Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638373a663830303a3a2f33382d3438203d3e203437353039.roa
File:                     326131333a646638373a663830303a3a2f33382d3438203d3e203437353039.roa (raw, json)
Hash identifier:          0DnQr7M7n4CEplMBaup35UyQmJtEdnCg96FZAdKcKiU=
Subject key identifier:   74:1C:06:DC:4C:81:C7:00:77:2B:7E:12:E1:A9:7E:9B:C2:32:8B:42
Certificate issuer:       /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial:       5B739EA2652268C8DFF8B6307B012D30447D2403
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638373a663830303a3a2f33382d3438203d3e203437353039.roa
Signing time:             Tue 14 Nov 2023 23:09:17 +0000
ROA not before:           Tue 14 Nov 2023 23:04:17 +0000
ROA not after:            Tue 12 Nov 2024 23:09:17 +0000
asID:                     47509
IP address blocks:        2a13:df87:f800::/38 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:73:9e:a2:65:22:68:c8:df:f8:b6:30:7b:01:2d:30:44:7d:24:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
        Validity
            Not Before: Nov 14 23:04:17 2023 GMT
            Not After : Nov 12 23:09:17 2024 GMT
        Subject: CN=741C06DC4C81C700772B7E12E1A97E9BC2328B42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:c1:ea:81:4b:7c:a7:75:dd:a2:fa:af:63:4c:
                    d3:44:0d:85:da:5e:b4:80:98:a4:ee:08:10:09:a6:
                    28:cc:bb:32:cb:94:8f:0e:fd:f4:9a:15:8e:16:61:
                    8b:bf:51:17:fd:0d:e3:a3:0b:25:e0:2a:3e:25:e3:
                    50:e1:3b:7a:39:3c:69:86:83:99:28:20:17:d6:f2:
                    e8:49:37:b0:18:69:1b:8e:14:f1:5c:18:02:50:e9:
                    e1:e5:cd:13:1d:f4:c9:8b:6e:c3:02:df:1b:71:a7:
                    28:c4:42:d5:85:65:1b:f4:0a:f5:b5:06:ce:03:d8:
                    4f:2d:d6:55:7c:53:c9:df:20:63:84:ba:ce:71:46:
                    b6:12:50:21:76:0b:19:15:81:1e:c4:d7:54:35:e5:
                    89:59:7a:d5:90:52:14:69:4c:aa:82:ce:d2:dd:25:
                    0f:99:fe:6d:40:d9:2e:4c:0e:81:7d:1e:00:b0:09:
                    63:99:43:2a:43:47:8c:7d:78:ce:8a:f1:31:64:a5:
                    25:44:3f:06:4c:2d:d7:7c:25:62:5e:f2:07:db:52:
                    27:0f:bb:83:89:11:10:dd:48:e6:4b:ca:47:91:10:
                    d4:be:60:15:a9:dd:6c:03:5a:b9:ba:93:5b:ca:72:
                    eb:ff:42:d7:97:20:8e:e0:0a:5e:ec:15:69:9e:a3:
                    00:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:1C:06:DC:4C:81:C7:00:77:2B:7E:12:E1:A9:7E:9B:C2:32:8B:42
            X509v3 Authority Key Identifier:
                keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638373a663830303a3a2f33382d3438203d3e203437353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df87:f800::/38

    Signature Algorithm: sha256WithRSAEncryption
         33:ed:21:be:db:76:c8:4b:90:89:01:3e:c6:11:59:25:8f:a2:
         25:17:d1:f2:77:15:ed:5d:d4:6e:a9:05:1e:e2:38:1e:64:b0:
         83:a3:23:be:f7:11:77:4a:2a:3d:f4:95:c6:76:5d:df:18:70:
         c4:9c:ab:69:d0:84:f0:42:b1:1f:c8:8c:6e:93:c1:48:52:b8:
         db:d8:57:19:cb:90:91:de:16:35:65:18:a6:ee:86:6b:2f:c5:
         50:13:e4:1a:a5:7d:90:18:a2:c5:29:8f:16:d1:45:42:67:10:
         08:0a:bb:76:72:6a:96:ef:7c:99:c4:b0:63:71:fd:b8:1e:43:
         00:09:9f:65:f7:9b:ec:c2:1c:dd:6a:9e:6d:7c:5c:63:c1:93:
         75:87:55:1a:32:6a:19:21:ed:3b:4e:d5:1d:3b:3f:1a:73:1c:
         6b:0b:d9:16:d1:c9:db:2f:d2:87:4f:76:3a:82:21:7c:03:84:
         46:a7:bf:30:30:45:6f:86:f7:1f:db:e5:d2:5c:9f:60:e4:a7:
         a7:ac:f8:2f:70:cb:0e:2b:93:c4:dd:19:80:b5:15:e6:18:e3:
         54:c7:ab:d4:d9:ce:e3:e8:e5:55:57:43:1f:68:f3:5f:2b:40:
         8b:e8:50:e2:ee:d9:5d:dc:19:d9:41:28:dc:5b:c8:0a:c5:76:
         7d:ac:0d:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----