Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a363831303a3a2f34382d3438203d3e20323135393637.roa
File:                     326131333a646638303a363831303a3a2f34382d3438203d3e20323135393637.roa (raw, json)
Hash identifier:          Zka5bcfVZUTwc08SsVrmgwJkEwejnLgGJI2u6cbvK04=
Subject key identifier:   38:3D:A3:A3:F2:EC:77:05:10:BD:A3:36:15:03:B8:DB:32:8D:B7:45
Certificate issuer:       /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial:       60F59C127B8787C585645FE6DE282311CBE9BC62
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a363831303a3a2f34382d3438203d3e20323135393637.roa
Signing time:             Sun 26 Nov 2023 21:05:40 +0000
ROA not before:           Sun 26 Nov 2023 21:00:40 +0000
ROA not after:            Sun 24 Nov 2024 21:05:40 +0000
asID:                     215967
IP address blocks:        2a13:df80:6810::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:f5:9c:12:7b:87:87:c5:85:64:5f:e6:de:28:23:11:cb:e9:bc:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
        Validity
            Not Before: Nov 26 21:00:40 2023 GMT
            Not After : Nov 24 21:05:40 2024 GMT
        Subject: CN=383DA3A3F2EC770510BDA3361503B8DB328DB745
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ca:eb:1f:08:37:e7:8d:a5:58:71:41:2b:23:
                    90:75:a7:59:fa:d1:d4:bc:16:a9:00:be:a7:8c:50:
                    dc:12:2e:ae:7c:48:fe:5e:e8:3f:d9:8a:3c:56:5e:
                    29:a3:7b:c8:da:4f:a1:b0:b3:3c:2e:1c:9c:d3:2b:
                    66:50:01:52:a7:e7:de:9a:26:0a:81:ea:5c:d3:73:
                    c7:20:fc:bd:9b:30:b3:6e:5f:c5:44:65:61:96:76:
                    76:45:d6:ab:c0:04:d2:9c:ef:8b:8b:87:c1:50:7a:
                    f6:69:15:eb:32:ba:2b:67:c0:ca:ba:0a:d3:89:40:
                    15:bc:89:87:46:f8:98:3c:3f:8d:a1:f7:9d:9e:85:
                    14:50:56:6b:df:43:ec:a4:61:17:f2:9d:6b:36:66:
                    33:97:bc:8b:39:73:ec:4c:c7:17:35:07:71:56:3f:
                    ba:2a:39:33:fb:20:bd:ac:a7:eb:8c:7d:aa:55:f7:
                    19:a0:ad:86:62:b5:42:e5:70:50:8c:a1:8c:4b:19:
                    b2:5d:6e:38:7d:02:ee:bb:6d:77:ce:a8:36:95:b2:
                    45:8c:32:f6:2f:d9:3e:c8:45:74:83:b5:a8:98:84:
                    ee:c4:21:6b:06:50:fe:01:f6:76:7d:1c:3a:a3:49:
                    78:35:79:7e:66:b5:11:6e:0b:88:14:bc:88:1d:9a:
                    a6:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:3D:A3:A3:F2:EC:77:05:10:BD:A3:36:15:03:B8:DB:32:8D:B7:45
            X509v3 Authority Key Identifier:
                keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a363831303a3a2f34382d3438203d3e20323135393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df80:6810::/48

    Signature Algorithm: sha256WithRSAEncryption
         52:f3:3a:e1:a9:75:f2:4a:08:4d:c8:d6:1e:b7:ab:9f:24:88:
         36:d6:58:9f:6e:63:3f:c7:88:c6:fd:43:51:c6:f0:a6:3b:15:
         28:9e:e6:ce:31:ca:2c:af:23:c9:a8:42:7b:dc:c6:4c:ab:5f:
         0b:3a:12:56:a5:b8:02:d0:94:43:96:d3:7c:33:ae:3f:5a:6f:
         64:03:4c:13:c2:c8:3a:97:21:11:f1:9e:f9:c9:33:76:dc:0e:
         0b:85:bf:ee:63:85:78:7e:f1:66:4c:d7:3f:14:cb:66:76:5f:
         2d:a3:b4:0c:d0:3c:29:b4:76:c5:e5:9a:4d:b4:87:08:8c:f2:
         d8:e9:1f:25:2b:a5:50:e6:f4:db:6b:d5:c5:01:35:51:98:b7:
         af:e4:3a:7b:c9:c1:18:5b:69:98:a9:fb:41:95:75:45:54:a2:
         c2:c5:93:a9:28:43:2b:1e:a7:4a:4a:f5:e3:10:4a:05:40:13:
         3c:23:ee:27:20:8a:e4:86:7f:4c:69:00:a5:a0:04:c6:37:3a:
         13:6e:67:a4:c0:2d:50:2a:1b:49:68:47:80:81:d2:a3:e7:d9:
         6a:48:01:55:85:9c:12:80:7f:e6:7c:83:a3:0a:ca:90:0d:51:
         e0:46:2d:2d:0d:d9:00:eb:37:ae:bc:eb:c4:df:36:02:cd:da:
         35:4e:ca:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----