Route Origin Authorization

$ rpki-client -vvf pub.krill.ausra.cloud/repo/Ausra-Systems-Internal-CA/1/326131333a646638303a666266303a3a2f34342d3438203d3e20313937393933.roa
File:                     326131333a646638303a666266303a3a2f34342d3438203d3e20313937393933.roa (raw, json)
Hash identifier:          2OjaUfVcOKytWavQpZIym9OWiRimOl4SOYqXhdPoEd8=
Subject key identifier:   70:11:D0:CC:DD:50:EC:27:B9:A7:39:5F:D9:96:1A:C7:A5:E5:22:BA
Certificate issuer:       /CN=D78AAEDBC4FBE17F22BC8AA8B7E7786747BCD0C5
Certificate serial:       3C4E14F2552A5074B54C7C87C84DCE0585648931
Authority key identifier: D7:8A:AE:DB:C4:FB:E1:7F:22:BC:8A:A8:B7:E7:78:67:47:BC:D0:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D78AAEDBC4FBE17F22BC8AA8B7E7786747BCD0C5.cer
Subject info access:      rsync://pub.krill.ausra.cloud/repo/Ausra-Systems-Internal-CA/1/326131333a646638303a666266303a3a2f34342d3438203d3e20313937393933.roa
Signing time:             Sun 20 Aug 2023 21:14:29 +0000
ROA not before:           Sun 20 Aug 2023 21:09:29 +0000
ROA not after:            Sun 18 Aug 2024 21:14:29 +0000
asID:                     197993
IP address blocks:        2a13:df80:fbf0::/44 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:4e:14:f2:55:2a:50:74:b5:4c:7c:87:c8:4d:ce:05:85:64:89:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D78AAEDBC4FBE17F22BC8AA8B7E7786747BCD0C5
        Validity
            Not Before: Aug 20 21:09:29 2023 GMT
            Not After : Aug 18 21:14:29 2024 GMT
        Subject: CN=7011D0CCDD50EC27B9A7395FD9961AC7A5E522BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:62:57:eb:92:45:d5:a9:0a:7f:77:eb:97:d9:
                    95:16:64:a0:ef:8c:79:86:a4:38:37:e4:0e:e6:25:
                    0c:42:41:fc:a2:f9:2a:18:f8:a6:d9:1b:b5:92:da:
                    06:73:49:40:c9:d2:06:7f:0e:ac:62:0b:95:9f:0d:
                    3c:54:18:44:dc:97:90:8f:56:8d:46:ac:43:33:05:
                    32:cf:ef:a9:2f:aa:1a:05:cf:ab:b5:25:55:c1:b3:
                    c0:84:58:89:97:7c:6e:9c:30:99:3e:bd:a0:d8:d9:
                    ae:be:06:63:61:a8:f1:2a:18:1a:fb:98:fb:89:e4:
                    11:d7:2d:87:bd:02:63:9b:29:ed:59:76:24:ec:f9:
                    fa:9d:06:f1:85:03:8d:b4:bd:5b:f2:72:52:8d:da:
                    71:c8:2a:22:c8:e5:57:bb:00:b8:db:63:de:10:c9:
                    00:c0:2b:a6:32:cd:b6:d9:e1:df:07:75:c8:48:c8:
                    35:ce:60:75:20:2c:e7:c0:8a:51:c9:9c:96:c5:f0:
                    cc:87:dc:24:28:96:ef:79:64:29:40:ca:5a:d9:4f:
                    51:e4:aa:80:38:75:f3:4d:df:de:a0:5f:d2:15:08:
                    d4:1d:f4:ca:0d:42:bd:84:95:c9:84:ac:aa:19:e8:
                    03:3e:bc:aa:0a:34:f3:c4:06:4b:2d:7f:2d:fb:6f:
                    75:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:11:D0:CC:DD:50:EC:27:B9:A7:39:5F:D9:96:1A:C7:A5:E5:22:BA
            X509v3 Authority Key Identifier:
                keyid:D7:8A:AE:DB:C4:FB:E1:7F:22:BC:8A:A8:B7:E7:78:67:47:BC:D0:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://pub.krill.ausra.cloud/repo/Ausra-Systems-Internal-CA/1/D78AAEDBC4FBE17F22BC8AA8B7E7786747BCD0C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D78AAEDBC4FBE17F22BC8AA8B7E7786747BCD0C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://pub.krill.ausra.cloud/repo/Ausra-Systems-Internal-CA/1/326131333a646638303a666266303a3a2f34342d3438203d3e20313937393933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df80:fbf0::/44

    Signature Algorithm: sha256WithRSAEncryption
         05:f6:36:d9:a4:34:08:e8:10:2c:bc:de:71:c1:0c:39:5a:4f:
         44:83:e8:35:b1:6a:4f:e9:a3:d8:bb:0a:49:15:0c:75:45:1d:
         06:61:e1:dd:ad:f8:b6:8e:84:fe:60:14:5d:5b:af:38:c1:13:
         17:74:b8:7c:8d:bc:2e:c8:d7:a6:45:9f:80:0a:b1:ae:f0:39:
         a6:ea:2e:c9:d8:c9:76:47:63:06:d7:de:39:fb:46:a9:9c:28:
         ec:4c:4e:38:a2:d0:c7:9d:24:a3:d6:1c:ad:12:13:fa:72:7b:
         4b:ac:6c:08:50:63:f7:c8:f2:ef:35:80:29:c5:71:13:02:79:
         a7:e6:cc:9e:8d:05:71:8d:df:5c:43:84:18:b5:53:c0:86:eb:
         e5:b6:04:a8:79:9d:b1:0e:68:cc:79:fe:81:38:ce:68:95:bc:
         e9:e9:15:a6:67:02:08:43:24:c4:d4:61:75:a8:75:ad:ac:be:
         29:75:74:7a:84:f5:1f:b3:3b:fd:d0:29:51:1f:34:9e:6b:e9:
         63:dc:63:b3:09:2a:2a:89:69:2b:20:d0:20:a0:a2:7b:ce:6d:
         73:e9:94:d6:3f:2b:80:c0:63:a6:f1:5c:d5:57:cb:4a:0c:59:
         c1:3d:d7:26:d5:7a:3b:cf:d9:04:f7:fe:7e:c7:08:61:51:a0:
         c2:b1:1f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 22:39:55 2024 by rpki-client on console-ams.rpki-client.org