Route Origin Authorization

$ rpki-client -vvf rpki.nap.re/repo/pongery/3/326130613a363034353a666630623a3a2f34382d3438203d3e20323030313630.roa
File:                     326130613a363034353a666630623a3a2f34382d3438203d3e20323030313630.roa (raw, json)
Hash identifier:          pcW1GAS4zRl6A06RPs+eHPz4I8WYU2eQEVoHxoJrPMw=
Subject key identifier:   72:13:5A:ED:88:A1:6D:8F:CE:E6:39:6D:DF:4C:01:D6:C3:FB:8A:C1
Certificate issuer:       /CN=14381C26711B2A305C5F9C3BC122D9A3B0269E71
Certificate serial:       66026EA65E939F607A018829D3E1FB56A103D884
Authority key identifier: 14:38:1C:26:71:1B:2A:30:5C:5F:9C:3B:C1:22:D9:A3:B0:26:9E:71
Authority info access:    rsync://rpki.komorebi.network/repo/komorebi/1/14381C26711B2A305C5F9C3BC122D9A3B0269E71.cer
Subject info access:      rsync://rpki.nap.re/repo/pongery/3/326130613a363034353a666630623a3a2f34382d3438203d3e20323030313630.roa
Signing time:             Wed 17 Jan 2024 12:14:27 +0000
ROA not before:           Wed 17 Jan 2024 12:09:27 +0000
ROA not after:            Wed 15 Jan 2025 12:14:27 +0000
asID:                     200160
IP address blocks:        2a0a:6045:ff0b::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:02:6e:a6:5e:93:9f:60:7a:01:88:29:d3:e1:fb:56:a1:03:d8:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14381C26711B2A305C5F9C3BC122D9A3B0269E71
        Validity
            Not Before: Jan 17 12:09:27 2024 GMT
            Not After : Jan 15 12:14:27 2025 GMT
        Subject: CN=72135AED88A16D8FCEE6396DDF4C01D6C3FB8AC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:41:67:31:1b:fc:1a:d7:bf:04:b9:cc:aa:0a:
                    a1:84:94:43:52:08:00:6c:32:8e:13:bd:01:93:9d:
                    c4:b1:3c:e3:15:2e:22:cf:2d:ef:5b:fa:a5:58:d4:
                    e4:fe:0f:fd:52:9d:2a:29:31:ca:64:84:28:90:ae:
                    dd:97:82:bf:42:ef:93:2b:dd:a8:ab:b2:3e:58:56:
                    9a:50:57:1e:43:22:23:bb:21:57:f8:ff:8e:f0:e7:
                    96:c9:3d:41:13:97:50:b6:7d:f6:57:ff:dd:f7:70:
                    0d:95:60:1f:24:00:ca:e0:a1:68:6c:95:0b:ac:e1:
                    96:f0:72:cc:93:18:7e:9b:e6:c3:d4:29:eb:f1:38:
                    be:f1:ec:b3:74:22:54:38:22:52:e6:06:1e:1b:d6:
                    bc:60:04:80:08:23:cc:be:ad:7b:b4:f3:f6:1f:be:
                    37:11:47:1b:78:cd:0b:1b:59:e5:98:6b:9f:25:81:
                    ca:bc:cc:eb:af:c5:c0:77:25:cf:1b:c5:ab:79:94:
                    6e:6b:6a:a6:fd:5f:67:03:c7:95:dd:2f:d3:4a:c8:
                    77:56:69:56:3e:ee:a2:56:e6:2b:31:f2:8f:8a:73:
                    cb:24:6e:6f:98:c7:cf:b7:39:1a:4a:11:8a:75:f2:
                    d8:c8:21:49:da:8e:91:38:3e:d9:ac:3e:bd:79:60:
                    5b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:13:5A:ED:88:A1:6D:8F:CE:E6:39:6D:DF:4C:01:D6:C3:FB:8A:C1
            X509v3 Authority Key Identifier:
                keyid:14:38:1C:26:71:1B:2A:30:5C:5F:9C:3B:C1:22:D9:A3:B0:26:9E:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.nap.re/repo/pongery/3/14381C26711B2A305C5F9C3BC122D9A3B0269E71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.komorebi.network/repo/komorebi/1/14381C26711B2A305C5F9C3BC122D9A3B0269E71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.nap.re/repo/pongery/3/326130613a363034353a666630623a3a2f34382d3438203d3e20323030313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6045:ff0b::/48

    Signature Algorithm: sha256WithRSAEncryption
         b5:2b:c9:48:0b:85:0e:70:c3:53:f0:d0:47:49:8c:e0:46:93:
         83:84:76:99:bc:a7:62:a0:c7:3b:7f:2a:ca:2f:1a:2b:c3:01:
         4d:41:e2:5e:c5:4d:5a:ac:22:a1:21:f8:34:22:20:5e:b2:fd:
         c6:65:92:fe:7d:ce:6b:b1:a9:7b:63:b5:97:0b:d0:04:bc:5f:
         c8:e2:53:55:90:d3:bc:58:5f:f7:e6:12:c5:49:98:5e:e4:ef:
         fb:27:22:20:19:a1:66:d9:1c:b4:ff:2e:91:72:6d:b3:cb:05:
         61:f7:1c:c7:17:0c:d6:0a:fa:e2:28:25:68:60:5e:82:0a:aa:
         2d:1c:9e:aa:b6:7e:e6:61:8a:af:a5:c8:9e:8e:f3:26:a6:32:
         4d:5e:ca:80:85:aa:cf:47:09:8d:7c:8a:fa:9b:6f:8b:c2:43:
         ee:e4:0c:fe:e6:84:d2:ea:2a:18:e1:f4:ea:68:eb:6d:47:1e:
         43:60:28:a5:75:3f:9b:38:88:a9:24:d2:5d:0e:75:da:d1:5d:
         84:a7:53:4c:66:3d:ac:e1:5b:89:f2:85:67:da:67:fd:a5:b2:
         c0:cf:b7:f4:0c:d9:b5:54:6a:ec:f3:d5:cf:e4:30:07:ca:aa:
         d2:e7:f1:67:68:91:ce:e0:b2:74:ae:12:99:f9:93:f6:5c:b8:
         cd:e3:3f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----