Route Origin Authorization

$ rpki-client -vvf rpki.nap.re/repo/pongery/7/326130613a363034353a666630313a3a2f34382d3438203d3e20323030313630.roa
File:                     326130613a363034353a666630313a3a2f34382d3438203d3e20323030313630.roa (raw, json)
Hash identifier:          Zhpz92ZrNaUv2Kfgpy9CQ8ocYghxyTDmixbTNhcm6U8=
Subject key identifier:   B4:99:12:79:B3:EC:28:CA:36:1E:F3:0F:CC:8B:93:87:AB:6F:19:1F
Certificate issuer:       /CN=3CAC7D0CED6AF4886DB92275199D05B19CCB1112
Certificate serial:       45CFF5F1E2F312CBCC32B40D1B790141B21EF3A6
Authority key identifier: 3C:AC:7D:0C:ED:6A:F4:88:6D:B9:22:75:19:9D:05:B1:9C:CB:11:12
Authority info access:    rsync://rpki.komorebi.network/repo/komorebi/1/3CAC7D0CED6AF4886DB92275199D05B19CCB1112.cer
Subject info access:      rsync://rpki.nap.re/repo/pongery/7/326130613a363034353a666630313a3a2f34382d3438203d3e20323030313630.roa
Signing time:             Mon 05 Aug 2024 10:35:27 +0000
ROA not before:           Mon 05 Aug 2024 10:30:27 +0000
ROA not after:            Mon 04 Aug 2025 10:35:27 +0000
asID:                     200160
IP address blocks:        2a0a:6045:ff01::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:cf:f5:f1:e2:f3:12:cb:cc:32:b4:0d:1b:79:01:41:b2:1e:f3:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CAC7D0CED6AF4886DB92275199D05B19CCB1112
        Validity
            Not Before: Aug  5 10:30:27 2024 GMT
            Not After : Aug  4 10:35:27 2025 GMT
        Subject: CN=B4991279B3EC28CA361EF30FCC8B9387AB6F191F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:de:90:20:ce:fa:03:2d:db:1a:0a:98:30:51:
                    41:0c:81:81:13:3f:7b:13:3a:52:04:65:de:0b:93:
                    d5:8b:f7:45:f8:f7:83:9c:4d:29:18:0a:ae:62:d2:
                    1a:bc:bf:7f:3f:d6:7a:a4:6d:e5:53:4a:d2:bc:44:
                    59:48:f7:81:74:99:47:b0:bf:62:a2:c1:a5:d8:ec:
                    48:08:51:64:48:7b:3f:a0:69:78:16:ea:04:03:14:
                    64:04:56:20:56:88:39:9b:02:fa:53:67:0f:d4:1f:
                    b6:20:52:18:4c:fd:0c:8d:77:d7:76:28:d2:c3:08:
                    7b:89:98:17:35:6b:d5:cd:2e:ea:77:3d:28:cc:ee:
                    2f:24:3c:c0:1a:1a:da:b7:25:fa:01:b4:4d:43:87:
                    29:3f:bc:b2:25:fe:67:e1:6c:1e:06:b3:32:11:63:
                    15:d1:7d:61:a1:d8:45:79:98:01:de:af:e1:50:48:
                    c9:59:b8:9a:dc:0f:20:b1:ef:15:31:a9:9f:d5:7f:
                    52:53:b2:04:47:f7:c7:92:fa:34:d8:29:5c:8c:ca:
                    cf:06:95:b7:d0:f9:c8:48:5e:f3:7a:7e:b3:3a:83:
                    45:b1:bf:60:1d:16:be:06:79:d2:58:58:a4:5f:bf:
                    cc:b9:4a:a0:6f:2c:3f:1f:e1:8e:ec:23:ad:8b:8f:
                    00:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:99:12:79:B3:EC:28:CA:36:1E:F3:0F:CC:8B:93:87:AB:6F:19:1F
            X509v3 Authority Key Identifier:
                keyid:3C:AC:7D:0C:ED:6A:F4:88:6D:B9:22:75:19:9D:05:B1:9C:CB:11:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.nap.re/repo/pongery/7/3CAC7D0CED6AF4886DB92275199D05B19CCB1112.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.komorebi.network/repo/komorebi/1/3CAC7D0CED6AF4886DB92275199D05B19CCB1112.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.nap.re/repo/pongery/7/326130613a363034353a666630313a3a2f34382d3438203d3e20323030313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6045:ff01::/48

