Route Origin Authorization

$ rpki-client -vvf rpki.nap.re/repo/pongery/3/326130613a363034353a666630323a3a2f34382d3438203d3e20323030313630.roa
File:                     326130613a363034353a666630323a3a2f34382d3438203d3e20323030313630.roa (raw, json)
Hash identifier:          R6tYGhPEXA9SNGZ5PIxyWF/Es5NjcfqkucfCOuQikak=
Subject key identifier:   0C:4F:F8:B9:80:A7:24:CD:8B:62:DA:28:8D:D2:47:4C:9C:D8:20:6F
Certificate issuer:       /CN=14381C26711B2A305C5F9C3BC122D9A3B0269E71
Certificate serial:       47864B205203D36C7809E53E1F282EC3760F9C20
Authority key identifier: 14:38:1C:26:71:1B:2A:30:5C:5F:9C:3B:C1:22:D9:A3:B0:26:9E:71
Authority info access:    rsync://rpki.komorebi.network/repo/komorebi/1/14381C26711B2A305C5F9C3BC122D9A3B0269E71.cer
Subject info access:      rsync://rpki.nap.re/repo/pongery/3/326130613a363034353a666630323a3a2f34382d3438203d3e20323030313630.roa
Signing time:             Wed 17 Jan 2024 12:13:00 +0000
ROA not before:           Wed 17 Jan 2024 12:08:00 +0000
ROA not after:            Wed 15 Jan 2025 12:13:00 +0000
asID:                     200160
IP address blocks:        2a0a:6045:ff02::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:86:4b:20:52:03:d3:6c:78:09:e5:3e:1f:28:2e:c3:76:0f:9c:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14381C26711B2A305C5F9C3BC122D9A3B0269E71
        Validity
            Not Before: Jan 17 12:08:00 2024 GMT
            Not After : Jan 15 12:13:00 2025 GMT
        Subject: CN=0C4FF8B980A724CD8B62DA288DD2474C9CD8206F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:1e:17:e9:14:29:6e:dc:b5:f9:7d:9e:96:7e:
                    c5:f2:6c:d3:9b:d0:74:f2:f9:0a:5e:00:3f:ff:50:
                    de:8e:a6:b4:58:aa:e9:89:2c:7a:69:52:a2:a1:b1:
                    1f:d6:64:36:5e:48:0e:21:51:4c:b6:95:9f:84:e0:
                    8c:e6:fc:e4:46:f6:50:cb:4c:48:98:c5:b6:ee:a5:
                    e3:d2:43:c1:ff:9c:8d:1e:94:8a:d5:d5:19:f4:8f:
                    b9:dc:85:66:bc:95:be:86:6b:a4:0c:ba:e8:6e:28:
                    c1:3a:58:e9:20:25:fa:28:f5:55:2d:05:f2:d0:56:
                    ad:1c:7d:45:0a:c8:3a:bc:df:77:7c:a6:2b:5d:8b:
                    3a:95:b1:37:b5:17:73:ba:b0:73:7e:71:ac:c3:2c:
                    33:2d:da:04:98:67:b2:32:ed:b7:53:60:81:3a:e3:
                    55:9d:e1:4d:29:f7:b8:ec:06:70:2f:e0:02:45:99:
                    e4:1d:b5:ec:e1:1a:f6:59:02:a3:ab:0e:56:c4:ef:
                    67:24:d2:71:e8:ea:47:30:40:ef:96:10:ed:2e:0f:
                    49:6f:59:13:01:c8:d6:2d:9b:6b:a9:97:6e:50:0b:
                    cd:29:b5:c1:e3:df:45:3b:71:af:84:3c:44:03:d6:
                    78:dd:d9:10:53:40:2a:76:c6:1a:a8:fd:42:a0:3a:
                    75:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:4F:F8:B9:80:A7:24:CD:8B:62:DA:28:8D:D2:47:4C:9C:D8:20:6F
            X509v3 Authority Key Identifier:
                keyid:14:38:1C:26:71:1B:2A:30:5C:5F:9C:3B:C1:22:D9:A3:B0:26:9E:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.nap.re/repo/pongery/3/14381C26711B2A305C5F9C3BC122D9A3B0269E71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.komorebi.network/repo/komorebi/1/14381C26711B2A305C5F9C3BC122D9A3B0269E71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.nap.re/repo/pongery/3/326130613a363034353a666630323a3a2f34382d3438203d3e20323030313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6045:ff02::/48

    Signature Algorithm: sha256WithRSAEncryption
         54:bb:c4:50:3b:bf:d2:9a:06:f9:4f:e3:74:33:1b:c3:8a:88:
         2f:64:16:b2:51:fe:60:cd:36:9a:6d:a3:32:d3:e3:2f:34:ff:
         00:a9:c3:8f:a0:1d:53:4c:52:c8:0a:1c:de:d0:26:9d:06:77:
         28:91:39:31:35:45:a1:3c:06:f2:a4:47:f7:09:08:9b:7e:d7:
         9e:f7:ef:a6:f1:88:88:48:16:1f:16:d1:75:40:e8:65:77:ed:
         d7:7d:60:f2:94:25:56:01:bb:78:09:6e:30:13:92:55:52:b3:
         57:00:f8:e4:f6:fc:77:31:92:bf:4e:e9:2a:e9:f8:c9:93:cc:
         f4:2a:34:d1:4d:b8:16:6d:57:98:14:81:84:77:e4:57:56:26:
         fa:b3:48:b6:84:8b:fd:44:0f:6b:fc:1c:1c:bb:a4:8a:41:f2:
         f2:f3:54:16:10:5d:5c:18:58:a0:e3:39:03:da:d1:4f:2e:a9:
         c2:dc:d2:47:0c:3c:b6:4f:94:b3:da:ae:36:fd:9d:2e:80:aa:
         c7:4e:d4:44:6d:26:74:4e:4f:5b:2e:f4:4b:08:58:19:5c:4b:
         c4:1f:b6:4e:c0:ee:a1:88:c4:ad:d2:40:f1:b1:d2:60:db:b4:
         6f:3b:51:dd:7c:5d:ae:f1:c4:2a:00:5d:ca:3e:55:03:96:75:
         c2:3d:fa:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----