Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a333831353a3a2f34382d3438203d3e20323136333230.roa
File:                     326131333a646638303a333831353a3a2f34382d3438203d3e20323136333230.roa (raw, json)
Hash identifier:          X1RV9Yhom+5i/9gvjLrbP/PJ4EgfsV8GQWKyc1KOTf8=
Subject key identifier:   BA:08:70:0C:F5:6A:19:57:6C:20:7F:0E:E8:7F:CE:BA:82:9C:67:F2
Certificate issuer:       /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial:       4594990EAF3285ABF47AA6E535900CB96177233A
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a333831353a3a2f34382d3438203d3e20323136333230.roa
Signing time:             Tue 12 Sep 2023 16:04:06 +0000
ROA not before:           Tue 12 Sep 2023 15:59:06 +0000
ROA not after:            Tue 10 Sep 2024 16:04:06 +0000
asID:                     216320
IP address blocks:        2a13:df80:3815::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:94:99:0e:af:32:85:ab:f4:7a:a6:e5:35:90:0c:b9:61:77:23:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
        Validity
            Not Before: Sep 12 15:59:06 2023 GMT
            Not After : Sep 10 16:04:06 2024 GMT
        Subject: CN=BA08700CF56A19576C207F0EE87FCEBA829C67F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:12:21:e6:5a:75:d3:5a:4f:75:41:ec:f2:d3:
                    d6:5a:ee:db:fd:c2:2c:fe:4c:f0:85:02:13:31:1c:
                    54:e2:a8:c5:91:4a:19:c1:8f:1e:ea:8d:b5:1a:cf:
                    75:55:01:82:95:a0:32:f9:6c:74:31:76:27:2d:e1:
                    79:9a:56:b0:42:62:8e:f7:b0:d4:1a:66:04:2f:97:
                    ef:cc:d1:5f:8a:a1:12:c8:52:1c:ee:0c:96:1a:d0:
                    38:a2:23:2f:7d:ae:62:86:d4:d6:24:79:4f:1b:e6:
                    23:a9:20:02:07:5b:24:a7:a1:6d:fd:da:27:c3:d6:
                    0a:98:54:e9:e5:82:4c:19:a4:a5:38:5b:40:b3:c6:
                    cb:23:a7:62:8e:df:fd:dc:b8:ab:f9:86:e0:20:d4:
                    c5:37:0b:03:8e:02:ac:1e:44:3c:ae:69:99:6c:fd:
                    e4:ec:00:55:72:f9:cb:31:5a:37:ab:29:a0:11:05:
                    10:cb:77:e7:43:dd:71:db:01:f2:da:e0:1b:7b:70:
                    69:e7:d8:73:3a:b9:22:e3:5c:aa:72:a5:f4:46:71:
                    43:77:3c:11:f2:52:68:c8:ba:05:3b:c7:c7:6b:4b:
                    f5:a6:11:c0:35:da:67:c1:04:2b:a0:87:a5:cc:86:
                    37:b1:f6:80:bd:cb:54:73:f7:5a:e6:6b:70:09:bc:
                    99:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:08:70:0C:F5:6A:19:57:6C:20:7F:0E:E8:7F:CE:BA:82:9C:67:F2
            X509v3 Authority Key Identifier:
                keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a333831353a3a2f34382d3438203d3e20323136333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df80:3815::/48

    Signature Algorithm: sha256WithRSAEncryption
         c0:02:d8:f6:ca:a2:b4:bf:e6:3a:ea:07:4c:e1:86:df:39:e0:
         13:79:83:01:75:64:25:f8:28:e0:9d:9f:44:b6:5b:00:36:65:
         4e:fe:f5:54:d9:17:87:47:33:95:74:71:fa:46:b7:f0:5a:60:
         53:65:a4:d1:b5:15:83:04:31:07:2b:15:f2:5e:2b:92:3a:a3:
         0d:f4:0a:8a:3a:63:c2:5c:f8:6f:2d:5f:3f:8e:71:11:dd:a4:
         40:8a:d0:1c:90:fa:51:72:a2:34:34:d9:61:6d:c6:5b:00:f0:
         0b:cf:58:98:37:47:6b:86:1a:a2:3c:91:d3:ab:c8:c4:d4:d2:
         b4:ba:81:08:90:5a:d3:57:ca:6d:f0:33:1f:35:96:f1:78:49:
         29:d8:94:0b:af:77:c9:db:fb:f2:d4:f0:cb:cd:93:2f:55:49:
         e0:96:bd:53:c0:86:5f:ba:a4:fa:de:9b:2d:c6:d5:16:0c:d4:
         9c:57:a7:f5:8c:06:42:db:f0:bc:07:38:5e:23:58:70:c4:0e:
         93:53:d6:9a:18:25:d8:82:67:26:98:46:4c:58:c5:12:a8:e0:
         fb:e3:a7:2a:a3:1b:52:61:b3:50:d3:26:32:5f:62:93:b5:e7:
         01:fa:af:57:ba:3e:a9:eb:49:99:b8:02:4b:9f:84:5d:39:35:
         be:1d:28:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----