Route Origin Authorization

$ rpki-client -vvf rpki.nap.re/repo/pongery/3/326130613a363034353a643030303a3a2f33362d3438203d3e20323039303235.roa
File:                     326130613a363034353a643030303a3a2f33362d3438203d3e20323039303235.roa (raw, json)
Hash identifier:          vIH90NcVi/1Oz4C5UpCtxlra4g5D5ZTjBHmjNWBIW2A=
Subject key identifier:   5C:5D:BE:9E:B7:77:DF:8D:62:C8:3C:E2:E4:AF:DF:9A:1A:98:E1:D0
Certificate issuer:       /CN=14381C26711B2A305C5F9C3BC122D9A3B0269E71
Certificate serial:       1D064121E5AF220DD43AE0C423CBBB16B49303B8
Authority key identifier: 14:38:1C:26:71:1B:2A:30:5C:5F:9C:3B:C1:22:D9:A3:B0:26:9E:71
Authority info access:    rsync://rpki.komorebi.network/repo/komorebi/1/14381C26711B2A305C5F9C3BC122D9A3B0269E71.cer
Subject info access:      rsync://rpki.nap.re/repo/pongery/3/326130613a363034353a643030303a3a2f33362d3438203d3e20323039303235.roa
Signing time:             Fri 01 Dec 2023 14:05:58 +0000
ROA not before:           Fri 01 Dec 2023 14:00:58 +0000
ROA not after:            Fri 29 Nov 2024 14:05:58 +0000
asID:                     209025
IP address blocks:        2a0a:6045:d000::/36 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:06:41:21:e5:af:22:0d:d4:3a:e0:c4:23:cb:bb:16:b4:93:03:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14381C26711B2A305C5F9C3BC122D9A3B0269E71
        Validity
            Not Before: Dec  1 14:00:58 2023 GMT
            Not After : Nov 29 14:05:58 2024 GMT
        Subject: CN=5C5DBE9EB777DF8D62C83CE2E4AFDF9A1A98E1D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:17:21:43:98:72:c2:73:1f:fd:02:bf:af:3e:
                    60:47:9c:3f:7d:c1:f8:fb:b5:8e:0f:fb:be:99:7f:
                    8b:51:e6:77:6a:12:3b:65:94:d4:c2:9d:5b:2d:1c:
                    8e:85:b3:00:cb:a6:bf:d5:68:68:76:52:93:c3:cf:
                    f0:1f:c2:d0:31:b7:ec:2f:7c:03:15:b9:aa:6b:65:
                    16:7b:7f:b8:19:c4:00:5c:13:1e:95:21:26:53:05:
                    24:a3:19:50:d1:94:ea:8b:1c:aa:a5:64:1a:3b:9d:
                    10:2c:73:2f:1a:df:be:e5:47:da:e6:86:59:21:92:
                    a6:9b:4f:f5:d6:72:14:20:d0:0a:fb:c6:bf:eb:d1:
                    4d:77:29:f4:be:14:aa:6c:ed:06:57:63:bf:f0:8c:
                    bf:8b:1c:d7:a9:64:b3:4e:d2:c3:d1:4f:57:29:05:
                    88:1b:49:b0:ed:9c:5f:5c:eb:d8:7d:6e:1b:d1:99:
                    70:9a:93:ea:a0:8c:cc:82:e1:8e:77:ac:16:40:8f:
                    45:71:23:d7:4d:93:bd:50:54:4e:95:3f:7e:f6:43:
                    a4:14:b2:ef:fc:c9:0a:ae:e4:bb:f8:0a:df:ec:6b:
                    16:c0:a5:17:dd:a4:2a:6e:0a:ec:ce:9d:a4:f6:11:
                    f9:53:de:06:c2:a1:7f:50:7a:d5:2f:8b:b8:fb:35:
                    43:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:5D:BE:9E:B7:77:DF:8D:62:C8:3C:E2:E4:AF:DF:9A:1A:98:E1:D0
            X509v3 Authority Key Identifier:
                keyid:14:38:1C:26:71:1B:2A:30:5C:5F:9C:3B:C1:22:D9:A3:B0:26:9E:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.nap.re/repo/pongery/3/14381C26711B2A305C5F9C3BC122D9A3B0269E71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.komorebi.network/repo/komorebi/1/14381C26711B2A305C5F9C3BC122D9A3B0269E71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.nap.re/repo/pongery/3/326130613a363034353a643030303a3a2f33362d3438203d3e20323039303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6045:d000::/36

    Signature Algorithm: sha256WithRSAEncryption
         04:8c:56:8a:02:dd:82:27:87:54:a6:cd:0e:af:94:db:a3:06:
         47:e8:0c:ff:ea:d2:99:74:24:55:17:c5:4c:5f:82:59:22:af:
         6f:81:a9:7a:88:f4:0d:c3:bf:5c:73:fe:65:79:c4:41:e5:69:
         0a:f9:64:be:78:6b:56:1e:32:c9:2a:60:ad:bb:c5:43:e9:1e:
         79:7f:34:83:1b:81:b2:65:86:8d:48:a9:ac:44:cf:12:9e:c1:
         9e:02:31:61:6e:df:ae:d4:12:3e:dd:d0:42:e4:d4:b1:23:34:
         5d:80:ad:60:ea:47:64:90:f4:76:67:c2:41:02:3c:d0:a0:df:
         53:19:be:f9:1d:47:41:3b:72:d7:ec:7c:5b:93:f6:31:91:cc:
         c7:42:1a:dd:57:13:3c:e2:e6:b6:d2:29:5d:23:86:8b:f1:ae:
         1f:ca:f1:ba:22:73:fd:01:19:30:e1:1f:17:f7:4d:d2:fc:8d:
         fb:7c:c9:b4:b4:bb:f7:78:05:0c:3e:77:72:3e:54:f1:bf:f8:
         d2:c6:d6:1b:df:09:25:8f:78:b8:19:3b:67:3c:b9:2a:fe:35:
         64:22:f0:5f:dc:09:0e:09:13:69:5b:d5:82:29:f6:9e:6d:44:
         6f:6f:a5:80:d5:af:4d:4c:59:81:ae:e9:3c:6c:26:59:32:23:
         07:26:05:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----