Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a313230303a3a2f34302d3438203d3e20323132303439.roa
File:                     326131333a646638303a313230303a3a2f34302d3438203d3e20323132303439.roa (raw, json)
Hash identifier:          ysD9F6hb8JwB4G96OHm1TRvyoTOZ6A8Hp1/8GRIwJio=
Subject key identifier:   16:9A:B8:8F:91:1F:46:C8:33:A2:14:C7:03:77:16:AD:6D:FA:71:E3
Certificate issuer:       /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial:       11732B029827AC6CBD3629BBD72403AD1AF27EB6
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a313230303a3a2f34302d3438203d3e20323132303439.roa
Signing time:             Wed 23 Aug 2023 09:12:00 +0000
ROA not before:           Wed 23 Aug 2023 09:07:00 +0000
ROA not after:            Wed 21 Aug 2024 09:12:00 +0000
asID:                     212049
IP address blocks:        2a13:df80:1200::/40 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:73:2b:02:98:27:ac:6c:bd:36:29:bb:d7:24:03:ad:1a:f2:7e:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
        Validity
            Not Before: Aug 23 09:07:00 2023 GMT
            Not After : Aug 21 09:12:00 2024 GMT
        Subject: CN=169AB88F911F46C833A214C7037716AD6DFA71E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e7:5a:00:c8:88:1a:52:3a:0c:d4:6e:2e:06:
                    08:7f:5b:d0:2f:da:13:0b:ea:dc:92:27:f2:93:54:
                    a3:c7:8a:4f:73:e3:ce:96:3a:d1:0f:1b:b0:38:c1:
                    37:75:70:b5:e1:de:f3:23:ea:65:ad:b5:a9:8a:cd:
                    e5:9b:69:b0:ad:b3:7c:8f:df:bc:22:ee:1a:05:64:
                    68:1c:45:5b:58:79:aa:c9:3f:d1:e3:cb:4d:09:91:
                    dd:69:f8:8a:c0:9d:43:9a:09:27:24:d0:e9:c0:5b:
                    83:c1:3b:ea:23:da:77:36:69:16:8c:b0:f3:0f:ba:
                    7a:34:23:9d:54:3c:da:4c:b5:e8:27:cc:d2:36:7d:
                    c4:81:7a:35:71:f6:72:f7:78:80:15:e2:61:71:14:
                    8b:e1:ef:f9:9d:28:6a:dc:f3:fd:6f:0e:7c:dd:00:
                    14:6a:c3:ef:46:e8:da:91:6e:3c:f2:7a:e1:6a:fa:
                    61:be:07:67:84:4b:5e:82:b5:b2:94:56:6e:84:9e:
                    d6:f7:9d:b6:a3:9d:42:cf:1b:74:9b:40:ca:79:de:
                    f2:76:bb:b2:27:30:52:8a:0b:2c:85:fc:24:85:13:
                    0d:b4:f2:99:cd:fd:3b:99:2b:d4:f1:93:bb:7b:89:
                    83:2a:dd:dc:3d:c3:8c:85:7b:c8:22:38:c8:ea:4e:
                    b1:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:9A:B8:8F:91:1F:46:C8:33:A2:14:C7:03:77:16:AD:6D:FA:71:E3
            X509v3 Authority Key Identifier:
                keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a313230303a3a2f34302d3438203d3e20323132303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df80:1200::/40

    Signature Algorithm: sha256WithRSAEncryption
         b0:ca:0c:71:5d:07:3b:6d:5f:9b:7d:bd:28:2b:ec:68:5c:dc:
         4f:bb:51:3a:39:60:06:ca:d0:7b:72:8c:67:ba:bd:a4:c7:7c:
         26:51:61:2a:e3:3c:7e:11:6e:d5:95:61:63:82:98:6a:62:6b:
         93:d7:5c:a4:4b:18:fe:39:ea:c0:db:3f:71:fb:e1:e1:4f:be:
         2d:36:4c:28:c8:c5:e0:17:07:ee:a2:fa:87:88:66:fd:67:fe:
         e4:51:b4:21:2e:0a:3a:a7:94:2c:c2:31:a4:a6:e8:f9:c5:98:
         51:a4:02:6b:02:24:38:c4:87:a0:e6:f0:00:15:f6:07:c3:28:
         3e:27:e0:40:68:a5:c1:9c:6f:e2:16:ff:35:a8:fe:bd:17:fe:
         46:5b:9c:32:2b:cf:56:55:f4:72:59:00:be:ec:30:ec:00:0d:
         49:b0:46:63:2e:91:5a:1d:8f:4c:9d:46:a5:45:9b:81:6a:47:
         84:e4:84:25:f6:18:e7:b9:99:20:31:48:29:89:f6:c4:8a:5d:
         5a:85:98:9c:e4:dd:43:a6:dd:c0:f9:2a:d6:6a:e5:9b:f2:7c:
         69:44:ee:39:c2:2c:6c:73:55:d7:d7:0a:b2:3c:1c:37:19:02:
         59:29:97:47:6e:9b:84:13:89:e2:66:f2:d9:cf:79:45:ec:cb:
         1f:09:b9:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----