Route Origin Authorization

$ rpki-client -vvf rpki.nap.re/repo/pongery/3/326130613a363034353a666630633a3a2f34382d3438203d3e20323030313630.roa
File:                     326130613a363034353a666630633a3a2f34382d3438203d3e20323030313630.roa (raw, json)
Hash identifier:          tlDM7u76AVcJ7Fq8G+4Vqpfv/cwE+NMKOvQmMPMS8vM=
Subject key identifier:   DC:51:19:30:B8:2C:AC:E7:21:F3:CE:8F:76:39:5B:1A:8B:C5:07:88
Certificate issuer:       /CN=14381C26711B2A305C5F9C3BC122D9A3B0269E71
Certificate serial:       46A0EA0096678F695555C329EC5D26F81AD7E51F
Authority key identifier: 14:38:1C:26:71:1B:2A:30:5C:5F:9C:3B:C1:22:D9:A3:B0:26:9E:71
Authority info access:    rsync://rpki.komorebi.network/repo/komorebi/1/14381C26711B2A305C5F9C3BC122D9A3B0269E71.cer
Subject info access:      rsync://rpki.nap.re/repo/pongery/3/326130613a363034353a666630633a3a2f34382d3438203d3e20323030313630.roa
Signing time:             Wed 17 Jan 2024 12:15:32 +0000
ROA not before:           Wed 17 Jan 2024 12:10:32 +0000
ROA not after:            Wed 15 Jan 2025 12:15:32 +0000
asID:                     200160
IP address blocks:        2a0a:6045:ff0c::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:a0:ea:00:96:67:8f:69:55:55:c3:29:ec:5d:26:f8:1a:d7:e5:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14381C26711B2A305C5F9C3BC122D9A3B0269E71
        Validity
            Not Before: Jan 17 12:10:32 2024 GMT
            Not After : Jan 15 12:15:32 2025 GMT
        Subject: CN=DC511930B82CACE721F3CE8F76395B1A8BC50788
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a5:80:78:ec:23:77:e2:19:06:77:fb:0b:30:
                    79:35:9d:b0:e8:f1:bc:86:59:4b:66:ac:fa:d5:d0:
                    59:3d:41:59:ec:1e:c3:fe:31:85:a7:11:0e:37:2c:
                    81:65:be:0d:1a:e9:5f:d4:ee:48:7c:75:bd:fc:30:
                    4d:d3:18:3f:4f:78:fc:93:c7:7d:c4:2b:e1:69:06:
                    cf:86:9c:a3:c3:80:85:37:b8:46:43:df:e7:ab:dc:
                    28:10:6c:62:05:7b:1c:e3:4e:c8:4e:f9:b7:e5:3e:
                    e0:c2:11:9e:f9:2b:b9:3e:58:1a:01:71:5e:de:cf:
                    28:f0:98:8c:3a:42:be:03:68:db:f6:82:74:eb:5a:
                    50:94:61:85:de:48:95:1f:15:6d:f3:59:b7:e0:5e:
                    47:d9:64:3c:17:45:92:f8:07:40:6e:a8:03:f6:59:
                    b4:b5:dc:3d:68:a6:e9:3a:04:38:b2:64:21:a6:e2:
                    4e:64:71:28:ec:b5:da:3d:fb:24:5e:99:53:0f:c1:
                    0f:c7:6e:4e:03:c8:0d:4a:67:70:53:3e:1d:b2:b6:
                    30:73:3e:96:de:53:01:c2:22:09:c1:18:d4:ef:12:
                    10:79:e4:d2:da:27:33:27:a0:91:77:0c:f0:f7:58:
                    e3:b4:4c:54:1c:8d:73:05:c7:0f:67:ef:8d:63:90:
                    24:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:51:19:30:B8:2C:AC:E7:21:F3:CE:8F:76:39:5B:1A:8B:C5:07:88
            X509v3 Authority Key Identifier:
                keyid:14:38:1C:26:71:1B:2A:30:5C:5F:9C:3B:C1:22:D9:A3:B0:26:9E:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.nap.re/repo/pongery/3/14381C26711B2A305C5F9C3BC122D9A3B0269E71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.komorebi.network/repo/komorebi/1/14381C26711B2A305C5F9C3BC122D9A3B0269E71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.nap.re/repo/pongery/3/326130613a363034353a666630633a3a2f34382d3438203d3e20323030313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6045:ff0c::/48

    Signature Algorithm: sha256WithRSAEncryption
         ab:67:6b:1b:0e:38:ed:dd:ad:c6:b0:b6:3a:21:0c:36:13:ad:
         8c:28:a2:b5:76:02:77:38:01:18:8a:43:d6:9d:76:95:27:fb:
         4d:32:3d:da:6a:aa:9b:8c:82:32:7d:5b:9a:ee:da:63:25:92:
         e1:37:84:11:96:df:59:74:46:46:99:fc:16:95:11:20:85:c4:
         29:69:31:e0:fb:64:7c:89:11:4c:97:2b:24:3f:49:19:bb:87:
         43:5e:0a:51:16:2a:d8:f3:e0:3c:df:8b:76:bd:07:04:c2:eb:
         8f:c4:2b:19:9f:11:03:81:01:80:f7:b7:4e:be:83:be:3b:57:
         54:ea:5b:d1:ed:51:bb:62:79:c6:44:b8:ca:13:1c:ba:62:e6:
         d2:84:1e:41:12:ce:20:e1:14:eb:ef:4b:b0:f1:9a:70:e9:7d:
         89:82:13:9e:86:cc:41:09:c1:e5:b4:5a:56:c4:24:a0:0e:47:
         99:8e:54:51:79:52:7a:09:34:ec:47:f1:19:d0:e6:6b:f6:03:
         81:ae:08:ef:90:93:09:66:af:2a:ce:65:5e:5f:84:42:7a:a0:
         e0:d6:16:ae:63:4a:20:c9:9a:73:1c:d3:c4:be:40:79:36:b6:
         3f:1c:9a:bb:a1:af:85:08:09:6b:3d:cd:d7:6c:d9:49:8c:bd:
         b8:d6:6c:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----