Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a666266303a3a2f34382d3438203d3e20313937393933.roa
File:                     326131333a646638303a666266303a3a2f34382d3438203d3e20313937393933.roa (raw, json)
Hash identifier:          wAUL173q9eWm0ncXYWMcFyyR5fl38Bp5Q1KuojXqhdw=
Subject key identifier:   FD:3A:0D:4C:0B:16:DA:2B:FE:52:CD:E0:4B:9D:7F:8B:A8:82:9C:88
Certificate issuer:       /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial:       4F47E6BCBAFB2338EA026C5E321F94EC95F48021
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a666266303a3a2f34382d3438203d3e20313937393933.roa
Signing time:             Thu 24 Aug 2023 14:38:23 +0000
ROA not before:           Thu 24 Aug 2023 14:33:23 +0000
ROA not after:            Thu 22 Aug 2024 14:38:23 +0000
asID:                     197993
IP address blocks:        2a13:df80:fbf0::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:47:e6:bc:ba:fb:23:38:ea:02:6c:5e:32:1f:94:ec:95:f4:80:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
        Validity
            Not Before: Aug 24 14:33:23 2023 GMT
            Not After : Aug 22 14:38:23 2024 GMT
        Subject: CN=FD3A0D4C0B16DA2BFE52CDE04B9D7F8BA8829C88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:05:2d:ab:71:69:da:ee:4c:a2:b0:ef:c4:9e:
                    94:6e:76:86:4a:2e:d7:8d:0a:ec:c0:a2:c1:d6:27:
                    22:1d:2a:0e:92:37:0a:c6:d5:49:7c:3f:20:a8:5b:
                    a0:47:cf:cf:70:de:0b:fd:bf:92:31:41:7b:60:91:
                    92:11:5d:ef:3f:54:5c:a9:fe:be:62:8e:cf:a3:48:
                    52:ca:91:c7:fe:18:b2:74:ff:a9:57:6f:19:19:e1:
                    b7:c9:b9:e4:c7:07:ab:bf:61:be:d7:68:f0:3d:f4:
                    fc:84:28:1f:12:4a:64:19:f1:e9:fa:22:fd:97:05:
                    d8:76:41:55:ce:07:e4:0f:83:90:9a:e8:ce:2c:1a:
                    6f:03:16:12:0f:91:2f:53:8c:ea:13:64:b6:6f:cc:
                    c6:2a:47:e2:01:91:a5:8d:c4:b1:79:c1:28:26:a1:
                    a0:2d:57:0d:b0:5f:cf:79:f0:fb:07:e0:01:51:3b:
                    e1:e4:be:10:14:2e:d2:c4:9f:37:da:4a:36:cc:a1:
                    c9:22:38:65:65:2a:92:b1:81:95:cd:25:fc:b8:95:
                    4e:93:0a:91:04:61:de:1c:a4:77:ae:8d:6c:f8:30:
                    bb:3e:5c:77:62:f0:b5:27:c9:ba:99:14:5c:83:07:
                    eb:f9:82:55:e4:9b:47:23:96:03:01:18:47:91:91:
                    5e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:3A:0D:4C:0B:16:DA:2B:FE:52:CD:E0:4B:9D:7F:8B:A8:82:9C:88
            X509v3 Authority Key Identifier:
                keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a666266303a3a2f34382d3438203d3e20313937393933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df80:fbf0::/48

    Signature Algorithm: sha256WithRSAEncryption
         5d:3b:f4:63:e5:5a:32:9a:2f:33:8b:13:99:08:72:c4:41:ea:
         34:5e:fc:c1:e0:6d:a7:4f:0e:d0:ca:76:f3:99:ef:9c:73:ad:
         9c:e1:85:6b:89:15:3d:ba:43:0e:cc:3d:4f:b2:af:77:1f:46:
         3c:4c:4a:64:01:08:04:68:39:cc:c2:56:3d:35:44:59:5d:4f:
         6e:86:7c:f2:1e:50:38:64:a4:62:8a:c8:23:40:36:6c:01:f7:
         dc:14:f2:c2:d5:5c:4a:e2:e0:be:19:79:fa:05:50:46:85:d0:
         ee:fc:68:a6:16:e5:84:91:b4:1f:06:a8:43:ea:84:0c:58:10:
         93:c1:de:10:1f:db:73:02:3c:41:d2:fd:9c:25:1e:51:d9:8b:
         c5:cd:9a:58:ae:10:bd:f6:07:95:d3:91:67:09:c7:2f:ae:15:
         a9:b0:64:c9:9a:8e:08:2f:34:5c:80:47:be:7c:88:d1:93:30:
         90:92:bc:73:b4:24:94:dc:a2:bb:62:b5:89:11:d7:d3:80:ab:
         c4:d6:d9:d0:3a:af:cb:7b:09:09:81:46:99:40:a6:1f:e4:d8:
         db:65:ba:8c:5f:09:9e:b9:ac:ca:01:e6:20:d1:31:25:a8:d7:
         2a:5f:9c:30:66:d8:e1:d9:02:6b:3b:fb:67:5a:be:09:3c:46:
         00:02:3a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----