Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a3163303a3a2f34342d3438203d3e203632313735.roa
File:                     326131333a646638303a3163303a3a2f34342d3438203d3e203632313735.roa (raw, json)
Hash identifier:          aZVfpc4hl0A0HibWCM4WcPvWDW+wpdVrGzuBjQh5ug8=
Subject key identifier:   7D:6F:8C:5B:BB:48:EC:FC:52:09:B1:9C:65:80:EE:03:1B:C6:AA:6D
Certificate issuer:       /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial:       1489B377E30F07F51A6013ABCCA130576AF75307
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a3163303a3a2f34342d3438203d3e203632313735.roa
Signing time:             Thu 22 Jun 2023 19:32:29 +0000
ROA not before:           Thu 22 Jun 2023 19:27:29 +0000
ROA not after:            Thu 20 Jun 2024 19:32:29 +0000
asID:                     62175
IP address blocks:        2a13:df80:1c0::/44 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:89:b3:77:e3:0f:07:f5:1a:60:13:ab:cc:a1:30:57:6a:f7:53:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
        Validity
            Not Before: Jun 22 19:27:29 2023 GMT
            Not After : Jun 20 19:32:29 2024 GMT
        Subject: CN=7D6F8C5BBB48ECFC5209B19C6580EE031BC6AA6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b4:47:c8:e5:47:db:71:2f:67:9f:12:94:c4:
                    93:08:4b:8d:10:a7:bf:8b:b5:74:0a:f8:82:c6:e5:
                    c5:f4:a4:12:2a:b7:69:ef:44:d4:a3:d8:85:9b:51:
                    e0:29:71:bf:c9:88:8f:c3:7b:44:96:d0:28:62:dd:
                    d0:6b:aa:d7:4b:c2:07:0e:5d:4f:87:f1:93:49:2e:
                    32:ba:69:be:a2:b7:c2:fd:c5:4e:59:94:4a:78:63:
                    f9:6c:e8:7d:f4:b4:c1:7c:03:73:7c:36:ac:2a:1e:
                    a0:f2:89:b1:7d:40:48:84:a6:cc:90:f3:4a:92:33:
                    1f:f5:d6:01:56:e8:87:f0:10:c2:2f:21:3f:35:bb:
                    d0:a8:01:f9:29:d0:4c:1f:8a:d4:83:fe:af:84:4f:
                    69:6e:cd:44:4a:bf:c1:b3:85:ca:5f:84:f8:a3:d8:
                    f1:70:70:14:3d:a5:42:96:a9:86:d3:60:28:97:24:
                    0c:28:1e:36:41:66:91:6f:bc:51:3c:b4:4b:37:7d:
                    26:1a:41:d6:91:02:4c:37:29:c2:fd:71:5c:f1:12:
                    87:05:58:8a:73:36:8b:e8:6f:69:3f:37:d1:85:e0:
                    ff:a9:35:dc:2b:f9:1a:aa:02:5d:f3:bd:ab:31:3d:
                    e8:39:b6:1a:45:6d:db:0c:f2:c4:03:10:7a:b0:74:
                    c4:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:6F:8C:5B:BB:48:EC:FC:52:09:B1:9C:65:80:EE:03:1B:C6:AA:6D
            X509v3 Authority Key Identifier:
                keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a3163303a3a2f34342d3438203d3e203632313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df80:1c0::/44

