Route Origin Authorization

$ rpki-client -vvf rpki.nap.re/repo/pongery/7/326130613a363034353a666630623a3a2f34382d3438203d3e20323030313630.roa
File:                     326130613a363034353a666630623a3a2f34382d3438203d3e20323030313630.roa (raw, json)
Hash identifier:          Osl2aDgeUxdV32vJlLLlpveIMvoCX6O3nbfj4GfvT88=
Subject key identifier:   38:D7:AA:B7:73:A5:BD:78:89:47:2E:8F:81:69:60:5C:42:3A:5C:20
Certificate issuer:       /CN=3CAC7D0CED6AF4886DB92275199D05B19CCB1112
Certificate serial:       0275B4B0ACFD7E7FE9F1FC580DF12434DBFA2347
Authority key identifier: 3C:AC:7D:0C:ED:6A:F4:88:6D:B9:22:75:19:9D:05:B1:9C:CB:11:12
Authority info access:    rsync://rpki.komorebi.network/repo/komorebi/1/3CAC7D0CED6AF4886DB92275199D05B19CCB1112.cer
Subject info access:      rsync://rpki.nap.re/repo/pongery/7/326130613a363034353a666630623a3a2f34382d3438203d3e20323030313630.roa
Signing time:             Mon 05 Aug 2024 10:35:27 +0000
ROA not before:           Mon 05 Aug 2024 10:30:27 +0000
ROA not after:            Mon 04 Aug 2025 10:35:27 +0000
asID:                     200160
IP address blocks:        2a0a:6045:ff0b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:75:b4:b0:ac:fd:7e:7f:e9:f1:fc:58:0d:f1:24:34:db:fa:23:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CAC7D0CED6AF4886DB92275199D05B19CCB1112
        Validity
            Not Before: Aug  5 10:30:27 2024 GMT
            Not After : Aug  4 10:35:27 2025 GMT
        Subject: CN=38D7AAB773A5BD7889472E8F8169605C423A5C20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:4e:66:26:37:69:97:be:d4:7a:18:dd:3d:83:
                    c6:b0:82:e9:74:ac:54:0b:b8:5c:10:e2:d9:e0:ad:
                    ae:da:db:c1:a0:30:d6:72:69:09:3c:85:39:f9:2f:
                    be:61:70:22:71:9e:29:4b:87:a3:e6:c6:64:30:45:
                    ce:d6:a3:77:ad:ce:b6:21:6a:52:38:3c:7a:0d:b1:
                    cd:a7:18:31:7f:5f:ba:96:c0:23:75:f2:9c:32:e3:
                    ee:1d:fd:b5:3a:8b:20:bd:a0:6e:96:ee:33:36:b5:
                    7f:6b:37:67:12:6a:69:61:2d:0e:af:fd:50:4f:52:
                    47:72:c2:a3:17:d7:0b:f1:f0:26:70:1e:6d:84:04:
                    29:f4:04:0d:5c:56:f2:11:a7:e9:60:70:99:5f:25:
                    de:41:b9:99:75:55:d0:8a:9b:e8:f3:7a:6f:00:6c:
                    ad:dc:63:47:e8:0c:9d:07:a2:9e:d7:c1:12:86:8a:
                    61:8e:ca:59:cd:4d:c0:ce:2a:0f:06:e9:49:92:86:
                    a0:fd:35:71:7c:0f:55:d5:9f:5c:f6:c7:1e:21:6c:
                    d1:01:03:60:9f:7b:52:fe:72:84:61:1c:43:e8:cf:
                    42:a3:d7:64:5b:80:cd:9d:99:cf:0e:73:79:d1:89:
                    36:9d:c6:5d:28:bf:2e:d5:e3:ce:ae:de:3e:dc:9e:
                    60:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:D7:AA:B7:73:A5:BD:78:89:47:2E:8F:81:69:60:5C:42:3A:5C:20
            X509v3 Authority Key Identifier:
