Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a333830393a3a2f34382d3438203d3e20323136333432.roa
File:                     326131333a646638303a333830393a3a2f34382d3438203d3e20323136333432.roa (raw, json)
Hash identifier:          cwoltSNaFqbbr6RB6TLsXM0PFkc1jXbkl876DCcYPzM=
Subject key identifier:   50:5B:53:52:B0:5F:F1:65:73:32:6E:3E:FC:D1:8F:ED:D0:C2:83:1C
Certificate issuer:       /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial:       069044EC5E70098C5935DB82225035BD30731B96
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a333830393a3a2f34382d3438203d3e20323136333432.roa
Signing time:             Fri 08 Sep 2023 10:38:05 +0000
ROA not before:           Fri 08 Sep 2023 10:33:05 +0000
ROA not after:            Fri 06 Sep 2024 10:38:05 +0000
asID:                     216342
IP address blocks:        2a13:df80:3809::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:90:44:ec:5e:70:09:8c:59:35:db:82:22:50:35:bd:30:73:1b:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
        Validity
            Not Before: Sep  8 10:33:05 2023 GMT
            Not After : Sep  6 10:38:05 2024 GMT
        Subject: CN=505B5352B05FF16573326E3EFCD18FEDD0C2831C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:91:30:66:35:dc:56:c5:93:79:30:66:84:48:
                    3d:ae:34:70:5a:05:fa:62:d9:55:ab:ec:6a:43:de:
                    58:ab:fd:ef:7c:43:bf:10:95:6d:43:2b:72:d4:af:
                    cc:25:e2:c0:f7:50:cb:66:38:eb:bc:9e:33:dc:d5:
                    ad:5b:6d:57:60:0e:33:55:62:67:b4:1e:fa:90:0c:
                    80:e0:e2:8b:9f:7a:ec:7c:fe:75:70:13:f5:46:9e:
                    94:2d:1a:b5:da:8e:e8:4f:56:8c:da:c1:78:74:33:
                    a4:c6:05:2e:99:b8:9a:69:52:7e:c3:c4:bb:f9:5f:
                    5a:6b:b7:95:4c:99:f0:0c:04:68:67:3a:05:34:32:
                    60:11:6f:61:c1:e3:75:34:cf:47:12:2e:d9:c4:e1:
                    19:66:f8:41:6a:ef:ac:22:b4:d2:b3:23:88:4f:cb:
                    2b:a0:24:b2:f0:45:13:60:21:a2:8e:b4:ec:28:a5:
                    91:86:d9:e2:10:61:8c:b5:98:0b:a8:fe:10:a5:5d:
                    0e:8a:6f:1f:8c:3d:f1:f6:e0:d6:19:e0:a6:e0:ae:
                    29:37:33:4d:2b:63:30:f1:5e:5f:0e:90:6b:72:b3:
                    80:ed:48:4e:49:20:79:00:4f:cf:7f:88:33:56:d2:
                    5c:63:74:cd:02:03:f3:29:93:18:5a:24:78:de:a1:
                    82:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:5B:53:52:B0:5F:F1:65:73:32:6E:3E:FC:D1:8F:ED:D0:C2:83:1C
            X509v3 Authority Key Identifier:
                keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a333830393a3a2f34382d3438203d3e20323136333432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df80:3809::/48

    Signature Algorithm: sha256WithRSAEncryption
         bd:e0:69:6c:ae:d0:a8:88:5b:1e:02:74:06:e3:36:b7:ad:f1:
         b7:b9:b8:a8:d2:9f:0f:87:4d:df:f5:62:ae:ee:ca:56:a6:66:
         9d:b8:db:4a:66:9a:ae:cf:79:1d:3c:8c:8a:e3:59:49:49:dc:
         31:1d:f8:75:41:af:7d:12:1a:08:da:82:4c:c2:51:ee:6a:b6:
         93:88:28:28:be:81:03:ff:30:bb:b4:c4:27:df:68:ca:16:c0:
         84:63:25:d4:8a:39:36:80:5c:4d:95:bd:cb:72:fe:3b:84:35:
         43:ed:e6:94:28:ee:30:4b:d2:92:13:4e:35:5c:03:5f:9b:e8:
         d5:4c:8d:9b:f8:17:2b:63:c0:3c:0c:a9:00:27:c1:7a:58:cc:
         5f:3d:b1:ac:88:d1:2c:93:ff:48:de:d2:d8:3c:af:9b:a3:05:
         79:ee:cc:82:2a:2e:6f:a5:e3:6b:61:1c:53:a7:36:0f:41:99:
         77:ad:78:d5:06:e8:dc:be:b2:0c:2e:cd:29:a6:5e:30:e3:9d:
         75:e4:8e:18:6f:ec:59:10:a4:26:f2:60:3d:09:25:0d:30:e8:
         79:51:de:b7:bf:4c:1a:72:78:b9:b2:cf:42:f4:eb:ba:9d:6d:
         53:79:ce:28:43:aa:46:d0:8a:64:1a:34:3d:95:b6:de:d9:d9:
         67:9e:c7:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----