Route Origin Authorization

$ rpki-client -vvf rpki.nap.re/repo/pongery/7/326130613a363034353a643030303a3a2f33362d3438203d3e20323039303235.roa
File:                     326130613a363034353a643030303a3a2f33362d3438203d3e20323039303235.roa (raw, json)
Hash identifier:          Xm6FmrrYW8tiKTwwQAOMXiwTHEDdbkUf4klQN/AN+Lk=
Subject key identifier:   C9:8B:21:9D:25:E1:8D:11:E6:8D:41:F3:4B:C2:9F:07:CB:AF:4D:AE
Certificate issuer:       /CN=3CAC7D0CED6AF4886DB92275199D05B19CCB1112
Certificate serial:       23F38899E4D8AF957BD1B1FD7583A1D4D493E450
Authority key identifier: 3C:AC:7D:0C:ED:6A:F4:88:6D:B9:22:75:19:9D:05:B1:9C:CB:11:12
Authority info access:    rsync://rpki.komorebi.network/repo/komorebi/1/3CAC7D0CED6AF4886DB92275199D05B19CCB1112.cer
Subject info access:      rsync://rpki.nap.re/repo/pongery/7/326130613a363034353a643030303a3a2f33362d3438203d3e20323039303235.roa
Signing time:             Mon 05 Aug 2024 10:35:23 +0000
ROA not before:           Mon 05 Aug 2024 10:30:23 +0000
ROA not after:            Mon 04 Aug 2025 10:35:23 +0000
asID:                     209025
IP address blocks:        2a0a:6045:d000::/36 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:f3:88:99:e4:d8:af:95:7b:d1:b1:fd:75:83:a1:d4:d4:93:e4:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CAC7D0CED6AF4886DB92275199D05B19CCB1112
        Validity
            Not Before: Aug  5 10:30:23 2024 GMT
            Not After : Aug  4 10:35:23 2025 GMT
        Subject: CN=C98B219D25E18D11E68D41F34BC29F07CBAF4DAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c9:e4:c8:b9:4c:44:84:01:e7:7b:ae:48:e3:
                    99:9f:86:2f:63:ef:40:fb:67:0d:9b:27:fd:6a:6b:
                    a0:5d:2f:46:c7:03:70:9e:fe:07:9f:5e:30:9e:7d:
                    46:56:e0:b8:c1:d0:8c:43:67:c6:92:b5:b1:c7:f5:
                    f1:c2:ba:02:ec:98:40:74:7a:8a:68:5b:a8:e0:9e:
                    3c:85:51:5f:a3:c5:58:b7:ff:18:dd:59:35:5d:e5:
                    71:e7:7a:f5:5d:29:6b:57:7b:e2:5a:ec:d9:68:09:
                    d9:56:ef:51:53:77:3d:3a:e6:e6:14:e0:51:af:22:
                    12:8e:e8:37:07:86:75:28:69:49:df:64:3f:1b:3c:
                    40:3b:7f:ca:f3:40:59:b7:8f:cf:8e:b0:e5:65:55:
                    32:6e:78:83:1e:cb:df:85:49:9b:0b:fe:75:c9:a7:
                    99:d8:7e:93:10:0d:57:56:dd:59:8d:6a:e7:c2:b3:
                    d5:3d:0c:68:30:2b:0c:82:cc:67:c0:fa:e5:48:e0:
                    07:aa:66:16:33:ea:b9:44:87:89:63:93:19:cc:83:
                    ce:f5:87:4e:dd:12:69:d3:55:3f:1c:a6:57:30:ba:
                    0c:6f:6e:5c:92:53:95:cc:58:09:4a:82:7a:fe:9a:
                    53:bc:e3:a2:51:07:1b:59:a1:c0:51:fe:23:14:cf:
                    1e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:8B:21:9D:25:E1:8D:11:E6:8D:41:F3:4B:C2:9F:07:CB:AF:4D:AE
            X509v3 Authority Key Identifier:
                keyid:3C:AC:7D:0C:ED:6A:F4:88:6D:B9:22:75:19:9D:05:B1:9C:CB:11:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.nap.re/repo/pongery/7/3CAC7D0CED6AF4886DB92275199D05B19CCB1112.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.komorebi.network/repo/komorebi/1/3CAC7D0CED6AF4886DB92275199D05B19CCB1112.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.nap.re/repo/pongery/7/326130613a363034353a643030303a3a2f33362d3438203d3e20323039303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6045:d000::/36

    Signature Algorithm: sha256WithRSAEncryption
         76:e2:09:ae:1c:0d:13:36:89:9f:64:a5:e8:42:30:c1:33:d1:
         dc:7b:d1:85:e1:a5:0b:43:97:60:32:57:49:bf:b5:b0:e4:ee:
         82:93:1f:eb:b8:f7:e6:d9:ea:a8:4a:24:14:b9:03:fc:7c:cf:
         e9:87:ff:3d:7c:cb:66:ce:98:0f:a2:91:52:12:da:69:4e:9f:
         e1:1b:41:c7:07:b6:b5:ba:30:d0:06:fc:a2:e8:7f:32:51:2d:
         f5:ec:3c:aa:4b:86:23:a1:a2:b1:bc:11:b7:41:7f:05:37:bc:
         3b:7b:d5:a5:17:67:42:0c:3e:65:25:af:7b:26:ee:f3:fb:73:
         35:c8:5b:77:75:6a:e3:cc:b5:39:8e:f1:0a:5b:17:3f:4d:07:
         f9:0c:1a:69:1b:af:cd:d1:10:dd:02:5b:cb:90:b3:a5:e6:7b:
         27:e4:49:d9:79:5e:2e:7e:d1:3a:b0:0a:66:44:dc:9d:40:e4:
         56:5c:06:5a:3f:d2:ca:ee:c3:d4:2d:7f:ad:17:71:0d:c2:bb:
         17:a8:c5:24:1e:bd:b6:7e:06:0d:b2:52:c1:b8:4f:47:dd:29:
         3f:61:c1:58:82:02:6f:00:a3:0c:09:8c:9e:e0:ec:d7:7a:7c:
         7c:e5:53:eb:c8:a5:1e:08:c4:d5:c6:be:d9:e7:95:e1:1a:12:
         78:93:25:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 6 06:29:46 2024 by rpki-client on console-fra.rpki-client.org