                keyid:3C:AC:7D:0C:ED:6A:F4:88:6D:B9:22:75:19:9D:05:B1:9C:CB:11:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.nap.re/repo/pongery/7/3CAC7D0CED6AF4886DB92275199D05B19CCB1112.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.komorebi.network/repo/komorebi/1/3CAC7D0CED6AF4886DB92275199D05B19CCB1112.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.nap.re/repo/pongery/7/326130613a363034353a666630623a3a2f34382d3438203d3e20323030313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6045:ff0b::/48

    Signature Algorithm: sha256WithRSAEncryption
         35:c0:8b:20:92:db:40:aa:7c:93:64:3e:22:ae:b4:e3:a5:67:
         5c:1c:68:63:08:da:2f:fa:4b:ca:5c:e5:81:a3:2b:0e:18:a0:
         a4:49:c9:8a:ae:7d:d8:80:12:97:9c:5a:fa:cf:02:dc:5d:f1:
         5d:e7:78:af:23:59:d4:57:ae:6d:42:d2:0a:ce:68:b7:f6:e2:
         33:bf:1a:09:31:f1:67:fc:61:b3:c8:a9:66:48:6c:cd:8f:dd:
         6c:2f:09:7a:01:b0:7f:ea:45:03:5f:90:a6:06:98:68:d1:ed:
         f3:d7:5e:18:de:d9:6f:19:c7:1a:7d:fa:5c:ab:a1:16:e1:4e:
         95:29:8f:8c:50:48:2a:50:d3:2a:34:63:9d:3d:f3:ef:e8:48:
         b9:6e:49:48:b2:20:bc:df:dc:4a:da:dd:dd:22:30:1b:46:c4:
         43:d9:a2:71:bf:2e:fc:ad:4e:91:5f:f4:95:15:22:6f:ba:09:
         b4:c4:dd:b6:51:62:0b:de:7e:c2:71:0d:8c:4a:be:c2:03:3e:
         1f:c9:a9:a4:2b:0e:d7:13:06:2d:3f:47:6b:c3:5d:2e:e1:80:
         97:b8:d1:ae:39:1a:e8:c9:b7:fc:77:c4:88:a6:42:bf:0e:fa:
         94:cd:83:02:f0:87:14:f7:c6:50:c5:13:7c:6b:00:b6:ec:1a:
         dd:3f:db:a4
-----BEGIN CERTIFICATE-----
MIIE6DCCA9CgAwIBAgIUAnW0sKz9fn/p8fxYDfEkNNv6I0cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0NBQzdEMENFRDZBRjQ4ODZEQjkyMjc1MTk5RDA1QjE5
Q0NCMTExMjAeFw0yNDA4MDUxMDMwMjdaFw0yNTA4MDQxMDM1MjdaMDMxMTAvBgNV
BAMTKDM4RDdBQUI3NzNBNUJENzg4OTQ3MkU4RjgxNjk2MDVDNDIzQTVDMjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfTmYmN2mXvtR6GN09g8awgul0
rFQLuFwQ4tngra7a28GgMNZyaQk8hTn5L75hcCJxnilLh6PmxmQwRc7Wo3etzrYh
alI4PHoNsc2nGDF/X7qWwCN18pwy4+4d/bU6iyC9oG6W7jM2tX9rN2cSamlhLQ6v
/VBPUkdywqMX1wvx8CZwHm2EBCn0BA1cVvIRp+lgcJlfJd5BuZl1VdCKm+jzem8A
bK3cY0foDJ0Hop7XwRKGimGOylnNTcDOKg8G6UmShqD9NXF8D1XVn1z2xx4hbNEB
A2Cfe1L+coRhHEPoz0Kj12RbgM2dmc8Oc3nRiTadxl0ovy7V486u3j7cnmAxAgMB
AAGjggHyMIIB7jAdBgNVHQ4EFgQUONeqt3OlvXiJRy6PgWlgXEI6XCAwHwYDVR0j
BBgwFoAUPKx9DO1q9IhtuSJ1GZ0FsZzLERIwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud
HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraS5uYXAucmUvcmVwby9wb25nZXJ5Lzcv
M0NBQzdEMENFRDZBRjQ4ODZEQjkyMjc1MTk5RDA1QjE5Q0NCMTExMi5jcmwwdgYI
KwYBBQUHAQEEajBoMGYGCCsGAQUFBzAChlpyc3luYzovL3Jwa2kua29tb3JlYmku
bmV0d29yay9yZXBvL2tvbW9yZWJpLzEvM0NBQzdEMENFRDZBRjQ4ODZEQjkyMjc1
MTk5RDA1QjE5Q0NCMTExMi5jZXIwgYMGCCsGAQUFBwELBHcwdTBzBggrBgEFBQcw
C4ZncnN5bmM6Ly9ycGtpLm5hcC5yZS9yZXBvL3BvbmdlcnkvNy8zMjYxMzA2MTNh
MzYzMDM0MzUzYTY2NjYzMDYyM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIzMDMw
MzEzNjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEH
AQH/BBMwETAPBAIAAjAJAwcAKgpgRf8LMA0GCSqGSIb3DQEBCwUAA4IBAQA1wIsg
kttAqnyTZD4irrTjpWdcHGhjCNov+kvKXOWBoysOGKCkScmKrn3YgBKXnFr6zwLc
XfFd53ivI1nUV65tQtIKzmi39uIzvxoJMfFn/GGzyKlmSGzNj91sLwl6AbB/6kUD
X5CmBpho0e3z114Y3tlvGccaffpcq6EW4U6VKY+MUEgqUNMqNGOdPfPv6Ei5bklI
siC839xK2t3dIjAbRsRD2aJxvy78rU6RX/SVFSJvugm0xN22UWIL3n7CcQ2MSr7C
Az4fyamkKw7XEwYtP0drw10u4YCXuNGuORroybf8d8SIpkK/DvqUzYMC8IcU98ZQ
xRN8awC27BrdP9uk
-----END CERTIFICATE-----