Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a316430303a3a2f34302d3438203d3e20323136333839.roa
File:                     326131333a646638303a316430303a3a2f34302d3438203d3e20323136333839.roa (raw, json)
Hash identifier:          BBZj8w09LwX2aM0QzKfp7MyVP1/RxYeI3bFYnHArNC0=
Subject key identifier:   68:40:83:D8:44:6F:74:F0:8E:4A:9D:CA:DA:A2:B4:9B:94:07:AA:7E
Certificate issuer:       /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial:       6210E9A8DA96874277CDBF1B961CA5903BF270D6
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a316430303a3a2f34302d3438203d3e20323136333839.roa
Signing time:             Thu 31 Aug 2023 18:22:02 +0000
ROA not before:           Thu 31 Aug 2023 18:17:02 +0000
ROA not after:            Thu 29 Aug 2024 18:22:02 +0000
asID:                     216389
IP address blocks:        2a13:df80:1d00::/40 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:10:e9:a8:da:96:87:42:77:cd:bf:1b:96:1c:a5:90:3b:f2:70:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
        Validity
            Not Before: Aug 31 18:17:02 2023 GMT
            Not After : Aug 29 18:22:02 2024 GMT
        Subject: CN=684083D8446F74F08E4A9DCADAA2B49B9407AA7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:8c:57:c8:34:f6:68:86:37:ae:83:b9:32:64:
                    f8:20:27:77:cc:26:5d:a3:05:0f:aa:60:08:58:92:
                    ac:14:7d:c9:4f:66:12:f7:44:ce:50:e8:40:bd:51:
                    8e:c2:78:6a:a3:d0:e3:cf:80:54:e6:51:56:77:e6:
                    e6:35:fe:07:dd:92:51:5f:05:86:d5:43:ec:0a:53:
                    19:b4:b7:b5:46:fa:6e:37:2e:93:6a:98:6c:8a:bb:
                    a5:44:aa:9d:54:dc:19:6e:89:27:72:bd:31:a6:3c:
                    f6:81:f2:3f:89:a2:81:83:25:05:ae:7c:f9:45:81:
                    09:98:b9:68:e9:73:34:09:68:89:69:04:d6:1e:d6:
                    fc:54:52:22:5e:17:8a:75:69:cb:50:47:0f:09:4d:
                    a9:fd:eb:5e:bc:39:42:d7:25:6d:7f:41:c1:d3:d7:
                    5c:50:08:1d:49:9a:6d:c0:6c:0c:4a:68:3a:b9:c2:
                    6c:df:1f:2c:83:72:44:21:32:37:67:11:b8:43:df:
                    89:64:b2:be:26:59:75:29:35:a4:a1:e6:e2:f1:3a:
                    40:b1:45:b8:3a:af:35:87:f3:7d:c2:c5:ea:9e:c7:
                    39:e6:8f:9a:55:d8:bf:70:d3:c8:c8:14:d6:a3:35:
                    65:61:9f:4a:1b:70:ba:58:4d:9e:83:45:35:d9:f7:
                    8e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:40:83:D8:44:6F:74:F0:8E:4A:9D:CA:DA:A2:B4:9B:94:07:AA:7E
            X509v3 Authority Key Identifier:
                keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a316430303a3a2f34302d3438203d3e20323136333839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df80:1d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         7e:76:eb:c1:c0:4b:ac:58:c1:1a:ff:e9:e2:de:29:b9:c0:e0:
         11:45:45:59:f2:60:fc:f1:d4:ef:58:9f:2f:0f:54:19:c2:f2:
         83:a6:02:99:2e:b4:f1:3b:17:88:3c:14:c4:ba:b9:9b:c2:a2:
         57:fd:2c:15:94:89:98:96:73:eb:b5:82:f6:fe:5a:e9:f8:d9:
         88:69:c6:9d:81:14:be:02:57:55:3e:98:84:bf:e8:cf:8d:70:
         f4:8e:b0:e8:b2:55:f0:dd:96:71:ac:e3:dc:3a:ea:90:b4:5b:
         e2:2c:34:7c:93:b6:a5:55:66:9c:ab:59:65:94:8a:82:07:04:
         f2:ff:80:fd:8f:03:53:b0:47:ed:f7:53:9d:07:63:f4:f3:af:
         96:3d:9c:25:b0:64:8d:74:48:7a:b7:70:bb:77:90:15:0a:34:
         06:0a:a2:ca:77:6e:c2:f3:aa:57:5b:6c:fb:65:c9:4f:ee:0b:
         93:78:6d:9e:de:35:eb:09:00:ad:5a:3e:11:cc:1b:4f:9d:5a:
         48:08:2c:27:ac:ec:65:e7:ff:bc:17:eb:63:48:c2:88:bb:25:
         d0:03:65:77:db:09:ec:b1:ff:1d:83:65:ff:1d:59:a2:d5:1d:
         10:b7:8b:be:fe:93:9c:06:b0:76:ad:da:d7:18:aa:5b:d1:b7:
         f2:98:94:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----