Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a313232323a3a2f34382d3438203d3e20323132303439.roa
File:                     326131333a646638303a313232323a3a2f34382d3438203d3e20323132303439.roa (raw, json)
Hash identifier:          YvD9rJaJ1UsOlsb3tZFxzDTwBbmxeP/XGXzUIfJ/cG8=
Subject key identifier:   75:E4:56:BD:19:89:8B:50:E4:91:22:D3:7D:1D:24:3E:B2:60:5F:46
Certificate issuer:       /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial:       103C42AF300EAA8A2C960AED2A4C3ABE8A6E9D0E
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a313232323a3a2f34382d3438203d3e20323132303439.roa
Signing time:             Thu 17 Aug 2023 01:32:20 +0000
ROA not before:           Thu 17 Aug 2023 01:27:20 +0000
ROA not after:            Thu 15 Aug 2024 01:32:20 +0000
asID:                     212049
IP address blocks:        2a13:df80:1222::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:3c:42:af:30:0e:aa:8a:2c:96:0a:ed:2a:4c:3a:be:8a:6e:9d:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
        Validity
            Not Before: Aug 17 01:27:20 2023 GMT
            Not After : Aug 15 01:32:20 2024 GMT
        Subject: CN=75E456BD19898B50E49122D37D1D243EB2605F46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:dc:e8:b8:67:7c:b1:0d:68:96:d7:25:0e:2a:
                    ea:e6:f7:55:38:93:af:74:40:db:c4:85:be:da:92:
                    5b:1a:61:a9:97:51:4b:95:32:84:20:23:69:6c:33:
                    43:b1:e7:8b:e8:3c:8d:8f:cb:a3:34:5b:e1:a0:34:
                    33:af:24:b3:81:ba:e3:e4:26:da:0e:55:4b:ec:7a:
                    1a:d4:1e:55:58:a7:d1:14:10:6d:55:33:be:6a:2c:
                    44:f1:18:fc:90:08:4c:46:bf:0c:cd:49:c9:14:a0:
                    ea:8d:26:2c:7b:1d:fb:fc:d4:c0:34:9a:36:f9:45:
                    fd:67:00:dc:34:9a:51:70:23:86:11:b6:91:bf:ed:
                    32:f4:2a:0f:25:ba:97:29:98:99:ba:df:53:ed:db:
                    f4:76:fb:4c:0b:02:85:44:29:75:c3:26:5e:8f:98:
                    e7:b3:9c:a3:eb:18:e7:c3:21:b2:c6:c7:ca:62:1d:
                    a3:c7:b9:3e:28:24:78:25:17:31:cd:13:c2:cd:75:
                    1b:b7:88:3b:a9:dd:b6:24:12:07:e9:fe:3e:6f:5b:
                    15:e2:43:53:de:f2:b5:f9:98:49:22:fc:a7:29:10:
                    23:a1:e3:89:83:5c:8e:bb:a5:64:4d:f8:21:59:03:
                    df:d2:b9:a2:73:c7:0b:50:dd:5d:e0:bb:db:b9:cf:
                    44:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:E4:56:BD:19:89:8B:50:E4:91:22:D3:7D:1D:24:3E:B2:60:5F:46
            X509v3 Authority Key Identifier:
                keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a313232323a3a2f34382d3438203d3e20323132303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df80:1222::/48

    Signature Algorithm: sha256WithRSAEncryption
         3f:bd:48:ce:40:c3:7d:f7:c6:bd:75:73:6d:5d:8b:d6:4d:4c:
         7f:68:e7:d1:25:f4:26:93:6e:1e:69:d7:f5:7d:cf:9a:10:f6:
         92:b4:ba:53:7e:1d:1c:56:67:ad:98:70:8d:81:2a:cc:08:dc:
         a8:fe:6e:eb:7e:2f:af:2c:40:6f:c3:02:e9:1b:e0:6c:60:04:
         17:ba:f1:af:ba:32:08:d5:61:f6:e0:ff:66:d4:67:e2:a4:65:
         cf:a7:65:d2:26:4a:15:05:68:6f:33:13:57:f4:e7:cb:10:b4:
         62:fd:e1:bf:c3:2c:fc:e5:90:e4:16:20:d7:dc:33:79:6b:c9:
         df:3d:22:6d:6b:b5:c9:96:6f:8e:42:82:94:21:1d:0c:97:28:
         f9:c9:60:3e:4f:a7:e7:17:bc:09:48:e2:b3:27:da:aa:73:ba:
         38:45:86:c8:52:1d:c2:25:31:67:c2:3d:7e:13:fd:dc:e1:09:
         dc:c2:50:f7:2f:58:65:87:fe:6e:50:2c:99:a1:8f:d6:24:b3:
         0d:57:36:6a:f5:4a:a3:7b:21:0a:7e:63:f7:88:7b:8b:b4:7b:
         58:c4:b1:82:3b:bb:10:b2:0e:7a:e4:a5:55:e0:1b:04:a2:07:
         92:2e:77:2a:a9:a8:6a:e3:94:3a:3a:3a:8b:41:23:84:7c:78:
         90:fc:11:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----