Route Origin Authorization

$ rpki-client -vvf rpki.nap.re/repo/pongery/3/326130613a363034353a666630373a3a2f34382d3438203d3e20323030313630.roa
File:                     326130613a363034353a666630373a3a2f34382d3438203d3e20323030313630.roa (raw, json)
Hash identifier:          aLLa8XjAe+NxQ4BJdhfQ5lXpwMSbRtHQywJpW6U1Kus=
Subject key identifier:   1E:B7:04:B3:30:8A:11:59:00:B1:90:69:DB:78:44:24:70:69:C8:72
Certificate issuer:       /CN=14381C26711B2A305C5F9C3BC122D9A3B0269E71
Certificate serial:       13F40AD3A09F0CD2E6D5BF94D00BE3D552AB9986
Authority key identifier: 14:38:1C:26:71:1B:2A:30:5C:5F:9C:3B:C1:22:D9:A3:B0:26:9E:71
Authority info access:    rsync://rpki.komorebi.network/repo/komorebi/1/14381C26711B2A305C5F9C3BC122D9A3B0269E71.cer
Subject info access:      rsync://rpki.nap.re/repo/pongery/3/326130613a363034353a666630373a3a2f34382d3438203d3e20323030313630.roa
Signing time:             Wed 17 Jan 2024 12:14:47 +0000
ROA not before:           Wed 17 Jan 2024 12:09:47 +0000
ROA not after:            Wed 15 Jan 2025 12:14:47 +0000
asID:                     200160
IP address blocks:        2a0a:6045:ff07::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:f4:0a:d3:a0:9f:0c:d2:e6:d5:bf:94:d0:0b:e3:d5:52:ab:99:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14381C26711B2A305C5F9C3BC122D9A3B0269E71
        Validity
            Not Before: Jan 17 12:09:47 2024 GMT
            Not After : Jan 15 12:14:47 2025 GMT
        Subject: CN=1EB704B3308A115900B19069DB7844247069C872
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:61:10:f9:2a:55:a9:22:1c:ae:de:6c:7b:4e:
                    7d:79:dc:ee:fe:a2:20:00:1f:80:d9:49:be:e9:01:
                    8c:48:a6:6f:12:aa:1d:04:af:6e:0c:5e:63:f1:08:
                    2e:c5:da:01:d7:33:0e:5d:f5:af:74:0c:f6:1a:45:
                    30:fb:db:00:d0:1b:6a:1f:fb:c4:e1:fb:5e:ab:72:
                    50:38:17:d0:a5:28:7a:e9:ce:5d:39:21:bd:33:37:
                    b1:e3:14:4a:60:99:60:0e:26:35:d8:6e:dd:b0:e2:
                    16:3c:b8:11:23:d8:6a:6b:a5:9a:4d:5f:bc:19:71:
                    ce:a0:63:4a:f4:cb:7a:ad:1d:30:0a:d4:3c:c4:e7:
                    a5:dd:1b:f5:9c:95:b0:85:c1:68:2a:84:7f:39:a6:
                    64:7a:4c:ad:ee:3b:ea:a0:f1:fc:59:63:b7:66:d5:
                    97:44:37:0f:e3:82:29:11:34:21:7d:49:8c:7e:e3:
                    fb:9a:f3:1f:c1:d9:37:ef:8f:f8:a6:4b:db:f2:b4:
                    7b:a0:ba:42:e7:07:ef:89:08:31:08:8c:ed:34:98:
                    7d:82:79:8b:51:e2:1b:f9:db:51:63:b9:20:3c:df:
                    5f:e5:c4:18:85:be:5b:f4:3b:8a:27:79:5a:2e:2a:
                    8d:c0:3e:67:3a:51:42:2b:f9:80:71:66:3b:c0:5b:
                    14:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:B7:04:B3:30:8A:11:59:00:B1:90:69:DB:78:44:24:70:69:C8:72
            X509v3 Authority Key Identifier:
                keyid:14:38:1C:26:71:1B:2A:30:5C:5F:9C:3B:C1:22:D9:A3:B0:26:9E:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.nap.re/repo/pongery/3/14381C26711B2A305C5F9C3BC122D9A3B0269E71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.komorebi.network/repo/komorebi/1/14381C26711B2A305C5F9C3BC122D9A3B0269E71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.nap.re/repo/pongery/3/326130613a363034353a666630373a3a2f34382d3438203d3e20323030313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6045:ff07::/48

    Signature Algorithm: sha256WithRSAEncryption
         19:79:e3:45:68:bb:32:25:d0:a5:d4:2d:dd:49:74:76:a4:3e:
         6a:ea:17:c2:d1:b1:20:43:95:3e:38:6d:7e:c9:13:41:b1:36:
         a9:e6:14:37:4c:e3:c8:14:90:b7:d2:a6:cf:82:f6:78:46:fd:
         1d:2e:99:4e:16:71:67:e4:99:43:d4:fa:c1:83:a3:5f:c8:3a:
         d6:42:50:c1:0e:f3:f0:fd:f8:25:e9:7e:91:7e:23:24:e2:cb:
         f4:78:e9:45:77:88:8b:0a:a4:46:24:53:c3:cf:8d:92:80:ab:
         4c:99:9a:33:35:72:c1:08:f2:ef:bd:50:2e:01:95:82:57:9e:
         04:94:0a:39:8e:89:72:e2:70:8e:0a:c6:24:50:55:75:28:4d:
         21:07:af:d7:8a:7a:f2:59:65:90:50:0a:a9:ce:c3:b5:31:a1:
         94:6f:75:2d:fc:30:d9:c8:d5:95:bd:44:58:08:38:14:92:50:
         70:7b:ff:e3:eb:0f:82:11:90:08:62:2a:c0:b2:3d:52:c8:c7:
         3f:6c:96:82:b4:09:de:45:45:51:9d:0d:70:6e:1d:49:08:6a:
         22:f5:e9:41:c9:4b:01:65:48:db:e9:b7:bd:e4:6a:b0:c7:ba:
         05:8f:7d:d6:d9:8c:0f:a4:b0:9c:1a:2a:7b:fd:dd:c6:78:00:
         70:60:c5:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----