    Signature Algorithm: sha256WithRSAEncryption
         73:08:d5:15:f5:10:0a:c5:42:43:d4:6b:f9:93:52:e8:93:96:
         dc:99:a1:27:bc:80:c1:83:ef:dd:b1:c1:39:07:5c:5f:a1:a1:
         04:f1:be:e8:63:5e:ce:be:64:9a:11:8b:fe:06:60:43:db:e3:
         fa:91:f2:f2:d3:db:78:23:61:82:fb:cb:d3:5c:ef:52:e4:28:
         18:f2:2b:60:85:2c:14:3e:4e:ca:ce:03:2b:a3:f3:26:c4:1d:
         00:24:a9:72:3a:92:b3:bb:d4:67:2d:25:23:f2:d6:50:d4:5b:
         af:fd:39:ca:0e:fa:e5:9b:1f:fc:a1:97:c3:cb:65:e5:e4:ed:
         62:8c:4d:05:5d:fd:db:88:e2:5f:69:e5:9e:6d:9d:e7:c4:23:
         25:43:49:78:88:06:56:75:5e:ae:18:28:8b:37:f3:e3:e7:06:
         23:12:ed:16:c7:a4:e6:0b:b3:a4:72:ca:b3:6f:cc:99:a7:fc:
         98:f7:e0:3a:78:2a:37:fc:a2:ef:c2:2c:3b:c8:2b:45:8f:ab:
         63:b9:cc:3f:3f:7a:fd:4e:2d:66:82:04:43:d5:63:c6:89:8e:
         a1:e6:b4:72:eb:59:08:5d:04:51:5a:18:03:df:5b:ad:61:db:
         f3:e3:87:e7:6f:e9:37:bb:27:d4:53:9a:02:11:1b:79:ea:65:
         56:78:ef:d2
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgIUFImzd+MPB/UaYBOrzKEwV2r3UwcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDVjM2Q1ZTcwZmM5YWQxMGJhOTBkNDVkYzY2NDU0ZTll
M2ExNDZhODAeFw0yMzA2MjIxOTI3MjlaFw0yNDA2MjAxOTMyMjlaMDMxMTAvBgNV
BAMTKDdENkY4QzVCQkI0OEVDRkM1MjA5QjE5QzY1ODBFRTAzMUJDNkFBNkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/tEfI5UfbcS9nnxKUxJMIS40Q
p7+LtXQK+ILG5cX0pBIqt2nvRNSj2IWbUeApcb/JiI/De0SW0Chi3dBrqtdLwgcO
XU+H8ZNJLjK6ab6it8L9xU5ZlEp4Y/ls6H30tMF8A3N8NqwqHqDyibF9QEiEpsyQ
80qSMx/11gFW6IfwEMIvIT81u9CoAfkp0EwfitSD/q+ET2luzURKv8GzhcpfhPij
2PFwcBQ9pUKWqYbTYCiXJAwoHjZBZpFvvFE8tEs3fSYaQdaRAkw3KcL9cVzxEocF
WIpzNovob2k/N9GF4P+pNdwr+RqqAl3zvasxPeg5thpFbdsM8sQDEHqwdMT7AgMB
AAGjggJGMIICQjAdBgNVHQ4EFgQUfW+MW7tI7PxSCbGcZYDuAxvGqm0wHwYDVR0j
BBgwFoAU1cPV5w/JrRC6kNRdxmRU6eOhRqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDQwMzJjOGYtMWQ1Ny00YzNiLTkwNDMtYTBlN2ZlYmYx
NjdkLzAvRDVDM0Q1RTcwRkM5QUQxMEJBOTBENDVEQzY2NDU0RTlFM0ExNDZBOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFjUFY1d19KclJDNmtOUmR4bVJVNmVP
aFJxZy5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDQwMzJjOGYt
MWQ1Ny00YzNiLTkwNDMtYTBlN2ZlYmYxNjdkLzAvMzI2MTMxMzMzYTY0NjYzODMw
M2EzMTYzMzAzYTNhMmYzNDM0MmQzNDM4MjAzZDNlMjAzNjMyMzEzNzM1LnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA
AjAJAwcEKhPfgAHAMA0GCSqGSIb3DQEBCwUAA4IBAQBzCNUV9RAKxUJD1Gv5k1Lo
k5bcmaEnvIDBg+/dscE5B1xfoaEE8b7oY17OvmSaEYv+BmBD2+P6kfLy09t4I2GC
+8vTXO9S5CgY8itghSwUPk7KzgMro/MmxB0AJKlyOpKzu9RnLSUj8tZQ1Fuv/TnK
Dvrlmx/8oZfDy2Xl5O1ijE0FXf3biOJfaeWebZ3nxCMlQ0l4iAZWdV6uGCiLN/Pj
5wYjEu0Wx6TmC7Okcsqzb8yZp/yY9+A6eCo3/KLvwiw7yCtFj6tjucw/P3r9Ti1m
ggRD1WPGiY6h5rRy61kIXQRRWhgD31utYdvz44fnb+k3uyfUU5oCERt56mVWeO/S
-----END CERTIFICATE-----