Route Origin Authorization

$ rpki-client -vvf rpki.pedjoeang.group/repo/pedjoeang-digital-networks/2/323630323a666364333a3133303a3a2f34382d3438203d3e20323130353337.roa
File:                     323630323a666364333a3133303a3a2f34382d3438203d3e20323130353337.roa (raw, json)
Hash identifier:          SzvwK+TWSXOMCO3tjhzFKfJKnvr2nTmrNgaQ+i+jeTI=
Subject key identifier:   09:7E:3E:F1:88:5B:2A:D4:FD:86:52:4E:8D:0D:0F:A2:F7:42:24:BE
Certificate issuer:       /CN=0AC8C77DC43B1900E5BFB28C7D50064C80B25CA2
Certificate serial:       7BD625D0B6B59EE07B66BFB51A29B8151636D50B
Authority key identifier: 0A:C8:C7:7D:C4:3B:19:00:E5:BF:B2:8C:7D:50:06:4C:80:B2:5C:A2
Authority info access:    rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/0AC8C77DC43B1900E5BFB28C7D50064C80B25CA2.cer
Subject info access:      rsync://rpki.pedjoeang.group/repo/pedjoeang-digital-networks/2/323630323a666364333a3133303a3a2f34382d3438203d3e20323130353337.roa
Signing time:             Sun 12 Nov 2023 02:00:31 +0000
ROA not before:           Sun 12 Nov 2023 01:55:31 +0000
ROA not after:            Sun 10 Nov 2024 02:00:31 +0000
asID:                     210537
IP address blocks:        2602:fcd3:130::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:d6:25:d0:b6:b5:9e:e0:7b:66:bf:b5:1a:29:b8:15:16:36:d5:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AC8C77DC43B1900E5BFB28C7D50064C80B25CA2
        Validity
            Not Before: Nov 12 01:55:31 2023 GMT
            Not After : Nov 10 02:00:31 2024 GMT
        Subject: CN=097E3EF1885B2AD4FD86524E8D0D0FA2F74224BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:11:1f:9e:c3:91:19:5e:b1:e9:d6:44:bf:10:
                    80:f8:b2:ef:d2:49:ff:14:5d:60:ef:3e:1a:6d:ff:
                    bc:7b:d0:72:57:1f:19:9d:97:a5:72:f7:5d:75:70:
                    e9:1b:2a:38:c8:85:f4:34:9f:00:cb:78:0a:45:20:
                    4c:6e:e3:1e:7c:f9:11:60:60:f2:61:66:fb:1f:7f:
                    c4:81:33:16:a0:6c:e3:07:46:72:06:f4:47:2b:7b:
                    af:12:ad:76:fb:f7:c2:40:82:99:34:34:7b:c5:15:
                    3e:06:e7:3d:ae:72:4d:c1:c1:d0:e9:82:c4:32:22:
                    9a:95:fb:2d:28:f1:91:b1:23:2b:35:0d:39:8b:d1:
                    47:d8:fc:4e:87:1a:9e:8f:6a:67:1c:2e:92:b3:1a:
                    60:7c:79:fe:65:cf:61:e8:1f:90:9f:df:fb:07:05:
                    94:f8:97:1b:7b:b9:37:78:b1:17:30:e2:e1:f8:c4:
                    cd:9a:e4:1c:b6:1c:cb:ab:2c:3c:66:26:67:bf:79:
                    af:78:d5:94:ab:48:00:f6:de:78:d5:49:61:77:81:
                    c6:70:1b:12:1e:d0:cd:7b:ea:7c:c8:cf:95:bd:44:
                    62:d6:79:75:42:5c:db:22:5b:80:28:fd:e3:6d:55:
                    b1:21:2f:6e:72:79:99:e3:95:96:47:39:75:66:78:
                    1d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:7E:3E:F1:88:5B:2A:D4:FD:86:52:4E:8D:0D:0F:A2:F7:42:24:BE
            X509v3 Authority Key Identifier:
                keyid:0A:C8:C7:7D:C4:3B:19:00:E5:BF:B2:8C:7D:50:06:4C:80:B2:5C:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.pedjoeang.group/repo/pedjoeang-digital-networks/2/0AC8C77DC43B1900E5BFB28C7D50064C80B25CA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/0AC8C77DC43B1900E5BFB28C7D50064C80B25CA2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.pedjoeang.group/repo/pedjoeang-digital-networks/2/323630323a666364333a3133303a3a2f34382d3438203d3e20323130353337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcd3:130::/48

    Signature Algorithm: sha256WithRSAEncryption
         58:db:85:e0:30:84:68:46:50:b0:1c:59:73:c1:c5:70:b2:db:
         75:c0:11:bc:b3:5a:60:47:09:1f:f1:c4:f0:95:25:58:1b:9a:
         ce:65:dc:08:d8:70:b0:09:f3:53:4c:b8:13:3a:a9:5c:02:8e:
         8f:e0:34:2a:68:e9:24:16:8d:a8:f0:ad:d3:f3:b1:06:b2:4d:
         de:4c:03:75:6e:d0:91:18:42:ae:e6:15:0f:c0:07:98:cf:4d:
         fc:52:68:61:31:e3:6d:17:7f:2c:99:06:df:a8:9b:c3:9a:f5:
         8a:05:2f:4a:89:9e:80:48:d4:46:06:07:ed:e7:64:7a:07:13:
         17:40:c6:c3:83:34:ef:c1:03:31:50:9d:2a:1b:90:fa:cc:28:
         99:77:3c:04:44:67:e7:64:7b:f1:ce:ed:a5:b7:63:3f:3b:a3:
         0e:84:82:d0:96:3b:a4:5d:05:a9:73:d8:24:ed:44:f9:20:f7:
         0c:34:93:b6:91:cc:b6:c2:bb:83:d3:d6:8f:97:5e:61:11:ad:
         31:b3:c6:91:40:ad:d7:09:70:99:b1:ec:20:59:0e:8e:77:2c:
         c8:e0:9e:0d:b4:31:d5:48:c0:c2:de:11:ba:47:b1:ca:6e:58:
         28:ab:fa:3f:f2:81:fd:28:85:02:92:85:f0:23:0e:9f:4f:5a:
         42:ef:c4:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----