Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a333831363a3a2f34382d3438203d3e203437343936.roa
File:                     326131333a646638303a333831363a3a2f34382d3438203d3e203437343936.roa (raw, json)
Hash identifier:          3uUVyn/sX7PgB7qXRNH7AOz48FE2QfVL+wmciDNKCQE=
Subject key identifier:   14:B8:A1:2C:A2:D3:9C:2D:58:2F:1F:11:C4:B3:A9:A5:72:24:19:BC
Certificate issuer:       /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial:       75D53A9494EE1C487D13FC323E701D0F0DB8189E
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a333831363a3a2f34382d3438203d3e203437343936.roa
Signing time:             Tue 19 Sep 2023 12:17:15 +0000
ROA not before:           Tue 19 Sep 2023 12:12:15 +0000
ROA not after:            Tue 17 Sep 2024 12:17:15 +0000
asID:                     47496
IP address blocks:        2a13:df80:3816::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:d5:3a:94:94:ee:1c:48:7d:13:fc:32:3e:70:1d:0f:0d:b8:18:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
        Validity
            Not Before: Sep 19 12:12:15 2023 GMT
            Not After : Sep 17 12:17:15 2024 GMT
        Subject: CN=14B8A12CA2D39C2D582F1F11C4B3A9A5722419BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:94:89:32:65:30:0f:3b:58:20:95:1e:b7:8b:
                    9a:a0:fc:ac:bf:ec:bd:d6:f7:5a:8a:60:a6:8b:1f:
                    35:2e:c8:1d:ea:d9:c8:90:d7:86:34:fb:ee:ff:10:
                    8f:40:4f:50:f5:a0:77:26:a2:3a:85:c3:bc:32:be:
                    3a:d3:02:b8:8a:26:09:b0:d3:fc:42:b8:48:bb:e8:
                    d7:46:1c:c9:9b:be:a8:6e:ef:7c:0c:98:9b:aa:f5:
                    42:c6:5d:9e:e8:31:51:0a:bf:11:c9:b8:f0:d5:e0:
                    eb:9c:7e:75:50:07:24:1a:43:fb:38:2d:51:9c:7f:
                    70:2a:74:21:bd:43:b9:cd:b9:94:d2:00:04:d0:f0:
                    89:5d:66:1d:07:d1:2d:a6:ec:d3:f7:df:0d:9f:77:
                    3f:96:cc:fe:a2:d1:00:2f:b9:ca:d7:45:96:dc:f1:
                    8a:e5:1a:17:be:b2:02:c5:57:60:a4:27:38:90:a6:
                    15:ac:ec:61:85:b6:12:bb:f8:cd:8f:9f:ca:07:dc:
                    fb:bc:db:46:3d:f1:a4:d1:8f:3b:fa:0f:15:93:19:
                    74:19:5c:90:db:fb:56:b4:4d:a5:d5:47:95:76:a8:
                    a1:4d:3a:ef:71:e1:af:f1:ff:1c:69:0d:72:0a:45:
                    d7:ea:fd:28:19:b7:42:c0:b1:1e:d6:b5:96:72:9c:
                    9e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:B8:A1:2C:A2:D3:9C:2D:58:2F:1F:11:C4:B3:A9:A5:72:24:19:BC
            X509v3 Authority Key Identifier:
                keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a333831363a3a2f34382d3438203d3e203437343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df80:3816::/48

    Signature Algorithm: sha256WithRSAEncryption
         3a:3f:ce:46:d0:db:0f:c3:4c:3f:56:f5:e7:c4:a0:00:6d:a2:
         5d:2d:de:b5:0f:18:aa:76:7d:da:25:fc:7e:fd:77:56:6d:cb:
         39:31:77:78:5a:f1:65:72:09:cb:1e:40:63:89:75:c1:39:f1:
         08:35:a1:af:67:59:06:82:36:a1:84:94:94:d6:49:19:9d:c0:
         c6:6e:08:f8:1c:05:8d:0a:e6:65:f9:e4:d4:06:e5:d3:5b:bb:
         7f:4f:6f:ad:3e:06:f6:cc:ec:ef:7b:2c:22:61:ef:a5:1b:8c:
         18:7a:ad:3c:2f:9b:be:25:20:14:3a:46:41:7f:1f:7d:f0:e6:
         16:9e:2a:0f:c9:fd:71:6a:e1:21:fc:36:65:b5:f8:c5:d5:de:
         e0:ae:fd:15:25:dd:27:70:32:55:fb:44:0e:70:e1:f9:72:c4:
         50:d3:3e:5f:a5:a6:1b:2e:00:f6:a9:80:84:23:24:8a:bb:90:
         1b:63:62:ef:f2:bf:cc:51:ba:67:54:4f:da:d5:4c:52:a6:16:
         66:89:51:e6:6a:f4:fb:43:df:ab:fc:e7:36:90:ef:ca:de:6b:
         98:0f:ca:58:d9:ef:67:68:bc:48:11:ea:50:ee:9b:19:63:eb:
         e5:c2:8c:05:11:e6:d5:e0:5e:12:58:b8:9a:19:f8:1d:71:92:
         80:71:d8:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----