Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638353a626430303a3a2f34302d3634203d3e20323135383938.roa
File:                     326131333a646638353a626430303a3a2f34302d3634203d3e20323135383938.roa (raw, json)
Hash identifier:          QbyXty8SzG3sLAbFJkPnrySrB8T1aB7Oa3+ukfPd0C0=
Subject key identifier:   F9:2A:8D:FF:11:A6:06:14:C4:36:EA:71:D7:9B:64:B8:E9:9A:BD:40
Certificate issuer:       /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial:       480FCB75F4CA2657A284F2B8B10CBDAA0BBA75B8
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638353a626430303a3a2f34302d3634203d3e20323135383938.roa
Signing time:             Wed 06 Dec 2023 23:00:01 +0000
ROA not before:           Wed 06 Dec 2023 22:55:01 +0000
ROA not after:            Wed 04 Dec 2024 23:00:01 +0000
asID:                     215898
IP address blocks:        2a13:df85:bd00::/40 maxlen: 64

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:0f:cb:75:f4:ca:26:57:a2:84:f2:b8:b1:0c:bd:aa:0b:ba:75:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
        Validity
            Not Before: Dec  6 22:55:01 2023 GMT
            Not After : Dec  4 23:00:01 2024 GMT
        Subject: CN=F92A8DFF11A60614C436EA71D79B64B8E99ABD40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:57:41:8c:64:0a:a8:f8:2c:13:38:10:ca:43:
                    3e:69:2f:b6:5b:37:9c:d2:f0:3d:cf:09:29:22:26:
                    3b:80:fd:a6:8d:74:f4:f1:13:03:dd:fd:36:0c:1a:
                    28:41:40:69:cc:eb:96:fb:94:b6:7f:d0:23:b8:b5:
                    44:c0:30:99:2d:19:0b:a9:5b:cf:30:05:b5:28:e2:
                    91:92:9b:1d:37:25:3f:76:d0:20:f4:b0:c6:66:74:
                    1b:f6:b9:09:48:a6:b1:d8:38:8c:59:52:70:f6:a4:
                    32:03:32:73:df:41:b3:8e:05:11:1b:c8:df:5e:d3:
                    28:3e:ed:48:91:de:da:78:23:f3:c6:28:cb:b3:c1:
                    83:24:9b:d5:9a:b4:a4:af:3f:7b:3a:22:8c:fa:f0:
                    83:cf:84:72:cc:8d:68:98:8e:70:cd:b7:29:15:ae:
                    fd:71:b2:e1:ab:15:63:64:fb:fd:8b:dc:fe:7c:76:
                    32:33:6e:c6:ea:4b:f5:76:35:75:18:dc:5b:84:8b:
                    c4:ad:44:e7:c2:47:b5:83:fd:7f:4c:1a:ee:bf:db:
                    0a:2e:12:d3:29:17:13:d0:04:19:e3:6b:a5:5c:51:
                    6a:d0:39:7b:4b:63:9a:2d:f9:a6:8e:6e:0c:d8:2c:
                    fe:fa:65:6f:61:b8:b0:7b:6d:22:4e:63:e1:31:cf:
                    fc:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:2A:8D:FF:11:A6:06:14:C4:36:EA:71:D7:9B:64:B8:E9:9A:BD:40
            X509v3 Authority Key Identifier:
                keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638353a626430303a3a2f34302d3634203d3e20323135383938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df85:bd00::/40

    Signature Algorithm: sha256WithRSAEncryption
         c8:92:46:af:8f:df:ed:07:dd:7c:5d:fa:a5:a6:34:ff:85:9d:
         2b:13:a3:7d:d1:a9:c1:7e:6b:6d:e1:e4:6d:92:07:1e:de:76:
         af:f7:f7:0d:96:e5:e2:47:6b:a9:b2:2b:84:72:79:7d:45:85:
         dc:a7:c5:70:9f:56:6b:05:b2:61:1d:70:43:62:f6:7e:60:d5:
         b0:0c:21:a9:66:9b:c3:b2:91:6f:0c:1d:2b:54:10:b0:29:9b:
         3d:7f:02:ef:16:e5:92:95:11:7a:a9:fa:88:fe:27:df:89:e7:
         3f:28:7c:c7:f2:66:f7:cc:61:61:e4:75:0b:42:19:39:83:6d:
         c1:72:3b:53:65:f0:b6:d0:71:83:11:de:d4:8d:07:13:aa:27:
         b1:11:95:6d:f5:95:86:4b:fa:22:18:bc:a0:45:99:76:f1:67:
         2b:f3:2c:6c:62:4a:54:fa:fe:2b:48:7f:33:73:be:19:0f:de:
         10:0a:7d:f3:75:74:e6:56:22:52:d4:5c:36:0e:a5:0e:d3:b0:
         ea:04:17:25:49:b3:db:dc:a3:d5:57:8c:58:51:bb:b5:d5:6f:
         0d:01:ee:4c:e4:5a:d7:4b:8b:b0:b3:68:92:80:39:cf:b0:f9:
         fa:1f:f6:4b:f8:d8:ff:31:29:6c:96:67:ba:3b:39:10:93:b8:
         c7:d2:7f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----