Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a313139363a3a2f34382d3438203d3e2033323039.roa
File:                     326131333a646638303a313139363a3a2f34382d3438203d3e2033323039.roa (raw, json)
Hash identifier:          OM3I4+7m1lrtVLrhAh+Cp6v81atfdsP2LnPnNe7cHK8=
Subject key identifier:   95:2C:16:35:30:89:D4:7C:E2:1F:8D:98:2D:36:38:84:EE:E5:E4:9C
Certificate issuer:       /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial:       7C379B7CDE9252C0E82FBB162E959EC3EF92FECA
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a313139363a3a2f34382d3438203d3e2033323039.roa
Signing time:             Thu 05 Oct 2023 16:17:18 +0000
ROA not before:           Thu 05 Oct 2023 16:12:18 +0000
ROA not after:            Thu 03 Oct 2024 16:17:18 +0000
asID:                     3209
IP address blocks:        2a13:df80:1196::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:37:9b:7c:de:92:52:c0:e8:2f:bb:16:2e:95:9e:c3:ef:92:fe:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
        Validity
            Not Before: Oct  5 16:12:18 2023 GMT
            Not After : Oct  3 16:17:18 2024 GMT
        Subject: CN=952C16353089D47CE21F8D982D363884EEE5E49C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2d:4a:e7:0d:30:2c:ad:ba:fc:94:ec:e6:d0:
                    26:95:07:ca:59:f8:5b:6b:4e:2f:97:dc:84:3a:53:
                    ea:31:65:34:ee:7a:82:c5:be:7d:a1:ad:fc:f3:4b:
                    de:cc:8f:85:22:11:19:ad:4f:6c:45:9c:47:75:50:
                    fc:80:60:0f:11:a6:99:f6:5f:b6:7a:0d:75:cf:bb:
                    50:40:18:62:d8:4a:c6:84:6d:45:89:4d:58:d7:14:
                    e4:dc:54:1b:77:17:17:aa:90:2b:fd:6e:a4:02:55:
                    02:44:f6:34:ac:1c:e0:09:b8:22:ed:a8:76:bc:b9:
                    5e:b5:ea:c0:b3:14:e5:88:51:43:b7:79:b9:d6:c5:
                    54:33:07:b4:93:a3:de:94:b3:21:f7:b7:8f:40:49:
                    fe:bf:95:e9:f5:f2:e0:18:fa:2a:de:9c:b5:aa:83:
                    4e:56:f4:e6:5b:69:83:0a:d0:30:94:a2:b0:08:b6:
                    0a:57:14:9b:a9:bf:7f:4f:04:b3:fa:8e:42:b6:39:
                    e6:12:e8:80:97:e1:81:17:8b:47:1f:51:64:00:2f:
                    2f:d7:79:1b:c4:78:a2:74:51:de:b7:28:2a:f5:87:
                    b7:15:35:af:6d:80:83:cf:a1:e9:40:05:7f:40:c5:
                    0f:ba:b6:0a:38:d2:3f:62:ca:28:5b:5e:3c:47:6d:
                    7f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:2C:16:35:30:89:D4:7C:E2:1F:8D:98:2D:36:38:84:EE:E5:E4:9C
            X509v3 Authority Key Identifier:
                keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a313139363a3a2f34382d3438203d3e2033323039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df80:1196::/48

    Signature Algorithm: sha256WithRSAEncryption
         7e:ca:46:60:3b:4b:8e:c6:c3:49:92:cf:47:28:28:6b:07:85:
         61:4e:15:af:db:eb:3a:e1:7e:27:6c:9a:c1:01:ee:cd:bb:50:
         bd:58:23:86:24:98:81:2c:09:a5:1d:94:93:b9:15:38:3e:a1:
         24:14:65:97:9a:0d:8e:6e:73:e4:32:fc:35:f0:ca:ad:e9:90:
         48:71:f7:c6:aa:27:02:77:59:49:75:c2:fa:6c:ab:e1:3a:3c:
         b3:14:92:8e:8f:b2:66:4f:a6:80:66:d9:66:a7:7b:45:b4:17:
         75:16:63:db:ec:49:e2:a2:92:a8:10:f1:79:32:31:2b:31:ac:
         f8:05:0a:58:81:bf:15:57:4f:c7:bf:64:f4:cd:a2:9f:af:10:
         33:21:8c:97:3e:d0:7f:6d:69:e3:cf:f0:4b:37:12:6f:65:62:
         ce:4e:f0:f5:6a:87:5e:ce:ff:75:2a:8f:1d:53:83:ec:f5:e6:
         23:d9:dc:ce:b9:21:11:07:54:38:34:7a:b4:7c:21:22:72:c6:
         16:a9:0f:93:4c:d4:84:02:79:32:9f:03:10:99:05:5e:d9:a8:
         fc:70:a1:18:66:ca:cd:b3:7c:c2:3e:c3:e7:67:89:08:ed:81:
         29:f0:98:24:36:47:8a:8f:a0:7b:af:04:4c:c2:3e:52:f4:d3:
         1b:49:a8:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----