Route Origin Authorization

$ rpki-client -vvf rpki.nap.re/repo/pongery/3/326130613a363034353a666630353a3a2f34382d3438203d3e20323030313630.roa
File:                     326130613a363034353a666630353a3a2f34382d3438203d3e20323030313630.roa (raw, json)
Hash identifier:          +o+nDkoZHsC16tQy5A6/Ss0KDY/FkkVbACBriSt51E4=
Subject key identifier:   08:E9:41:D1:C4:73:58:91:E3:C5:8F:37:4C:4D:71:FE:F9:4D:63:12
Certificate issuer:       /CN=14381C26711B2A305C5F9C3BC122D9A3B0269E71
Certificate serial:       7ACEDA1FD1FA61EB1FDBFF3C527123DDC2292464
Authority key identifier: 14:38:1C:26:71:1B:2A:30:5C:5F:9C:3B:C1:22:D9:A3:B0:26:9E:71
Authority info access:    rsync://rpki.komorebi.network/repo/komorebi/1/14381C26711B2A305C5F9C3BC122D9A3B0269E71.cer
Subject info access:      rsync://rpki.nap.re/repo/pongery/3/326130613a363034353a666630353a3a2f34382d3438203d3e20323030313630.roa
Signing time:             Mon 12 Feb 2024 05:39:32 +0000
ROA not before:           Mon 12 Feb 2024 05:34:32 +0000
ROA not after:            Mon 10 Feb 2025 05:39:32 +0000
asID:                     200160
IP address blocks:        2a0a:6045:ff05::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:ce:da:1f:d1:fa:61:eb:1f:db:ff:3c:52:71:23:dd:c2:29:24:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14381C26711B2A305C5F9C3BC122D9A3B0269E71
        Validity
            Not Before: Feb 12 05:34:32 2024 GMT
            Not After : Feb 10 05:39:32 2025 GMT
        Subject: CN=08E941D1C4735891E3C58F374C4D71FEF94D6312
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:63:34:fe:c2:e2:b2:31:18:49:9e:ee:22:dc:
                    03:b5:4e:76:4e:e3:cd:a2:53:de:9c:58:cb:6a:e4:
                    38:f0:70:65:02:f2:e7:a9:3f:86:b0:dd:ce:ed:57:
                    25:e2:37:bd:c0:28:f5:f4:64:4b:f1:d3:e0:1c:bc:
                    ef:87:ee:40:b0:35:be:2b:d5:ab:a8:c1:f4:1d:31:
                    27:28:cb:a6:0a:59:15:bf:75:39:4b:3d:0d:ac:2f:
                    bf:ce:f5:13:df:2d:7e:40:ea:82:13:cb:fc:81:8a:
                    f6:b7:c5:5e:9b:bb:40:12:3f:f2:b4:8e:15:bd:cf:
                    e8:c4:3f:f6:59:43:30:d4:41:e8:a0:1f:83:bf:70:
                    91:9e:00:e9:33:2f:c0:6e:f5:ad:06:92:92:d2:ac:
                    b3:15:91:13:30:bf:54:bb:cc:58:c8:20:3e:cb:49:
                    d2:ae:b3:84:18:b4:18:ab:1e:f0:93:e5:af:cc:04:
                    50:3b:ab:3f:58:bf:05:0e:00:12:01:f6:b7:e7:08:
                    45:e1:50:1b:d6:c6:35:a4:f5:e5:38:c5:1b:4a:10:
                    47:e5:19:98:94:e6:50:88:a9:7a:79:ff:f0:12:db:
                    88:b4:9d:55:42:00:ab:aa:f5:7f:ab:d0:8c:af:c6:
                    b3:eb:5d:fc:47:06:c2:a6:78:63:bd:80:4f:85:30:
                    be:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:E9:41:D1:C4:73:58:91:E3:C5:8F:37:4C:4D:71:FE:F9:4D:63:12
            X509v3 Authority Key Identifier:
                keyid:14:38:1C:26:71:1B:2A:30:5C:5F:9C:3B:C1:22:D9:A3:B0:26:9E:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.nap.re/repo/pongery/3/14381C26711B2A305C5F9C3BC122D9A3B0269E71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.komorebi.network/repo/komorebi/1/14381C26711B2A305C5F9C3BC122D9A3B0269E71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.nap.re/repo/pongery/3/326130613a363034353a666630353a3a2f34382d3438203d3e20323030313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6045:ff05::/48

    Signature Algorithm: sha256WithRSAEncryption
         6b:45:9f:82:b2:c8:f5:98:ea:ff:21:81:ff:63:73:98:69:90:
         b3:b4:09:32:41:9a:61:d5:75:72:3a:5c:de:18:f6:88:0a:07:
         ca:66:46:d4:77:9b:fe:dc:9c:49:8f:cb:1d:d9:26:31:f8:d3:
         e4:f2:5d:ab:5b:d4:2b:6c:3e:08:58:e6:9c:b1:fd:b6:ce:3f:
         0a:da:1a:bb:48:49:c8:8d:90:25:4f:ac:99:de:b6:09:a6:de:
         d7:3e:0e:7f:77:75:3e:ec:91:30:3c:94:50:92:d5:a2:ab:18:
         2c:6b:a6:d3:35:44:51:32:b6:74:5f:42:3f:57:ec:3e:91:ef:
         09:13:0d:86:60:bd:bc:f4:7c:36:22:1c:0d:7f:26:16:65:08:
         59:90:8c:66:0c:68:89:81:3b:45:da:90:d6:96:2b:f1:00:e4:
         b2:50:f8:87:41:63:38:45:c3:cc:54:3a:53:d2:67:1f:1f:7a:
         fb:cc:de:56:d8:be:3e:21:77:37:cb:92:15:26:98:f0:21:5a:
         6f:bb:1c:e4:5e:63:56:68:dc:31:c2:ba:08:75:f5:eb:b1:e2:
         36:04:da:b0:2b:0b:74:2e:f3:c9:04:bf:69:7b:85:23:0e:d8:
         23:cc:98:e7:7f:19:dc:ec:81:0a:f8:18:c9:92:53:8a:93:18:
         54:3a:59:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----