Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a313336303a3a2f34342d3438203d3e20313937363334.roa
File:                     326131333a646638303a313336303a3a2f34342d3438203d3e20313937363334.roa (raw, json)
Hash identifier:          NbIPkh4D3DwfWpwn6lArCEYvtHbODH221y1MANU76Zw=
Subject key identifier:   B7:9F:EB:56:05:44:BD:7A:DA:5B:1A:69:DC:76:CA:B1:4D:61:19:F6
Certificate issuer:       /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial:       1F760654939747CF97CD1CFB668D8884C32E97B1
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a313336303a3a2f34342d3438203d3e20313937363334.roa
Signing time:             Fri 03 Nov 2023 20:29:42 +0000
ROA not before:           Fri 03 Nov 2023 20:24:42 +0000
ROA not after:            Fri 01 Nov 2024 20:29:42 +0000
asID:                     197634
IP address blocks:        2a13:df80:1360::/44 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:76:06:54:93:97:47:cf:97:cd:1c:fb:66:8d:88:84:c3:2e:97:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
        Validity
            Not Before: Nov  3 20:24:42 2023 GMT
            Not After : Nov  1 20:29:42 2024 GMT
        Subject: CN=B79FEB560544BD7ADA5B1A69DC76CAB14D6119F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:1f:cd:fe:85:06:25:54:7c:73:9d:0f:98:c2:
                    84:27:0f:d9:c6:67:c8:70:6d:1a:71:4f:02:2c:18:
                    db:b5:5f:40:bc:5d:12:0b:5a:91:72:37:18:bd:3e:
                    74:c6:8c:09:51:98:f2:65:a2:05:01:5b:04:bd:f8:
                    fc:6e:cd:07:bc:4f:5d:68:59:f3:03:bc:83:20:aa:
                    13:a0:fb:df:76:0a:48:10:65:0f:fe:88:21:ee:99:
                    85:a3:26:25:6b:79:ea:a8:47:b1:d1:bf:52:0a:8c:
                    fc:c3:10:37:f0:e7:9f:fb:c4:cf:48:79:63:ac:3e:
                    a8:cb:05:66:5f:96:fb:d5:a2:dc:fc:74:63:08:a5:
                    ee:44:5a:6f:8f:55:86:8a:34:ec:f6:e7:df:af:a2:
                    cd:33:c3:b4:90:b7:30:06:95:e3:8b:15:a4:72:e2:
                    8c:85:74:21:27:03:8b:36:08:66:17:3f:4b:92:47:
                    ec:f7:b5:7b:db:63:b6:36:32:3e:81:c0:ab:ba:73:
                    c3:31:a2:6e:32:e5:ab:c5:8d:20:74:2d:d9:eb:04:
                    a6:d3:57:8b:39:45:41:c0:18:0f:32:44:2d:4e:1a:
                    e2:11:c5:0c:fe:5f:b9:6b:c0:8f:a6:f3:08:8d:d9:
                    36:e6:74:67:fb:29:03:fe:ba:0e:46:10:95:d9:36:
                    54:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:9F:EB:56:05:44:BD:7A:DA:5B:1A:69:DC:76:CA:B1:4D:61:19:F6
            X509v3 Authority Key Identifier:
                keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a313336303a3a2f34342d3438203d3e20313937363334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df80:1360::/44

    Signature Algorithm: sha256WithRSAEncryption
         68:c5:60:65:ae:e9:ad:d5:5f:3b:b6:7c:7a:75:f0:94:56:1e:
         97:b9:ce:fd:8d:7e:f8:a6:cb:bf:8c:bf:00:1c:91:24:4c:c3:
         6d:c7:dd:81:15:9d:67:50:3e:be:35:02:83:4f:a2:58:10:ec:
         37:44:ed:f4:36:91:63:72:a7:b3:9f:6b:6a:26:d4:0d:f2:37:
         f8:a6:81:3c:19:06:67:20:65:21:5e:80:19:c7:17:e9:03:59:
         56:c8:65:ce:b5:1c:7a:eb:6d:e6:f6:fc:44:12:94:c1:02:9d:
         56:ca:74:d0:9f:19:66:84:a5:1c:05:5a:b1:52:0e:7a:fc:7e:
         96:1b:89:12:0c:84:bc:9b:ee:df:f3:55:64:99:cc:20:43:46:
         6f:97:21:16:d0:2d:fa:eb:60:99:6b:98:79:74:27:1e:a9:27:
         e8:4f:68:4d:c1:34:15:5a:92:f5:7c:81:4a:dd:06:76:e3:b3:
         6e:2d:d8:a1:c8:fc:96:73:9b:81:c2:20:34:3b:be:43:5c:a1:
         06:94:00:65:be:59:11:28:f0:a9:c4:56:69:fa:4b:54:69:e2:
         16:00:fc:c0:a0:e5:9d:4b:df:a0:c5:0b:e3:d7:8e:50:2a:c4:
         72:07:1f:5f:ff:88:ba:7d:39:ac:1a:d7:8e:5f:bb:6b:6e:9c:
         1f:48:5a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----