Route Origin Authorization

$ rpki-client -vvf rpki.nap.re/repo/pongery/3/326130613a363034353a666630343a3a2f34382d3438203d3e20323030313630.roa
File:                     326130613a363034353a666630343a3a2f34382d3438203d3e20323030313630.roa (raw, json)
Hash identifier:          kPscFrOqKhUB4Br4fW0Ntcnkd3L0sDfYp7BbIibk/Dc=
Subject key identifier:   92:E9:60:C2:06:96:AB:37:1D:EA:CD:F9:9A:7D:94:A8:78:1E:FF:FA
Certificate issuer:       /CN=14381C26711B2A305C5F9C3BC122D9A3B0269E71
Certificate serial:       60B02268D6067AAA71F2B008F665D1A7E08BA51C
Authority key identifier: 14:38:1C:26:71:1B:2A:30:5C:5F:9C:3B:C1:22:D9:A3:B0:26:9E:71
Authority info access:    rsync://rpki.komorebi.network/repo/komorebi/1/14381C26711B2A305C5F9C3BC122D9A3B0269E71.cer
Subject info access:      rsync://rpki.nap.re/repo/pongery/3/326130613a363034353a666630343a3a2f34382d3438203d3e20323030313630.roa
Signing time:             Mon 12 Feb 2024 05:40:00 +0000
ROA not before:           Mon 12 Feb 2024 05:35:00 +0000
ROA not after:            Mon 10 Feb 2025 05:40:00 +0000
asID:                     200160
IP address blocks:        2a0a:6045:ff04::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:b0:22:68:d6:06:7a:aa:71:f2:b0:08:f6:65:d1:a7:e0:8b:a5:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14381C26711B2A305C5F9C3BC122D9A3B0269E71
        Validity
            Not Before: Feb 12 05:35:00 2024 GMT
            Not After : Feb 10 05:40:00 2025 GMT
        Subject: CN=92E960C20696AB371DEACDF99A7D94A8781EFFFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a5:66:5c:67:2f:8b:3f:56:96:10:e4:f1:63:
                    b6:fe:e6:e3:59:1f:da:7b:ac:44:ca:5b:8e:de:60:
                    bd:0e:d8:88:19:d9:64:84:74:24:74:71:71:4c:3c:
                    b0:04:ed:2d:17:92:35:29:9d:c0:92:c2:b6:4d:9d:
                    99:1c:9f:ee:04:3d:40:37:ce:df:19:b2:6f:4d:08:
                    4d:65:ca:69:75:6d:c6:b8:9b:11:27:90:4d:75:27:
                    be:ed:e5:9c:4b:0d:db:71:03:5e:a1:20:b0:37:4f:
                    41:0c:33:6f:e5:04:9d:7c:2e:7d:9e:8e:97:32:d5:
                    5f:26:bc:13:26:85:64:72:de:c3:27:eb:2c:51:0a:
                    0f:82:23:07:5c:22:a8:21:b6:df:e9:3e:bd:74:d4:
                    a3:e1:7c:53:ec:5f:af:44:7b:9f:4a:1d:a5:34:d4:
                    61:2c:e2:ad:07:86:af:10:d8:12:ad:00:97:62:32:
                    54:e4:60:43:7e:85:0d:37:ad:19:ea:ed:b0:37:d5:
                    7e:a7:e6:b1:e3:94:61:b2:38:1a:85:26:16:0c:b3:
                    63:5e:29:7a:a8:d2:ee:02:c3:1c:e0:02:b2:0f:5a:
                    ca:2b:33:fa:81:fa:21:42:42:de:b7:a7:e5:b5:b8:
                    6e:08:4d:5c:93:10:26:54:45:ac:75:94:e6:fe:65:
                    ce:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:E9:60:C2:06:96:AB:37:1D:EA:CD:F9:9A:7D:94:A8:78:1E:FF:FA
            X509v3 Authority Key Identifier:
                keyid:14:38:1C:26:71:1B:2A:30:5C:5F:9C:3B:C1:22:D9:A3:B0:26:9E:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.nap.re/repo/pongery/3/14381C26711B2A305C5F9C3BC122D9A3B0269E71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.komorebi.network/repo/komorebi/1/14381C26711B2A305C5F9C3BC122D9A3B0269E71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.nap.re/repo/pongery/3/326130613a363034353a666630343a3a2f34382d3438203d3e20323030313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6045:ff04::/48

    Signature Algorithm: sha256WithRSAEncryption
         7d:0f:a0:1d:58:91:ad:ec:5c:05:ae:c4:68:97:c0:f1:c8:4c:
         e8:44:58:7f:2c:b2:6e:b9:15:06:0a:22:d0:68:f8:85:b5:ab:
         48:69:ee:cf:ff:6c:94:1d:5a:72:20:c5:b5:3a:4e:32:43:69:
         e0:d5:a5:f6:17:30:2a:0c:22:be:bf:91:23:cf:29:08:08:d0:
         8a:c9:97:b6:b4:7d:63:8b:67:c6:f4:ee:43:f0:91:e6:df:10:
         1d:ed:44:8f:85:8e:8c:40:06:8f:9e:dd:8d:17:6c:a6:73:6c:
         76:ae:92:7f:2e:ab:86:ba:16:e8:45:87:d0:a0:92:ee:8b:2f:
         d3:ec:72:43:f9:e1:0a:13:04:a1:65:b1:71:3f:2e:9d:e7:81:
         56:e3:a0:77:87:8d:d6:32:d8:be:22:34:1a:28:2d:09:10:ef:
         36:91:55:ce:4c:f8:1e:c5:75:56:ba:3d:13:1d:6a:62:d4:6f:
         d8:c1:75:0c:04:ab:1a:b2:23:b5:ec:8e:b2:eb:7f:2b:17:50:
         9f:9b:7d:29:5b:db:12:fb:a6:8d:65:0c:d5:1e:20:54:af:ab:
         f8:9e:f7:87:63:2d:6a:c8:62:e6:9a:c1:be:f1:24:ce:f0:9a:
         e7:d6:aa:da:47:64:33:59:2a:a2:8f:15:ea:66:0a:c5:30:ec:
         34:f1:03:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----