Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638373a3a2f33362d3438203d3e203438373030.roa
File:                     326131333a646638373a3a2f33362d3438203d3e203438373030.roa (raw, json)
Hash identifier:          xS9kQxEr5dKd3It+d3Ew5wbIS4Vvd1Q94bQLDmUWIN4=
Subject key identifier:   51:C4:24:8B:52:C4:D3:A0:62:D9:19:8E:13:A2:D6:3B:6F:A9:AA:1F
Certificate issuer:       /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial:       3BBC080156B166D8E4B10A540EBE2A4B5F6FDFE0
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638373a3a2f33362d3438203d3e203438373030.roa
Signing time:             Fri 18 Aug 2023 18:33:34 +0000
ROA not before:           Fri 18 Aug 2023 18:28:34 +0000
ROA not after:            Fri 16 Aug 2024 18:33:34 +0000
asID:                     48700
IP address blocks:        2a13:df87::/36 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:bc:08:01:56:b1:66:d8:e4:b1:0a:54:0e:be:2a:4b:5f:6f:df:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
        Validity
            Not Before: Aug 18 18:28:34 2023 GMT
            Not After : Aug 16 18:33:34 2024 GMT
        Subject: CN=51C4248B52C4D3A062D9198E13A2D63B6FA9AA1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:8c:0c:d6:6c:15:f2:87:74:e7:0f:40:42:30:
                    d2:87:e2:88:f2:bb:e9:01:38:3f:12:14:c7:a1:cc:
                    8a:23:b1:67:70:be:c4:67:f0:10:96:21:de:ff:59:
                    42:26:a0:07:9f:1a:2d:0e:b7:c0:fb:23:24:9f:8b:
                    de:58:bc:70:c1:48:ca:47:c0:ef:d9:cf:8c:6f:5d:
                    c9:24:56:57:a9:06:6f:44:8f:82:4b:83:28:a2:6a:
                    15:f1:bc:73:40:46:e6:be:99:99:f2:a5:fe:7e:2a:
                    96:06:74:a1:e3:76:bf:98:a7:8f:c7:81:61:31:07:
                    5e:b6:1a:52:9b:66:05:f7:8c:c6:20:d9:5b:7c:53:
                    eb:3d:99:c2:71:d1:9f:84:de:29:2d:fb:de:91:3d:
                    07:56:19:96:79:1f:fa:3b:c2:5e:39:c0:dd:c5:fd:
                    55:e8:e2:58:a8:fa:11:4d:46:d6:77:53:2c:89:4b:
                    c7:fd:67:84:68:58:34:9b:fe:75:66:eb:7b:75:f5:
                    5e:b8:bd:12:68:f1:22:8e:b6:c4:2b:a7:b8:9a:23:
                    b6:ca:d6:4b:4e:d0:d8:a3:c2:ae:79:ae:6d:1d:2c:
                    f1:4a:ed:75:84:e2:31:0b:2c:85:b3:4c:0f:e8:41:
                    6c:d6:5f:ce:26:f7:f5:e0:86:7f:7b:ca:be:c9:b8:
                    f3:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:C4:24:8B:52:C4:D3:A0:62:D9:19:8E:13:A2:D6:3B:6F:A9:AA:1F
            X509v3 Authority Key Identifier:
                keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638373a3a2f33362d3438203d3e203438373030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df87::/36

