Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/SVENS-RPKI/0/326130613a363034303a623166353a3a2f34382d3438203d3e20323030363736.roa
File:                     326130613a363034303a623166353a3a2f34382d3438203d3e20323030363736.roa (raw, json)
Hash identifier:          sdoi4yCdrDaWdWcFyfnIkDOTgKfs+14DlL1sUK9RzRk=
Subject key identifier:   10:61:96:A4:7C:7A:13:57:8B:BD:E5:76:52:04:B4:BB:0D:A0:60:DD
Certificate issuer:       /CN=3D0D05110F2F8F2322DC87EEC86671D6F3BA8684
Certificate serial:       68D3356BAA9B05C15B461365DA48F57A528926B0
Authority key identifier: 3D:0D:05:11:0F:2F:8F:23:22:DC:87:EE:C8:66:71:D6:F3:BA:86:84
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3D0D05110F2F8F2322DC87EEC86671D6F3BA8684.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/SVENS-RPKI/0/326130613a363034303a623166353a3a2f34382d3438203d3e20323030363736.roa
Signing time:             Tue 06 Feb 2024 14:20:04 +0000
ROA not before:           Tue 06 Feb 2024 14:15:04 +0000
ROA not after:            Tue 04 Feb 2025 14:20:04 +0000
asID:                     200676
IP address blocks:        2a0a:6040:b1f5::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:d3:35:6b:aa:9b:05:c1:5b:46:13:65:da:48:f5:7a:52:89:26:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D0D05110F2F8F2322DC87EEC86671D6F3BA8684
        Validity
            Not Before: Feb  6 14:15:04 2024 GMT
            Not After : Feb  4 14:20:04 2025 GMT
        Subject: CN=106196A47C7A13578BBDE5765204B4BB0DA060DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d4:ce:47:67:cd:d3:b2:34:a7:21:b6:c8:64:
                    9c:07:61:dd:08:cb:26:10:eb:ec:3f:86:f4:64:78:
                    08:72:79:76:70:4c:5d:f9:5f:93:41:7f:4b:13:f3:
                    42:df:3b:9a:95:e5:34:b2:68:b9:6d:a6:e4:8c:b3:
                    f2:2a:bb:5a:eb:9c:5e:17:17:78:76:7f:3b:1f:08:
                    c2:ce:6c:85:88:29:1e:5d:6e:87:4d:31:dc:f2:7d:
                    b2:b1:16:b1:26:c1:10:e8:54:44:bf:f7:3a:a4:43:
                    56:f2:2f:c4:f8:52:12:1c:46:84:c3:0d:ee:fc:88:
                    0c:92:7c:c1:d7:f4:01:1d:73:65:ec:48:36:b1:ae:
                    de:40:a5:e0:4f:b5:f5:df:aa:e3:58:63:81:b9:a0:
                    54:49:c4:f0:eb:ce:03:ba:3d:14:a6:30:c0:39:b4:
                    20:76:fc:3f:77:56:c7:5b:e7:78:53:92:8b:8f:aa:
                    40:f5:40:1a:a3:9a:8b:11:d2:95:8d:8a:91:e7:44:
                    33:cf:b0:10:1f:3c:74:ac:c1:62:f5:de:76:2d:87:
                    49:64:ba:3f:52:41:57:da:8d:61:82:22:3d:2a:fa:
                    89:9e:45:86:99:f3:2c:84:5d:4f:f5:d8:e3:1c:22:
                    5b:da:a1:7d:2d:b3:7e:ab:bf:e2:60:4c:47:d4:14:
                    f7:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:61:96:A4:7C:7A:13:57:8B:BD:E5:76:52:04:B4:BB:0D:A0:60:DD
            X509v3 Authority Key Identifier:
                keyid:3D:0D:05:11:0F:2F:8F:23:22:DC:87:EE:C8:66:71:D6:F3:BA:86:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/SVENS-RPKI/0/3D0D05110F2F8F2322DC87EEC86671D6F3BA8684.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3D0D05110F2F8F2322DC87EEC86671D6F3BA8684.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/SVENS-RPKI/0/326130613a363034303a623166353a3a2f34382d3438203d3e20323030363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:b1f5::/48

    Signature Algorithm: sha256WithRSAEncryption
         40:d3:52:32:4a:ff:0f:11:c8:c9:d6:f0:35:7d:13:a4:14:79:
         b7:5e:35:4e:0a:6d:e2:62:0b:19:eb:87:3b:99:07:05:89:e0:
         0f:36:df:b6:5d:71:d7:dd:60:40:a9:60:89:cc:7a:3d:6f:e3:
         c7:4b:0a:32:c5:ae:b6:fc:0b:eb:16:60:64:92:77:53:05:3f:
         ac:5f:9a:25:8e:f4:3c:9f:62:0e:9b:e9:15:09:b4:79:24:f4:
         3f:bb:aa:0f:1f:f3:ec:0a:98:a1:ea:81:a9:39:52:dc:17:4a:
         54:fc:a1:df:12:b8:ab:c1:3a:da:9f:b7:a8:8e:9f:ee:d2:6b:
         93:7d:fd:1c:36:2a:18:59:51:61:cc:65:0d:d6:e7:a7:50:dc:
         ce:46:dc:8e:c2:b4:aa:82:56:2e:18:53:57:02:f0:a4:76:1c:
         9f:cf:e0:f8:47:9a:97:05:6c:cd:d0:3e:16:45:43:33:66:e6:
         cb:50:d0:b3:70:9d:3e:ba:ef:d9:0c:3a:ae:e9:83:4d:40:7a:
         bf:b6:3e:b9:b8:3e:db:0b:79:8e:bd:c8:4f:12:6a:1e:6f:64:
         06:8c:e3:ca:da:ef:55:70:94:0a:eb:fb:29:b9:7b:63:aa:35:
         13:11:1c:05:00:d0:e0:b4:2b:80:6b:47:7c:aa:44:fe:b0:8a:
         ee:fb:2a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----