Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a333830323a3a2f34382d3438203d3e20323136343131.roa
File:                     326131333a646638303a333830323a3a2f34382d3438203d3e20323136343131.roa (raw, json)
Hash identifier:          /MVMrAktuVNSxmHb4dlJ7wP51QFVcQzwTzk3CiSM2UQ=
Subject key identifier:   46:75:C7:B9:5D:DE:5F:95:E8:50:C2:36:CE:74:65:38:35:C2:85:81
Certificate issuer:       /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial:       7AB323A1B5C3925F1FDED113348E7354C02AE14D
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a333830323a3a2f34382d3438203d3e20323136343131.roa
Signing time:             Mon 28 Aug 2023 17:07:13 +0000
ROA not before:           Mon 28 Aug 2023 17:02:13 +0000
ROA not after:            Mon 26 Aug 2024 17:07:13 +0000
asID:                     216411
IP address blocks:        2a13:df80:3802::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:b3:23:a1:b5:c3:92:5f:1f:de:d1:13:34:8e:73:54:c0:2a:e1:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
        Validity
            Not Before: Aug 28 17:02:13 2023 GMT
            Not After : Aug 26 17:07:13 2024 GMT
        Subject: CN=4675C7B95DDE5F95E850C236CE74653835C28581
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:93:7d:a9:94:68:06:ca:d4:0a:63:ce:23:e0:
                    ff:14:ab:1d:0a:f7:8a:a0:15:03:ee:0f:84:76:7e:
                    a7:ee:08:95:84:a2:fc:3f:02:8b:87:f3:1b:34:b9:
                    bf:c4:47:77:33:fd:ef:f8:45:96:1e:5c:16:97:c1:
                    9c:8d:0a:12:2b:e5:6c:5a:bf:3e:74:b1:d9:6f:34:
                    ce:9c:42:a1:dc:fa:af:6f:74:13:34:90:ff:76:92:
                    99:db:37:36:92:ab:c5:6d:1b:cc:e1:fb:fc:fe:94:
                    6d:f4:c7:de:de:1d:15:7a:00:f7:2b:97:fc:da:93:
                    c7:ee:a0:c5:22:27:0b:a7:79:dc:16:45:b1:97:a5:
                    cf:4e:a2:56:c3:cb:cb:b8:3e:49:52:d5:dd:e5:f7:
                    bf:bd:d6:c5:a6:c6:d4:49:d4:09:d3:70:50:44:07:
                    08:4f:b5:bd:ae:52:ab:85:83:a5:ed:1f:27:9f:57:
                    ab:42:4b:99:7d:fb:a8:74:27:e4:75:0a:96:43:9c:
                    08:ec:ad:27:67:0b:b4:a8:4c:2e:aa:43:50:8b:8d:
                    b1:91:8d:52:b0:b7:5e:60:9e:d2:99:39:a3:66:39:
                    5a:97:31:dd:a1:97:ea:19:c6:b3:1b:0b:d7:31:a0:
                    cd:c6:ac:9d:81:91:e9:20:6c:49:2d:b0:96:a8:e5:
                    95:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:75:C7:B9:5D:DE:5F:95:E8:50:C2:36:CE:74:65:38:35:C2:85:81
            X509v3 Authority Key Identifier:
                keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a333830323a3a2f34382d3438203d3e20323136343131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df80:3802::/48

    Signature Algorithm: sha256WithRSAEncryption
         c3:d0:81:57:8b:56:10:0e:54:e6:2f:08:b9:e9:5b:08:82:ac:
         4e:e4:61:99:67:e6:4b:c5:52:89:2d:40:32:a3:46:78:bb:c8:
         85:3a:c1:1b:bc:cc:72:cb:93:50:ec:03:c3:5a:71:45:e2:c4:
         1e:17:7b:c4:0d:d6:0a:2c:fe:c9:87:73:9a:91:47:bf:41:3f:
         78:ae:54:01:9f:68:51:1a:10:46:5e:32:27:b8:dd:cf:cd:c6:
         52:14:f9:07:8b:1d:22:58:e0:db:ea:82:0a:4f:a5:fb:ed:68:
         2a:72:61:a1:20:3f:ff:57:97:25:dc:71:cb:e9:5d:24:42:c2:
         03:e6:6f:ee:19:2a:5e:63:e7:f9:d8:56:e9:8a:43:3f:7e:bd:
         74:13:c4:c0:15:b8:aa:d1:94:dd:03:82:c5:ea:5a:fe:3f:b7:
         ea:67:e9:c8:5c:4c:df:44:50:86:42:99:1c:1d:33:9d:87:30:
         90:c7:84:c4:fb:bd:e6:5b:d0:e2:3e:23:46:ba:f2:e0:a1:78:
         07:5c:3a:6e:4c:6c:22:35:16:a4:4a:37:a9:2d:8a:b8:44:61:
         f8:fb:14:c3:28:cb:c6:e9:48:53:52:3a:51:4a:74:d2:b0:fd:
         47:01:77:ab:3a:fe:56:0d:19:ff:48:0c:b4:35:f3:51:75:1b:
         11:0d:e7:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----