Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/SVENS-RPKI/0/326130613a363034303a623166313a3a2f34382d3438203d3e20323030363736.roa
File:                     326130613a363034303a623166313a3a2f34382d3438203d3e20323030363736.roa (raw, json)
Hash identifier:          gHbdCCig/4QxTZX5PXLivAKYwLx4Kp1vGjkcqDGPANY=
Subject key identifier:   9A:FC:BF:38:FE:06:F3:67:5F:F7:90:2E:5F:C0:1C:B8:7C:10:60:20
Certificate issuer:       /CN=3D0D05110F2F8F2322DC87EEC86671D6F3BA8684
Certificate serial:       0A2C2BF7A8EAA2125A67E1C32E64F0C3343251AF
Authority key identifier: 3D:0D:05:11:0F:2F:8F:23:22:DC:87:EE:C8:66:71:D6:F3:BA:86:84
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3D0D05110F2F8F2322DC87EEC86671D6F3BA8684.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/SVENS-RPKI/0/326130613a363034303a623166313a3a2f34382d3438203d3e20323030363736.roa
Signing time:             Sun 19 Nov 2023 04:11:37 +0000
ROA not before:           Sun 19 Nov 2023 04:06:37 +0000
ROA not after:            Sun 17 Nov 2024 04:11:37 +0000
asID:                     200676
IP address blocks:        2a0a:6040:b1f1::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:2c:2b:f7:a8:ea:a2:12:5a:67:e1:c3:2e:64:f0:c3:34:32:51:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D0D05110F2F8F2322DC87EEC86671D6F3BA8684
        Validity
            Not Before: Nov 19 04:06:37 2023 GMT
            Not After : Nov 17 04:11:37 2024 GMT
        Subject: CN=9AFCBF38FE06F3675FF7902E5FC01CB87C106020
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:bd:9d:3e:f4:b0:96:be:f4:22:17:e2:d2:e0:
                    ed:ef:43:d5:5a:5e:51:b4:17:b8:89:b6:fb:1b:77:
                    02:be:65:62:4a:67:51:d5:be:89:83:b4:f5:89:01:
                    4f:a0:2d:d4:93:6b:50:ea:aa:ce:02:03:7e:8c:aa:
                    a8:09:ad:b9:e0:0c:66:28:f3:4d:e3:6a:4c:18:58:
                    6c:90:01:4e:9f:0d:3f:96:f1:db:ee:57:20:ca:05:
                    38:5b:6b:b7:d6:b5:c1:28:1b:a2:ac:85:6c:4f:ce:
                    2f:92:80:52:a8:67:a8:e8:59:b0:48:77:41:e4:0b:
                    89:dc:f9:bb:1e:0e:49:f9:cd:79:a8:0c:47:5d:59:
                    8d:f3:4b:a7:a1:72:33:dd:fc:f3:92:7f:52:38:c8:
                    f9:99:36:53:d8:71:3f:d1:ac:55:77:a2:f6:bd:34:
                    e1:04:9d:74:14:aa:15:4b:45:4d:89:fb:a2:e1:94:
                    71:c3:ab:3a:09:59:2e:4d:51:d0:c2:ba:48:bb:ad:
                    b7:0b:c4:19:ef:de:7d:09:a7:01:4d:f1:e5:d7:cf:
                    b5:89:0b:79:b8:fc:e8:03:15:b5:df:99:9c:45:eb:
                    38:e0:f2:9e:7a:3c:bb:83:2c:80:a7:41:04:33:3a:
                    67:e3:e5:45:fd:08:a1:54:13:70:ca:f8:05:72:07:
                    03:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:FC:BF:38:FE:06:F3:67:5F:F7:90:2E:5F:C0:1C:B8:7C:10:60:20
            X509v3 Authority Key Identifier:
                keyid:3D:0D:05:11:0F:2F:8F:23:22:DC:87:EE:C8:66:71:D6:F3:BA:86:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/SVENS-RPKI/0/3D0D05110F2F8F2322DC87EEC86671D6F3BA8684.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3D0D05110F2F8F2322DC87EEC86671D6F3BA8684.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/SVENS-RPKI/0/326130613a363034303a623166313a3a2f34382d3438203d3e20323030363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:b1f1::/48

