Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a323030303a3a2f33382d3438203d3e20323136343433.roa
File:                     326131333a646638303a323030303a3a2f33382d3438203d3e20323136343433.roa (raw, json)
Hash identifier:          oALUng4z+L7EaU6eNoEacMCpv2HygATuiP67N5yhSb4=
Subject key identifier:   30:B8:30:A9:3B:4B:94:E2:4A:3F:14:0F:9F:F7:7B:4F:A9:4A:DD:19
Certificate issuer:       /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial:       12CD62471E852A86BB8708BD68C562A03E76C9E2
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a323030303a3a2f33382d3438203d3e20323136343433.roa
Signing time:             Sun 01 Oct 2023 19:16:56 +0000
ROA not before:           Sun 01 Oct 2023 19:11:56 +0000
ROA not after:            Sun 29 Sep 2024 19:16:56 +0000
asID:                     216443
IP address blocks:        2a13:df80:2000::/38 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:cd:62:47:1e:85:2a:86:bb:87:08:bd:68:c5:62:a0:3e:76:c9:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
        Validity
            Not Before: Oct  1 19:11:56 2023 GMT
            Not After : Sep 29 19:16:56 2024 GMT
        Subject: CN=30B830A93B4B94E24A3F140F9FF77B4FA94ADD19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:01:3b:3d:73:ac:0f:5b:03:28:75:64:b6:ee:
                    56:81:c8:15:ff:ce:ce:fa:d7:7c:56:79:57:a2:28:
                    64:88:ca:89:1f:3f:a6:52:29:b7:9d:8e:e1:b8:7a:
                    7a:9d:8c:7a:f1:0b:20:b4:8f:c8:35:28:81:d5:75:
                    25:a4:6a:29:43:9f:c5:2a:11:8a:c2:86:42:4d:5b:
                    9d:9e:a1:c9:17:ff:5c:19:ed:35:24:53:63:dc:f2:
                    1d:1d:ab:86:0c:ce:d1:60:38:69:5f:58:f7:a7:34:
                    67:4e:2d:d6:22:65:fa:a0:3f:fd:c5:3c:27:d9:41:
                    b9:52:10:6c:2b:d1:f0:9a:5a:35:59:a7:e5:df:ff:
                    d7:26:7e:45:f1:31:20:fa:75:38:dd:b4:e0:c1:38:
                    35:49:a1:ec:25:3f:b3:c3:c2:2a:8d:89:2e:d8:f6:
                    d4:f7:43:7a:4b:a7:fe:41:e6:f5:db:f4:9f:92:90:
                    25:6c:bb:df:2b:e5:13:af:2c:47:7b:c9:ec:fd:c8:
                    99:ef:a5:34:34:99:8e:f8:8b:79:59:99:4a:f8:5b:
                    e8:a6:26:b2:9b:e1:02:e7:4b:9f:b3:19:15:0e:31:
                    97:70:25:f6:fb:0e:b9:45:8c:cb:08:05:20:a3:2a:
                    2c:af:b9:5b:b5:55:40:28:5d:47:0b:f0:fa:2c:d4:
                    3b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:B8:30:A9:3B:4B:94:E2:4A:3F:14:0F:9F:F7:7B:4F:A9:4A:DD:19
            X509v3 Authority Key Identifier:
                keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a323030303a3a2f33382d3438203d3e20323136343433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df80:2000::/38

    Signature Algorithm: sha256WithRSAEncryption
         8c:30:3a:4f:ab:58:68:2c:10:0b:91:28:f6:4d:d9:e3:79:68:
         a8:ab:64:bc:61:ff:34:91:25:60:05:76:69:98:7a:35:cc:37:
         39:92:5d:18:c9:d7:f2:90:90:7a:d7:23:24:29:04:24:8c:96:
         ba:a0:4a:fd:e0:18:96:80:ec:2b:2f:ae:5a:a7:6b:ec:8a:84:
         f5:83:96:68:48:b5:ec:02:32:b4:9e:44:9e:f5:d5:49:ac:b3:
         7f:c1:b5:b7:fb:0d:c1:8c:73:01:0d:3f:f0:5e:9a:22:51:1f:
         06:40:13:d2:50:d8:d4:91:de:0d:12:0c:50:3a:0c:b5:ff:e9:
         37:58:04:e0:31:d3:4e:63:b0:7c:82:40:41:00:70:08:23:41:
         f8:80:56:39:e1:9d:60:50:e7:cf:22:3f:a0:0e:b9:23:86:ac:
         84:02:74:74:56:08:b3:39:fb:2b:c9:66:f9:ab:f4:a6:72:1d:
         76:7c:0b:49:30:3b:98:74:d8:9c:61:bd:bc:2a:ab:c9:5e:93:
         7a:6d:16:bc:d5:98:9c:51:68:8d:50:9d:c1:6e:bb:08:45:f3:
         67:9a:9d:b1:7a:77:6a:72:ef:4a:bb:80:7e:0b:56:39:38:8e:
         70:cb:8b:b6:21:de:4d:cc:38:56:4c:1c:69:4c:1f:e8:e4:2b:
         54:3f:1e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----