Route Origin Authorization

$ rpki-client -vvf pub.krill.ausra.cloud/repo/Ausra-Systems-Internal-CA/1/326131333a646638303a666266333a3a2f34382d3438203d3e20313937393933.roa
File:                     326131333a646638303a666266333a3a2f34382d3438203d3e20313937393933.roa (raw, json)
Hash identifier:          HdT6SDomeyTFzoW9C2ZPlRMiiZptzPI/nar8vUeavNQ=
Subject key identifier:   39:9F:55:B9:84:06:59:FD:E7:DC:CA:5A:92:53:42:B6:DB:7E:6D:CC
Certificate issuer:       /CN=D78AAEDBC4FBE17F22BC8AA8B7E7786747BCD0C5
Certificate serial:       6B4D3CF6B7979FBB1C8DEBDC4CA3C9154E4F242E
Authority key identifier: D7:8A:AE:DB:C4:FB:E1:7F:22:BC:8A:A8:B7:E7:78:67:47:BC:D0:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D78AAEDBC4FBE17F22BC8AA8B7E7786747BCD0C5.cer
Subject info access:      rsync://pub.krill.ausra.cloud/repo/Ausra-Systems-Internal-CA/1/326131333a646638303a666266333a3a2f34382d3438203d3e20313937393933.roa
Signing time:             Tue 12 Sep 2023 19:58:41 +0000
ROA not before:           Tue 12 Sep 2023 19:53:41 +0000
ROA not after:            Tue 10 Sep 2024 19:58:41 +0000
asID:                     197993
IP address blocks:        2a13:df80:fbf3::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:4d:3c:f6:b7:97:9f:bb:1c:8d:eb:dc:4c:a3:c9:15:4e:4f:24:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D78AAEDBC4FBE17F22BC8AA8B7E7786747BCD0C5
        Validity
            Not Before: Sep 12 19:53:41 2023 GMT
            Not After : Sep 10 19:58:41 2024 GMT
        Subject: CN=399F55B9840659FDE7DCCA5A925342B6DB7E6DCC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:cc:5e:bc:17:58:57:70:d6:e9:72:17:a8:d7:
                    1f:59:8c:f1:81:c3:ff:b5:64:90:6d:01:4e:80:ed:
                    df:3a:b2:c9:cd:14:db:40:b1:7e:c5:cd:a6:de:09:
                    f7:5f:ac:d4:a9:2d:c0:00:89:6d:95:ab:a9:05:2b:
                    8a:9f:87:00:df:ba:2c:21:44:07:02:7e:8c:94:96:
                    bb:da:f2:aa:16:e5:07:64:01:d9:48:e7:a3:2e:7f:
                    73:86:11:99:65:df:a3:1b:2a:18:ac:f3:15:e9:a3:
                    91:9a:3a:64:be:0d:5c:6c:63:a1:f1:8d:75:f4:19:
                    de:f9:30:48:c3:d4:a7:7b:8f:8b:10:03:97:68:a0:
                    37:64:ba:48:6b:4b:a7:67:1d:b1:e6:34:7a:75:db:
                    c4:e5:c3:79:66:eb:5e:3d:59:b4:27:eb:f8:ec:8a:
                    4f:d0:0f:f0:99:39:7e:a3:c5:41:80:1a:c0:2a:ac:
                    67:02:4a:aa:ca:db:aa:ca:e1:2c:c3:75:89:b1:3f:
                    8e:50:b5:6f:da:33:4e:52:7e:c4:03:cd:bf:9a:e4:
                    8d:a1:6f:28:b7:ed:3e:c9:5d:96:66:2f:d2:d2:01:
                    74:a8:2d:57:1f:fc:6f:08:96:45:63:33:5b:4b:41:
                    7f:a4:eb:48:22:ae:12:9a:c5:c3:78:1f:06:aa:e7:
                    15:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:9F:55:B9:84:06:59:FD:E7:DC:CA:5A:92:53:42:B6:DB:7E:6D:CC
            X509v3 Authority Key Identifier:
                keyid:D7:8A:AE:DB:C4:FB:E1:7F:22:BC:8A:A8:B7:E7:78:67:47:BC:D0:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://pub.krill.ausra.cloud/repo/Ausra-Systems-Internal-CA/1/D78AAEDBC4FBE17F22BC8AA8B7E7786747BCD0C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D78AAEDBC4FBE17F22BC8AA8B7E7786747BCD0C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://pub.krill.ausra.cloud/repo/Ausra-Systems-Internal-CA/1/326131333a646638303a666266333a3a2f34382d3438203d3e20313937393933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df80:fbf3::/48

    Signature Algorithm: sha256WithRSAEncryption
         7d:e2:0a:bb:a7:ad:ae:09:41:f1:7c:f1:f2:2f:5e:ba:cb:87:
         38:3c:39:8a:dc:04:82:8b:cd:6a:99:42:b6:63:57:cb:7d:4a:
         96:82:8c:a9:5d:a4:91:ef:c7:17:0b:b7:d4:d3:1e:35:c7:d2:
         d2:b6:bf:f2:b7:82:0c:aa:e5:71:ca:c1:26:ab:51:e9:25:51:
         03:a0:b7:75:e4:cd:91:e4:dd:29:75:1d:79:c2:7e:2e:22:e0:
         4f:9b:b5:86:ec:07:3a:19:fb:45:03:20:1d:c0:11:0b:f1:df:
         ad:71:db:42:df:6a:5d:e0:a1:1a:ee:e4:ae:43:04:e9:93:dc:
         2e:7f:b2:60:aa:72:19:2a:21:e6:ac:70:e6:37:68:4f:f1:9a:
         1d:79:c1:bd:94:94:6d:f4:a9:88:d5:59:61:fb:55:69:97:c1:
         ac:fa:4b:0f:fe:79:45:c6:a4:2f:23:cf:02:33:e7:8b:d3:de:
         b8:aa:dc:e9:52:9e:46:42:ec:8b:93:30:dc:4b:1c:1d:e5:05:
         57:00:93:2d:7b:3c:97:87:44:b0:f6:b2:41:e1:eb:9d:7d:32:
         fb:4c:01:b8:91:5c:cf:fa:fc:95:bd:09:d4:1b:cb:4c:a1:7a:
         34:fd:ff:38:17:f3:2b:ba:18:5f:49:ff:19:c3:2a:12:f4:c8:
         5f:a3:13:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 22:39:55 2024 by rpki-client on console-ams.rpki-client.org