Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a313366613a3a2f34382d3438203d3e20323136343734.roa
File:                     326131333a646638303a313366613a3a2f34382d3438203d3e20323136343734.roa (raw, json)
Hash identifier:          Z3RTKa4Oq2OJHK18LKxIHoODSG4Qfb1SUX+RpzxiIjI=
Subject key identifier:   B3:FF:20:2F:26:63:D0:F7:7B:55:ED:74:F6:83:E7:C4:06:C9:15:0F
Certificate issuer:       /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial:       5291AEC6AF2E9165FD7C58E13A2DD67776A76674
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a313366613a3a2f34382d3438203d3e20323136343734.roa
Signing time:             Fri 22 Sep 2023 21:49:29 +0000
ROA not before:           Fri 22 Sep 2023 21:44:29 +0000
ROA not after:            Fri 20 Sep 2024 21:49:29 +0000
asID:                     216474
IP address blocks:        2a13:df80:13fa::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:91:ae:c6:af:2e:91:65:fd:7c:58:e1:3a:2d:d6:77:76:a7:66:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
        Validity
            Not Before: Sep 22 21:44:29 2023 GMT
            Not After : Sep 20 21:49:29 2024 GMT
        Subject: CN=B3FF202F2663D0F77B55ED74F683E7C406C9150F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:6d:7c:9f:f6:67:21:e7:6f:4b:19:0b:4f:52:
                    37:a8:23:2d:11:d4:42:1e:5c:d6:ba:da:ea:30:25:
                    d4:7d:d7:76:1a:59:a3:23:0b:70:16:f3:e0:71:db:
                    c6:be:29:72:54:bc:5e:d9:1c:17:3f:aa:81:e1:b9:
                    41:a8:d0:9c:25:ef:a8:7e:b3:2f:37:eb:fc:ad:de:
                    76:5f:53:e7:80:02:ff:93:7c:7d:d6:ac:fc:54:df:
                    8c:ec:49:72:07:e7:35:a1:ee:fd:a0:ec:cb:4b:c4:
                    1f:1f:5d:2d:bf:3d:7f:47:25:b1:bc:3d:e3:7b:d6:
                    65:d1:39:68:5c:0e:3c:7c:c9:d4:52:b1:58:30:1f:
                    ea:25:6b:c5:84:5d:41:87:a7:fc:44:46:7a:a2:5a:
                    a6:4e:a7:d0:38:cb:1c:50:e6:ec:e9:55:df:79:95:
                    4c:81:cb:a7:70:3f:77:df:bb:8f:8a:71:6c:f8:a4:
                    16:e4:cd:0d:44:11:f5:81:99:81:36:fb:de:ce:0a:
                    93:62:8f:a9:2d:e8:4a:3b:3c:33:28:a7:33:47:e5:
                    92:7d:40:95:ae:94:69:a1:4e:c8:22:3a:c3:9f:4d:
                    42:7c:61:20:77:ca:d7:7c:3f:6d:4f:b8:e8:4a:d1:
                    85:96:77:47:3e:a4:49:3f:9c:2d:95:00:04:99:a1:
                    41:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:FF:20:2F:26:63:D0:F7:7B:55:ED:74:F6:83:E7:C4:06:C9:15:0F
            X509v3 Authority Key Identifier:
                keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a313366613a3a2f34382d3438203d3e20323136343734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df80:13fa::/48

    Signature Algorithm: sha256WithRSAEncryption
         b7:54:e7:72:05:53:86:92:e6:14:4a:a9:e4:17:c4:39:fa:9b:
         90:24:33:ec:7f:99:49:c0:67:a4:b6:26:83:41:83:4b:43:2b:
         33:e3:b1:04:89:6e:56:93:d4:e1:b3:5a:1e:84:3d:a8:96:a8:
         39:85:20:5f:53:70:fa:e9:5c:84:cf:93:c5:55:9c:91:9d:1e:
         5f:29:e8:ce:9a:73:39:37:92:db:ab:16:e6:cf:86:15:44:d2:
         20:1f:7c:fb:49:b7:7e:92:1e:da:c1:d2:65:52:3a:36:17:72:
         22:6f:96:37:46:d7:14:e1:64:57:ef:8a:f5:f6:9c:52:a5:3b:
         22:69:d0:fb:7d:6e:e3:a8:0f:9e:93:0d:d4:d2:d2:f1:d1:05:
         3e:df:55:c7:cb:ce:27:e3:5b:fa:8e:4b:ac:16:59:c2:85:82:
         9d:02:08:48:89:45:d4:8b:88:a6:59:24:db:ff:37:c3:85:7a:
         82:a4:56:08:f1:ce:01:ce:94:5a:f7:ae:31:36:0d:78:7a:3e:
         1c:a6:c3:d8:c2:82:02:2f:25:01:38:6f:ee:f5:06:51:9c:47:
         7b:78:9b:85:4d:08:42:c9:f9:87:e4:98:96:34:ac:df:b6:1a:
         d9:d0:d1:7f:94:02:1a:6a:a9:99:a7:e5:86:52:1e:a8:63:ec:
         56:ed:c9:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----