Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a363830353a3a2f34382d3438203d3e20323136333230.roa
File:                     326131333a646638303a363830353a3a2f34382d3438203d3e20323136333230.roa (raw, json)
Hash identifier:          y5BPIdnIfNtcrta512rdF71xljYsLXN6wntOV9IjZ/0=
Subject key identifier:   7E:9D:92:A1:0F:61:F8:EF:49:FE:48:48:CD:FD:6B:64:3A:14:5F:13
Certificate issuer:       /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial:       06D3990B2D0F52DC884FDEA917B941295A12245F
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a363830353a3a2f34382d3438203d3e20323136333230.roa
Signing time:             Tue 12 Sep 2023 16:03:54 +0000
ROA not before:           Tue 12 Sep 2023 15:58:54 +0000
ROA not after:            Tue 10 Sep 2024 16:03:54 +0000
asID:                     216320
IP address blocks:        2a13:df80:6805::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:d3:99:0b:2d:0f:52:dc:88:4f:de:a9:17:b9:41:29:5a:12:24:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
        Validity
            Not Before: Sep 12 15:58:54 2023 GMT
            Not After : Sep 10 16:03:54 2024 GMT
        Subject: CN=7E9D92A10F61F8EF49FE4848CDFD6B643A145F13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:5d:e0:01:ac:15:47:15:58:57:d1:94:cf:7c:
                    8b:67:a6:b1:ba:3f:66:4d:d2:fb:14:06:f0:98:f4:
                    fa:70:33:88:4c:f7:83:0f:00:51:4f:35:e2:fe:b8:
                    f2:83:8a:46:12:46:31:e3:e6:40:4d:bd:13:81:a7:
                    2e:ea:cf:9e:01:3c:ce:1b:31:5a:db:c8:64:8b:f8:
                    b1:86:4d:56:00:73:ca:5e:32:6b:9e:00:8b:68:fa:
                    92:f8:2e:43:aa:c6:01:ad:58:80:4d:44:19:04:24:
                    a8:94:22:f5:69:44:8e:df:de:90:d0:b9:78:4c:08:
                    0d:56:8b:95:da:06:34:e8:55:ce:ec:43:fe:93:29:
                    ca:4f:a4:07:7d:ad:68:b8:77:14:07:9b:44:0c:03:
                    35:a3:84:f6:3b:2c:a7:96:14:11:24:6d:1f:5b:da:
                    4b:3e:df:fc:15:44:27:40:35:c6:0f:c7:f7:89:14:
                    bd:69:f2:5d:6a:59:c3:37:a8:81:f5:4d:f8:0c:76:
                    9f:28:2c:5b:e1:51:7b:fe:df:5c:39:75:5d:be:ec:
                    fb:27:eb:ce:55:42:3a:04:77:45:35:58:e0:ea:fc:
                    0a:95:d1:4a:08:ae:6e:b6:16:0d:99:bb:35:53:9f:
                    3b:0d:fb:6b:e1:f7:b2:d5:31:84:fc:5e:4c:da:7b:
                    ae:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:9D:92:A1:0F:61:F8:EF:49:FE:48:48:CD:FD:6B:64:3A:14:5F:13
            X509v3 Authority Key Identifier:
                keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a363830353a3a2f34382d3438203d3e20323136333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df80:6805::/48

    Signature Algorithm: sha256WithRSAEncryption
         1f:9d:9b:9c:63:66:a4:b0:52:0f:ad:41:02:1c:18:b0:c6:e0:
         99:7f:f0:33:da:0c:98:e2:f8:56:36:86:64:c3:c5:55:9a:f3:
         8c:3a:0d:72:dd:81:3e:10:20:25:36:fb:a3:9d:e7:09:3e:f1:
         5c:31:94:80:2c:b1:45:dc:b7:1c:d9:df:ac:4b:6e:71:6f:e7:
         47:c9:6b:79:b1:7d:8c:ba:70:8c:d8:c7:89:1b:df:72:e5:0f:
         f9:2b:15:78:ea:8d:81:61:49:24:aa:82:d8:3e:16:26:4a:9a:
         51:18:0a:d4:2e:72:c4:47:82:f8:9b:37:10:63:4f:02:cb:44:
         76:90:ab:28:4e:2a:30:b9:6f:9d:73:24:cf:f4:55:68:70:9e:
         f5:af:a4:d7:a9:8b:f6:55:03:c9:39:cd:0f:bd:d9:ae:c0:7f:
         fc:b5:4e:bf:d6:70:6d:aa:74:9c:bb:2c:24:b7:8c:ed:0e:71:
         77:b6:7a:fe:67:20:b9:6d:7f:55:2b:84:ee:a4:e7:f1:c5:c1:
         14:39:f1:b7:fe:06:2d:93:7a:ae:ff:a3:38:98:d1:65:7b:97:
         eb:17:b4:51:2b:2c:94:6b:92:4f:2b:1f:62:ce:c6:5d:2b:51:
         67:8b:a9:30:7d:f1:fd:ce:d7:24:dd:6c:46:9d:c1:90:85:64:
         51:c9:4f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----