    Signature Algorithm: sha256WithRSAEncryption
         4e:a3:60:e0:e1:b7:3a:69:54:3d:e8:5c:fe:4c:4f:2c:53:15:
         8e:f3:b7:1d:6d:56:df:ca:40:27:b2:4c:1a:d5:52:2a:86:bc:
         78:51:7e:e4:f2:e4:3c:29:ab:93:dc:8b:09:89:1f:7a:d1:53:
         34:df:fd:04:9f:95:f7:f5:4b:37:46:ff:a5:ac:c8:1b:0d:63:
         a9:81:c8:c0:58:fc:c7:97:da:5e:29:f5:39:6b:01:5c:33:4c:
         58:72:6b:fc:c0:35:61:3c:01:99:9a:ea:9b:bb:d2:19:76:94:
         56:71:48:c7:bc:54:78:c1:f5:18:3d:52:50:96:bd:4b:c5:ee:
         6c:59:1f:a3:60:2c:37:12:fc:44:61:b1:5e:f6:90:f8:0b:d2:
         f2:d9:67:62:32:aa:6e:6f:19:c1:a3:d9:22:9f:49:31:58:6e:
         db:3e:4e:d4:99:87:fe:d3:58:0b:87:66:05:44:21:40:e3:b9:
         d5:31:89:91:57:e4:77:3b:45:40:f1:aa:7f:cf:40:bb:c2:13:
         d0:b3:ed:6c:0f:a2:2d:92:85:4b:12:34:64:04:f4:20:e4:4c:
         81:59:35:7a:f7:77:e1:36:fa:8c:be:d0:9d:65:fa:1e:84:56:
         9e:c7:32:f2:73:81:8f:df:eb:f2:02:0c:5a:cd:eb:75:1c:d0:
         2e:6e:4f:8c
-----BEGIN CERTIFICATE-----
MIIE6DCCA9CgAwIBAgIURc/18eLzEsvMMrQNG3kBQbIe86YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0NBQzdEMENFRDZBRjQ4ODZEQjkyMjc1MTk5RDA1QjE5
Q0NCMTExMjAeFw0yNDA4MDUxMDMwMjdaFw0yNTA4MDQxMDM1MjdaMDMxMTAvBgNV
BAMTKEI0OTkxMjc5QjNFQzI4Q0EzNjFFRjMwRkNDOEI5Mzg3QUI2RjE5MUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa3pAgzvoDLdsaCpgwUUEMgYET
P3sTOlIEZd4Lk9WL90X494OcTSkYCq5i0hq8v38/1nqkbeVTStK8RFlI94F0mUew
v2KiwaXY7EgIUWRIez+gaXgW6gQDFGQEViBWiDmbAvpTZw/UH7YgUhhM/QyNd9d2
KNLDCHuJmBc1a9XNLup3PSjM7i8kPMAaGtq3JfoBtE1Dhyk/vLIl/mfhbB4GszIR
YxXRfWGh2EV5mAHer+FQSMlZuJrcDyCx7xUxqZ/Vf1JTsgRH98eS+jTYKVyMys8G
lbfQ+chIXvN6frM6g0Wxv2AdFr4GedJYWKRfv8y5SqBvLD8f4Y7sI62LjwB/AgMB
AAGjggHyMIIB7jAdBgNVHQ4EFgQUtJkSebPsKMo2HvMPzIuTh6tvGR8wHwYDVR0j
BBgwFoAUPKx9DO1q9IhtuSJ1GZ0FsZzLERIwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud
HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraS5uYXAucmUvcmVwby9wb25nZXJ5Lzcv
M0NBQzdEMENFRDZBRjQ4ODZEQjkyMjc1MTk5RDA1QjE5Q0NCMTExMi5jcmwwdgYI
KwYBBQUHAQEEajBoMGYGCCsGAQUFBzAChlpyc3luYzovL3Jwa2kua29tb3JlYmku
bmV0d29yay9yZXBvL2tvbW9yZWJpLzEvM0NBQzdEMENFRDZBRjQ4ODZEQjkyMjc1
MTk5RDA1QjE5Q0NCMTExMi5jZXIwgYMGCCsGAQUFBwELBHcwdTBzBggrBgEFBQcw
C4ZncnN5bmM6Ly9ycGtpLm5hcC5yZS9yZXBvL3BvbmdlcnkvNy8zMjYxMzA2MTNh
MzYzMDM0MzUzYTY2NjYzMDMxM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIzMDMw
MzEzNjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEH
AQH/BBMwETAPBAIAAjAJAwcAKgpgRf8BMA0GCSqGSIb3DQEBCwUAA4IBAQBOo2Dg
4bc6aVQ96Fz+TE8sUxWO87cdbVbfykAnskwa1VIqhrx4UX7k8uQ8KauT3IsJiR96
0VM03/0En5X39Us3Rv+lrMgbDWOpgcjAWPzHl9peKfU5awFcM0xYcmv8wDVhPAGZ
muqbu9IZdpRWcUjHvFR4wfUYPVJQlr1Lxe5sWR+jYCw3EvxEYbFe9pD4C9Ly2Wdi
MqpubxnBo9kin0kxWG7bPk7UmYf+01gLh2YFRCFA47nVMYmRV+R3O0VA8ap/z0C7
whPQs+1sD6ItkoVLEjRkBPQg5EyBWTV693fhNvqMvtCdZfoehFaexzLyc4GP3+vy
Agxazet1HNAubk+M
-----END CERTIFICATE-----
Generated at Tue Aug 6 07:25:32 2024 by rpki-client on console-ams.rpki-client.org