Route Origin Authorization

$ rpki-client -vvf pub.krill.ausra.cloud/repo/Ausra-Systems-Internal-CA/1/326131333a646638303a666266343a3a2f34382d3438203d3e203630323334.roa
File:                     326131333a646638303a666266343a3a2f34382d3438203d3e203630323334.roa (raw, json)
Hash identifier:          CvRHb6a7fe1BGwwWbVOJ00QvgQvqMQQP3UApWBtabyQ=
Subject key identifier:   57:57:CA:29:F7:27:47:C3:D0:13:10:DB:C3:6F:1F:55:80:E2:FE:87
Certificate issuer:       /CN=D78AAEDBC4FBE17F22BC8AA8B7E7786747BCD0C5
Certificate serial:       4EF4DF59EBAB743A169B552FAEC042E317F18F23
Authority key identifier: D7:8A:AE:DB:C4:FB:E1:7F:22:BC:8A:A8:B7:E7:78:67:47:BC:D0:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D78AAEDBC4FBE17F22BC8AA8B7E7786747BCD0C5.cer
Subject info access:      rsync://pub.krill.ausra.cloud/repo/Ausra-Systems-Internal-CA/1/326131333a646638303a666266343a3a2f34382d3438203d3e203630323334.roa
Signing time:             Tue 03 Oct 2023 21:00:55 +0000
ROA not before:           Tue 03 Oct 2023 20:55:55 +0000
ROA not after:            Tue 01 Oct 2024 21:00:55 +0000
asID:                     60234
IP address blocks:        2a13:df80:fbf4::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:f4:df:59:eb:ab:74:3a:16:9b:55:2f:ae:c0:42:e3:17:f1:8f:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D78AAEDBC4FBE17F22BC8AA8B7E7786747BCD0C5
        Validity
            Not Before: Oct  3 20:55:55 2023 GMT
            Not After : Oct  1 21:00:55 2024 GMT
        Subject: CN=5757CA29F72747C3D01310DBC36F1F5580E2FE87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:7f:2d:7e:32:5f:18:4a:26:e7:de:b2:55:53:
                    33:df:92:d5:5e:89:13:97:03:32:ed:86:85:f8:42:
                    b7:95:41:45:c2:9c:22:5e:46:ea:77:99:87:15:10:
                    6f:e9:b2:31:8f:8e:e4:5f:84:a5:83:16:fb:34:b1:
                    75:8a:4c:d0:02:ee:ed:9f:ba:27:d9:06:3d:4d:7c:
                    36:8a:51:5a:31:24:93:d4:19:8e:c4:59:f2:9e:41:
                    1d:b5:f3:de:23:26:0d:bb:81:30:f4:ab:c6:fa:5e:
                    9b:91:8d:92:4c:f6:d9:9c:38:49:57:64:84:cd:be:
                    fa:b8:08:0a:28:16:d0:a7:c5:63:f2:c9:d0:b8:ec:
                    2c:5b:a2:41:5e:c5:78:91:32:80:1a:2a:74:b9:68:
                    b6:bf:09:24:2c:16:5c:5b:64:06:35:a8:6d:14:fa:
                    eb:5a:14:74:df:b0:6f:37:50:0c:6a:c5:89:dc:0c:
                    3c:34:b8:68:9f:45:dd:2b:60:c7:9c:ca:ed:85:0c:
                    e9:27:64:44:51:32:67:d7:0f:1d:26:4f:84:21:fe:
                    ee:13:1d:bc:c1:f5:6f:d4:35:df:26:f8:63:8d:b7:
                    ff:ac:15:71:5c:60:72:f9:4a:a8:32:48:51:c1:de:
                    51:2f:54:ac:8a:f2:a9:2a:d4:a0:ab:fc:01:eb:09:
                    ea:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:57:CA:29:F7:27:47:C3:D0:13:10:DB:C3:6F:1F:55:80:E2:FE:87
            X509v3 Authority Key Identifier:
                keyid:D7:8A:AE:DB:C4:FB:E1:7F:22:BC:8A:A8:B7:E7:78:67:47:BC:D0:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://pub.krill.ausra.cloud/repo/Ausra-Systems-Internal-CA/1/D78AAEDBC4FBE17F22BC8AA8B7E7786747BCD0C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D78AAEDBC4FBE17F22BC8AA8B7E7786747BCD0C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://pub.krill.ausra.cloud/repo/Ausra-Systems-Internal-CA/1/326131333a646638303a666266343a3a2f34382d3438203d3e203630323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df80:fbf4::/48