    Signature Algorithm: sha256WithRSAEncryption
         4c:24:58:de:0c:15:d6:07:65:05:ee:29:20:7d:3e:a1:df:70:
         ec:c7:ee:71:b9:bd:e4:4a:86:06:26:77:cc:c9:e1:38:44:1a:
         2f:cb:57:8e:da:c1:df:5b:38:2d:78:01:b5:16:ed:80:7a:f2:
         74:21:ac:ad:17:17:af:d2:06:21:be:da:ed:9b:1f:fc:00:4b:
         ca:95:88:ec:6b:53:6c:89:fe:7e:7f:d0:c2:70:34:d7:a8:b4:
         20:5d:cc:b7:cd:84:57:c1:84:fa:8d:ac:06:9c:cc:49:9c:02:
         b7:ba:a0:68:3e:1d:99:7b:5d:f2:3e:8f:e4:3b:de:1b:19:5c:
         86:8a:62:0c:e3:8e:17:60:05:4f:a1:6a:a5:26:02:e9:12:b8:
         99:42:05:7a:af:3e:28:53:1c:4a:08:1d:b0:1e:35:a4:bb:95:
         28:2d:3b:b8:9e:a1:a7:d4:40:4a:20:f8:b5:bb:72:f1:66:12:
         af:43:32:2a:3e:10:18:1a:d1:21:c1:85:78:d1:0a:59:1c:07:
         99:15:e8:18:d7:1e:0c:47:5d:cc:25:25:a8:e8:00:f5:6e:49:
         63:ea:ff:64:11:61:96:28:da:79:0f:cc:5d:81:ea:fb:94:c4:
         c6:06:b2:cd:aa:f9:ed:b7:db:81:54:2c:b6:f2:59:b6:a1:ce:
         23:19:19:ae
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgIUCiwr96jqohJaZ+HDLmTwwzQyUa8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0QwRDA1MTEwRjJGOEYyMzIyREM4N0VFQzg2NjcxRDZG
M0JBODY4NDAeFw0yMzExMTkwNDA2MzdaFw0yNDExMTcwNDExMzdaMDMxMTAvBgNV
BAMTKDlBRkNCRjM4RkUwNkYzNjc1RkY3OTAyRTVGQzAxQ0I4N0MxMDYwMjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJvZ0+9LCWvvQiF+LS4O3vQ9Va
XlG0F7iJtvsbdwK+ZWJKZ1HVvomDtPWJAU+gLdSTa1Dqqs4CA36MqqgJrbngDGYo
803jakwYWGyQAU6fDT+W8dvuVyDKBThba7fWtcEoG6KshWxPzi+SgFKoZ6joWbBI
d0HkC4nc+bseDkn5zXmoDEddWY3zS6ehcjPd/POSf1I4yPmZNlPYcT/RrFV3ova9
NOEEnXQUqhVLRU2J+6LhlHHDqzoJWS5NUdDCuki7rbcLxBnv3n0JpwFN8eXXz7WJ
C3m4/OgDFbXfmZxF6zjg8p56PLuDLICnQQQzOmfj5UX9CKFUE3DK+AVyBwOzAgMB
AAGjggITMIICDzAdBgNVHQ4EFgQUmvy/OP4G82df95AuX8AcuHwQYCAwHwYDVR0j
BBgwFoAUPQ0FEQ8vjyMi3IfuyGZx1vO6hoQwDgYDVR0PAQH/BAQDAgeAMG0GA1Ud
HwRmMGQwYqBgoF6GXHJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
U1ZFTlMtUlBLSS8wLzNEMEQwNTExMEYyRjhGMjMyMkRDODdFRUM4NjY3MUQ2RjNC
QTg2ODQuY3JsMHoGCCsGAQUFBwEBBG4wbDBqBggrBgEFBQcwAoZecnN5bmM6Ly9j
bG91ZGllLXJlcG8ucnBraS5hcHAvcmVwby9DTE9VRElFLVJQS0kvMC8zRDBEMDUx
MTBGMkY4RjIzMjJEQzg3RUVDODY2NzFENkYzQkE4Njg0LmNlcjCBkwYIKwYBBQUH
AQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzovL2Nsb3VkaWUtcmVwby5ycGtp
LmFwcC9yZXBvL1NWRU5TLVJQS0kvMC8zMjYxMzA2MTNhMzYzMDM0MzAzYTYyMzE2
NjMxM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIzMDMwMzYzNzM2LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ
AwcAKgpgQLHxMA0GCSqGSIb3DQEBCwUAA4IBAQBMJFjeDBXWB2UF7ikgfT6h33Ds
x+5xub3kSoYGJnfMyeE4RBovy1eO2sHfWzgteAG1Fu2AevJ0IaytFxev0gYhvtrt
mx/8AEvKlYjsa1Nsif5+f9DCcDTXqLQgXcy3zYRXwYT6jawGnMxJnAK3uqBoPh2Z
e13yPo/kO94bGVyGimIM444XYAVPoWqlJgLpEriZQgV6rz4oUxxKCB2wHjWku5Uo
LTu4nqGn1EBKIPi1u3LxZhKvQzIqPhAYGtEhwYV40QpZHAeZFegY1x4MR13MJSWo
6AD1bklj6v9kEWGWKNp5D8xdger7lMTGBrLNqvntt9uBVCy28lm2oc4jGRmu
-----END CERTIFICATE-----