Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a313430303a3a2f33382d3438203d3e203438343534.roa
File:                     326131333a646638303a313430303a3a2f33382d3438203d3e203438343534.roa (raw, json)
Hash identifier:          ooA5H0AHj634S4JL6RMWTjbq+J2z9KXq9zx0wiTQLgk=
Subject key identifier:   82:22:5B:60:CC:EC:9D:F0:BC:6C:8A:2B:EA:2C:35:15:8E:31:47:A9
Certificate issuer:       /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial:       49B5D312993EE22EF927566CD922E3E036CDA8BF
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a313430303a3a2f33382d3438203d3e203438343534.roa
Signing time:             Thu 13 Jul 2023 20:51:13 +0000
ROA not before:           Thu 13 Jul 2023 20:46:13 +0000
ROA not after:            Thu 11 Jul 2024 20:51:13 +0000
asID:                     48454
IP address blocks:        2a13:df80:1400::/38 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:b5:d3:12:99:3e:e2:2e:f9:27:56:6c:d9:22:e3:e0:36:cd:a8:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
        Validity
            Not Before: Jul 13 20:46:13 2023 GMT
            Not After : Jul 11 20:51:13 2024 GMT
        Subject: CN=82225B60CCEC9DF0BC6C8A2BEA2C35158E3147A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:c4:56:0f:19:93:5a:6c:e7:0e:63:ff:52:3e:
                    d7:63:c8:0b:9f:2b:03:e4:bc:8e:9e:24:6d:4d:a5:
                    f8:1b:5f:e4:1f:46:52:04:2d:00:4b:30:f5:4b:e2:
                    26:45:ba:6f:d9:d2:65:b6:e5:d2:fe:77:95:bf:6f:
                    ab:c9:67:a1:c3:71:e9:fa:fd:f9:e1:f6:4e:23:3d:
                    13:91:3d:62:a6:02:cf:f6:a8:e9:41:00:79:29:e1:
                    cd:e5:62:c4:01:0e:3d:4b:d2:15:6d:99:c8:e6:4d:
                    1c:78:9c:b5:38:08:89:12:41:d9:63:ab:b5:50:68:
                    7a:93:ec:87:e1:45:0f:1e:8e:97:45:40:56:d1:c1:
                    db:ba:9b:c2:b5:a6:f3:ef:1e:6f:e2:09:b9:b4:b9:
                    69:c6:6b:60:e3:ea:15:45:ee:82:0a:4b:68:56:45:
                    01:63:8b:a4:78:62:55:5c:a4:8e:41:21:0e:51:a1:
                    9d:40:e2:fe:48:b1:a7:b1:89:e8:74:ff:04:dc:ae:
                    de:8e:c5:b3:47:4b:4e:98:aa:21:10:f8:7f:b2:f0:
                    75:f0:f5:de:8d:12:64:be:8e:23:38:3e:e6:3e:4d:
                    ca:5e:88:d3:0a:2e:c6:15:9f:f2:81:b1:77:25:87:
                    de:25:b9:f6:3e:30:11:e1:a0:4f:22:2a:8f:aa:da:
                    d2:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:22:5B:60:CC:EC:9D:F0:BC:6C:8A:2B:EA:2C:35:15:8E:31:47:A9
            X509v3 Authority Key Identifier:
                keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a313430303a3a2f33382d3438203d3e203438343534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df80:1400::/38

    Signature Algorithm: sha256WithRSAEncryption
         5c:c2:9d:a7:a1:69:02:a0:0a:23:6c:91:b4:8e:d6:4d:eb:80:
         80:ec:15:10:e0:dc:ee:89:05:a0:a4:c7:08:29:e1:5d:f4:21:
         ae:fe:6e:55:89:31:69:21:35:64:e5:53:47:28:1a:92:78:86:
         18:cd:61:41:65:7d:87:1f:8b:e5:be:d2:e6:8d:53:f4:54:95:
         97:d3:e4:3f:49:ae:0a:1f:c6:42:5e:30:79:52:94:df:6d:60:
         9a:ab:37:41:32:ab:05:66:12:60:09:27:af:6c:d1:f4:f2:0b:
         47:c5:d2:55:a9:f3:5f:c8:9d:c6:0f:7b:39:f7:d4:3a:6f:97:
         5e:25:d6:f3:c6:2f:91:18:fb:72:a2:45:54:00:b0:0d:89:13:
         07:d1:c0:7c:ae:b8:fb:f2:6d:a5:73:ef:35:f5:27:5b:19:90:
         1d:10:ab:93:b9:0b:3c:b5:8b:d1:e1:a1:c4:4c:44:69:07:9f:
         d8:f6:ca:cf:c5:a2:4a:01:94:6b:84:9e:28:6a:b0:da:f2:a6:
         6e:b3:af:f4:54:10:2e:6d:d6:e2:18:e9:87:c1:d2:df:b8:db:
         ce:53:a5:4c:06:f1:cc:ba:51:8a:92:64:fa:18:fc:d4:8b:5c:
         91:4f:80:0c:8e:12:17:73:ae:7f:b8:f5:3a:57:9e:26:ff:29:
         16:77:49:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----