Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/SVENS-RPKI/0/326130613a363034303a623166363a3a2f34382d3438203d3e203530373535.roa
File:                     326130613a363034303a623166363a3a2f34382d3438203d3e203530373535.roa (raw, json)
Hash identifier:          QTMCd1IM+cgPDSPDEtVfCQZChiCYSyn1TIXVIY95CO4=
Subject key identifier:   1F:A7:B7:E0:2E:AB:E2:6C:D0:E7:49:23:30:4C:9F:B7:97:C9:83:9D
Certificate issuer:       /CN=3D0D05110F2F8F2322DC87EEC86671D6F3BA8684
Certificate serial:       723A2BC3F51091817B62CEE1E9D7135CA1AF9D37
Authority key identifier: 3D:0D:05:11:0F:2F:8F:23:22:DC:87:EE:C8:66:71:D6:F3:BA:86:84
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3D0D05110F2F8F2322DC87EEC86671D6F3BA8684.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/SVENS-RPKI/0/326130613a363034303a623166363a3a2f34382d3438203d3e203530373535.roa
Signing time:             Sat 10 Feb 2024 16:20:06 +0000
ROA not before:           Sat 10 Feb 2024 16:15:06 +0000
ROA not after:            Sat 08 Feb 2025 16:20:06 +0000
asID:                     50755
IP address blocks:        2a0a:6040:b1f6::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:3a:2b:c3:f5:10:91:81:7b:62:ce:e1:e9:d7:13:5c:a1:af:9d:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D0D05110F2F8F2322DC87EEC86671D6F3BA8684
        Validity
            Not Before: Feb 10 16:15:06 2024 GMT
            Not After : Feb  8 16:20:06 2025 GMT
        Subject: CN=1FA7B7E02EABE26CD0E74923304C9FB797C9839D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:0e:5b:92:b8:9d:5e:28:fb:3b:02:38:66:65:
                    e6:57:c2:dd:86:69:47:55:94:e9:28:2d:3d:b5:bb:
                    75:4d:84:ec:22:88:7f:19:96:2e:2d:9c:dc:d1:72:
                    62:ba:57:bb:89:48:8c:4d:95:1a:a4:d7:fc:be:4b:
                    b5:d6:5f:bb:17:49:3d:d7:d7:d8:c3:a7:4e:e5:a4:
                    18:67:53:f8:0d:1e:3b:5a:e6:9b:9a:ce:3f:6c:1f:
                    f7:92:5b:bd:31:34:28:b1:f6:b1:c2:a5:3f:04:af:
                    91:8b:6e:dd:7f:5f:52:35:6a:bc:ea:19:7b:36:6a:
                    ce:f5:e0:5a:d1:4f:58:68:07:72:20:a7:1c:da:e3:
                    4c:b3:c1:67:9f:9f:88:e0:de:1c:89:64:b2:1d:44:
                    00:3e:7f:31:47:99:2b:c4:7e:7d:51:6b:98:19:98:
                    77:7a:d1:00:bc:a3:66:0b:ab:a4:b3:b7:a2:1b:9d:
                    a5:a2:30:41:9f:a2:22:2b:be:e0:bb:e3:6a:83:0c:
                    78:bc:d3:38:6c:fc:4e:ff:ca:48:86:a4:ce:6c:cb:
                    63:54:31:15:ec:1e:fe:15:b4:79:4c:d5:23:7c:48:
                    e1:cb:d1:c7:75:80:fc:60:48:9f:6d:0d:34:79:5d:
                    92:9f:37:d4:65:f3:31:46:88:f8:47:3a:23:37:a2:
                    3a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:A7:B7:E0:2E:AB:E2:6C:D0:E7:49:23:30:4C:9F:B7:97:C9:83:9D
            X509v3 Authority Key Identifier:
                keyid:3D:0D:05:11:0F:2F:8F:23:22:DC:87:EE:C8:66:71:D6:F3:BA:86:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/SVENS-RPKI/0/3D0D05110F2F8F2322DC87EEC86671D6F3BA8684.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3D0D05110F2F8F2322DC87EEC86671D6F3BA8684.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/SVENS-RPKI/0/326130613a363034303a623166363a3a2f34382d3438203d3e203530373535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:b1f6::/48

    Signature Algorithm: sha256WithRSAEncryption
         87:e0:94:0e:0e:68:4c:ac:28:a0:1b:19:e7:53:47:41:6d:bf:
         fa:a3:89:9d:25:c9:28:6c:bd:6a:7e:13:83:c2:39:cd:d4:c4:
         8f:23:ab:86:2b:61:c4:69:2c:cf:51:df:57:9e:85:3f:ad:85:
         c8:04:b9:ec:85:e9:84:7c:e3:3b:20:47:15:e1:c2:e3:c8:97:
         de:3e:4e:18:1d:25:19:32:fc:0c:93:e2:24:51:23:a9:cf:7d:
         3a:6a:1e:03:ca:84:28:b3:7f:59:8a:69:73:c8:e1:f9:4e:86:
         1e:f8:22:42:ac:d2:f8:2b:73:5d:c4:a8:09:5e:79:b3:5f:ea:
         c8:ac:07:c9:20:e3:a8:6f:9e:4f:e9:2b:af:e0:1a:ca:24:aa:
         9a:25:1e:c8:51:59:81:6a:ba:3a:34:13:5f:18:b1:89:29:49:
         7a:f5:02:4b:89:91:bf:c2:8f:8e:0d:2b:dd:ea:f6:42:ee:09:
         e7:e8:96:e4:35:15:3f:b0:b7:8b:0a:e2:eb:b8:58:36:e2:c3:
         1c:f2:3d:38:89:07:ab:58:fb:88:7e:21:53:b5:94:00:94:47:
         1a:cb:bb:bf:15:45:b8:43:62:47:04:21:4f:b7:ad:38:d6:d5:
         6a:2d:1e:af:ff:d2:87:f1:27:be:21:43:09:79:5a:85:55:5b:
         28:59:fb:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----