    Signature Algorithm: sha256WithRSAEncryption
         74:2a:23:c4:b5:4d:13:86:9d:d3:db:ef:b1:31:18:b3:d1:b0:
         53:79:69:34:56:0f:d3:18:6b:64:f6:38:8b:44:94:19:f3:0d:
         b2:54:fa:5d:6c:29:4c:d8:13:7f:3f:29:55:95:68:11:9f:7b:
         92:f3:10:af:dd:a0:00:ac:6e:5c:60:b4:d5:fa:00:e0:08:10:
         09:27:e1:c9:1f:6c:4c:65:03:d9:44:0d:76:aa:a5:47:8d:63:
         46:10:c2:2d:45:9a:e1:82:2b:90:9d:8d:c2:ef:02:95:bc:68:
         fb:f3:62:27:29:56:0c:46:5c:43:2a:f9:1b:49:f4:ec:60:0f:
         b9:2a:a5:d1:d6:c5:38:a0:1e:1b:cb:42:62:f6:71:ac:9f:97:
         22:01:de:3f:8f:3c:92:92:34:9d:96:e4:3e:db:47:a2:63:ce:
         a3:cb:b5:b8:88:cf:34:46:92:ec:1b:d6:16:b6:ec:c1:ad:a0:
         5e:8c:e1:b6:80:14:2a:1e:b4:95:ba:7e:4a:45:12:11:11:c5:
         77:29:48:39:80:d8:e1:bb:ce:11:cb:bf:54:1f:63:6e:73:61:
         4e:3a:66:84:b3:a5:64:b9:8e:7f:61:d9:4c:2f:41:1b:af:0d:
         dd:52:96:cb:b5:10:a2:69:34:b6:de:f0:cb:87:ab:01:a0:5b:
         6a:f3:e4:97
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgIUTvTfWeurdDoWm1UvrsBC4xfxjyMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDc4QUFFREJDNEZCRTE3RjIyQkM4QUE4QjdFNzc4Njc0
N0JDRDBDNTAeFw0yMzEwMDMyMDU1NTVaFw0yNDEwMDEyMTAwNTVaMDMxMTAvBgNV
BAMTKDU3NTdDQTI5RjcyNzQ3QzNEMDEzMTBEQkMzNkYxRjU1ODBFMkZFODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQfy1+Ml8YSibn3rJVUzPfktVe
iROXAzLthoX4QreVQUXCnCJeRup3mYcVEG/psjGPjuRfhKWDFvs0sXWKTNAC7u2f
uifZBj1NfDaKUVoxJJPUGY7EWfKeQR21894jJg27gTD0q8b6XpuRjZJM9tmcOElX
ZITNvvq4CAooFtCnxWPyydC47CxbokFexXiRMoAaKnS5aLa/CSQsFlxbZAY1qG0U
+utaFHTfsG83UAxqxYncDDw0uGifRd0rYMecyu2FDOknZERRMmfXDx0mT4Qh/u4T
HbzB9W/UNd8m+GONt/+sFXFcYHL5SqgySFHB3lEvVKyK8qkq1KCr/AHrCeq1AgMB
AAGjggJVMIICUTAdBgNVHQ4EFgQUV1fKKfcnR8PQExDbw28fVYDi/ocwHwYDVR0j
BBgwFoAU14qu28T74X8ivIqot+d4Z0e80MUwDgYDVR0PAQH/BAQDAgeAMHwGA1Ud
HwR1MHMwcaBvoG2Ga3JzeW5jOi8vcHViLmtyaWxsLmF1c3JhLmNsb3VkL3JlcG8v
QXVzcmEtU3lzdGVtcy1JbnRlcm5hbC1DQS8xL0Q3OEFBRURCQzRGQkUxN0YyMkJD
OEFBOEI3RTc3ODY3NDdCQ0QwQzUuY3JsMIGeBggrBgEFBQcBAQSBkTCBjjCBiwYI
KwYBBQUHMAKGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9z
aXRvcnkvMDQwMzJjOGYtMWQ1Ny00YzNiLTkwNDMtYTBlN2ZlYmYxNjdkLzAvRDc4
QUFFREJDNEZCRTE3RjIyQkM4QUE4QjdFNzc4Njc0N0JDRDBDNS5jZXIwgaEGCCsG
AQUFBwELBIGUMIGRMIGOBggrBgEFBQcwC4aBgXJzeW5jOi8vcHViLmtyaWxsLmF1
c3JhLmNsb3VkL3JlcG8vQXVzcmEtU3lzdGVtcy1JbnRlcm5hbC1DQS8xLzMyNjEz
MTMzM2E2NDY2MzgzMDNhNjY2MjY2MzQzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAz
NjMwMzIzMzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAKhPfgPv0MA0GCSqGSIb3DQEBCwUAA4IBAQB0
KiPEtU0Thp3T2++xMRiz0bBTeWk0Vg/TGGtk9jiLRJQZ8w2yVPpdbClM2BN/PylV
lWgRn3uS8xCv3aAArG5cYLTV+gDgCBAJJ+HJH2xMZQPZRA12qqVHjWNGEMItRZrh
giuQnY3C7wKVvGj782InKVYMRlxDKvkbSfTsYA+5KqXR1sU4oB4by0Ji9nGsn5ci
Ad4/jzySkjSdluQ+20eiY86jy7W4iM80RpLsG9YWtuzBraBejOG2gBQqHrSVun5K
RRIREcV3KUg5gNjhu84Ry79UH2Nuc2FOOmaEs6VkuY5/YdlML0Ebrw3dUpbLtRCi
aTS23vDLh6sBoFtq8+SX
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:58 2024 by rpki-client on console-fra.rpki-client.org