    Signature Algorithm: sha256WithRSAEncryption
         64:b2:bb:8c:4e:05:37:0d:eb:40:b5:18:53:ef:36:9d:60:ca:
         d9:65:3b:82:0d:a3:ec:b1:62:33:54:1c:bc:ae:f7:54:9f:09:
         ea:f3:bd:0e:3e:ab:aa:59:7d:9c:e8:56:18:3c:12:df:d6:8a:
         0d:4b:eb:90:4e:43:15:d8:70:87:34:ae:6c:ff:7b:be:c0:79:
         1d:d8:92:ce:bf:e1:00:fa:04:ad:aa:55:f0:8f:8d:02:49:68:
         83:92:92:14:ed:f3:07:88:0b:47:cd:7a:f2:94:2b:90:37:5b:
         06:8a:c1:2d:0e:48:89:26:9e:fe:b8:40:6f:22:43:44:e8:bd:
         4c:86:e9:e4:1d:83:0a:45:82:4d:05:8f:ba:21:80:25:80:8f:
         12:e9:6e:af:12:82:80:f5:7f:d6:67:b1:f1:24:9a:56:df:5c:
         3a:4c:ee:d8:6e:48:16:23:9a:1d:b6:e4:9c:4e:51:a3:dc:2a:
         45:46:ef:24:3b:a3:29:d4:5e:b6:66:23:d0:ed:55:d8:fd:07:
         1d:cc:e1:18:27:db:dc:74:2a:20:08:09:dc:34:55:0f:70:17:
         6d:36:5a:ae:81:ca:32:2e:5d:60:40:20:5e:e8:bf:08:91:ff:
         0e:59:d6:12:39:61:40:7a:d8:47:c5:c4:f8:11:0b:48:5d:c2:
         f7:40:78:c3
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUO7wIAVaxZtjksQpUDr4qS19v3+AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDVjM2Q1ZTcwZmM5YWQxMGJhOTBkNDVkYzY2NDU0ZTll
M2ExNDZhODAeFw0yMzA4MTgxODI4MzRaFw0yNDA4MTYxODMzMzRaMDMxMTAvBgNV
BAMTKDUxQzQyNDhCNTJDNEQzQTA2MkQ5MTk4RTEzQTJENjNCNkZBOUFBMUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjjAzWbBXyh3TnD0BCMNKH4ojy
u+kBOD8SFMehzIojsWdwvsRn8BCWId7/WUImoAefGi0Ot8D7IySfi95YvHDBSMpH
wO/Zz4xvXckkVlepBm9Ej4JLgyiiahXxvHNARua+mZnypf5+KpYGdKHjdr+Yp4/H
gWExB162GlKbZgX3jMYg2Vt8U+s9mcJx0Z+E3ikt+96RPQdWGZZ5H/o7wl45wN3F
/VXo4lio+hFNRtZ3UyyJS8f9Z4RoWDSb/nVm63t19V64vRJo8SKOtsQrp7iaI7bK
1ktO0Nijwq55rm0dLPFK7XWE4jELLIWzTA/oQWzWX84m9/Xghn97yr7JuPMTAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUUcQki1LE06Bi2RmOE6LWO2+pqh8wHwYDVR0j
BBgwFoAU1cPV5w/JrRC6kNRdxmRU6eOhRqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDQwMzJjOGYtMWQ1Ny00YzNiLTkwNDMtYTBlN2ZlYmYx
NjdkLzAvRDVDM0Q1RTcwRkM5QUQxMEJBOTBENDVEQzY2NDU0RTlFM0ExNDZBOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFjUFY1d19KclJDNmtOUmR4bVJVNmVP
aFJxZy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDQwMzJjOGYt
MWQ1Ny00YzNiLTkwNDMtYTBlN2ZlYmYxNjdkLzAvMzI2MTMxMzMzYTY0NjYzODM3
M2EzYTJmMzMzNjJkMzQzODIwM2QzZTIwMzQzODM3MzAzMC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCoT
34cAMA0GCSqGSIb3DQEBCwUAA4IBAQBksruMTgU3DetAtRhT7zadYMrZZTuCDaPs
sWIzVBy8rvdUnwnq870OPquqWX2c6FYYPBLf1ooNS+uQTkMV2HCHNK5s/3u+wHkd
2JLOv+EA+gStqlXwj40CSWiDkpIU7fMHiAtHzXrylCuQN1sGisEtDkiJJp7+uEBv
IkNE6L1MhunkHYMKRYJNBY+6IYAlgI8S6W6vEoKA9X/WZ7HxJJpW31w6TO7YbkgW
I5odtuScTlGj3CpFRu8kO6Mp1F62ZiPQ7VXY/QcdzOEYJ9vcdCogCAncNFUPcBdt
NlqugcoyLl1gQCBe6L8Ikf8OWdYSOWFAethHxcT4EQtIXcL3QHjD
-----END CERTIFICATE-----