRkVBM0Q2RUY0QTJGNkY1OTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDWwzTWLTDEu+IcOqIUY5e/mkt
g20dzBY3l4N87tk3xDyYGYKPh+NcJ8whDyKuBWZjv6XILWYRs8U35lNF6zN3Giq1
7GaVETBZgC4S6d5r5xRFb0+UmRgqJpi2X14SMTOjwi1fEbClLaPi4TxaiWqJ+iUe
rUL0OEjh0aBJpnWwOpLLZnMzLYnMsFxjCaeszEVbzCQqdKiJgd2w6ZSTY/eRGJ5P
4l09Mij/g+9HDQkTaC/0qj6kGFbIaoi5jdLDaj3bR+zURRoxtBomC/CuMlZgln6b
lXnKAlErJrh/okoG2Z8mLVdL2t3s+4r92B4unjdbkX75UB2EpQsVmT/u9eEVAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUmjF1qOwlGakLsqq/6j1u9KL29ZcwHwYDVR0j
BBgwFoAUkFCP+YAJfhnO9l7XKoVmFqb2kKswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i
ODgzZTNiZS01N2UyLTQxMjUtYTBjNS05YTllYTUwMWJmMDUvMC85MDUwOEZGOTgw
MDk3RTE5Q0VGNjVFRDcyQTg1NjYxNkE2RjY5MEFCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOTA1MDhGRjk4MDA5N0UxOUNFRjY1RUQ3MkE4NTY2MTZBNkY2
OTBBQi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I4ODNlM2JlLTU3ZTItNDEyNS1h
MGM1LTlhOWVhNTAxYmYwNS8wLzMxMzAzMzJlMzEzMTM5MmUzMjMzMzEyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzNjM0MzMzMTM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ3fnMA0GCSqG
SIb3DQEBCwUAA4IBAQB7VUKGWr+oktdFOTUBMD1B+EoI2BuUOwTPjPf3J6xIyhU8
Gd9Mg30DbA8GxZIljJW1kS/mdEV1R/v2CTpEdPBdFPM8E9fDsFFXQEVHB22yLk/1
euim9OlUhUL0mukVao8Ms+Agf5+Zk2nIk0StB4rBoFgMlwdgmCok8i80nI+l/jrL
gZpCalt+cNww1Gisn48oCDjPQubEi1gIMYOu+cUmtTAatq7QcrkyrVJnhbEFJAfu
GYLirau1k9fwMnK69NmaZNPBBsXmJifQ9a/n1RhB89aJnwmqp5zDSe/ZWoBiOY8m
ECW/R7ntY/b6hkV3ZjO1h4gdtoXzL2qCe+5/I3Yb
-----END CERTIFICATE-----