Route Origin Authorization

$ rpki-client -vvf rpki1.rpki-test.sit.fraunhofer.de/repo/rpki1_fraunhofer/0/34352e3135352e3133312e302f32342d3234203d3e20323038313632.roa
File:                     34352e3135352e3133312e302f32342d3234203d3e20323038313632.roa (raw, json)
Hash identifier:          ubh3RqDhF7jiUoBXCgy7SvP1usz4zlNe+9vZhAdrQOQ=
Subject key identifier:   A8:95:B1:1E:53:5A:21:B3:88:B1:41:72:B8:2C:A2:C4:92:DE:1C:67
Certificate issuer:       /CN=df5a31e54915eb10eb015ed8f0476d8c3f64fff1
Certificate serial:       4BDF64FACB2B9847806C7635566774DCA7BACD94
Authority key identifier: DF:5A:31:E5:49:15:EB:10:EB:01:5E:D8:F0:47:6D:8C:3F:64:FF:F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/31ox5UkV6xDrAV7Y8EdtjD9k__E.cer
Subject info access:      rsync://rpki1.rpki-test.sit.fraunhofer.de/repo/rpki1_fraunhofer/0/34352e3135352e3133312e302f32342d3234203d3e20323038313632.roa
Signing time:             Fri 10 Jun 2022 08:38:50 +0000
ROA not before:           Fri 10 Jun 2022 08:33:50 +0000
ROA not after:            Fri 09 Jun 2023 08:38:50 +0000
asID:                     208162
IP address blocks:        45.155.131.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:df:64:fa:cb:2b:98:47:80:6c:76:35:56:67:74:dc:a7:ba:cd:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df5a31e54915eb10eb015ed8f0476d8c3f64fff1
        Validity
            Not Before: Jun 10 08:33:50 2022 GMT
            Not After : Jun  9 08:38:50 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:67:cc:b9:9a:81:26:ab:d8:b7:d6:ed:c7:f5:
                    67:ca:4b:f4:ce:c4:91:d9:54:44:f5:fc:9a:f3:a2:
                    17:04:36:71:a0:b1:01:13:03:02:e6:95:dc:97:62:
                    e2:0b:b7:8d:31:90:60:8c:d1:6a:b4:0f:97:24:3c:
                    bf:30:af:5f:24:18:a0:40:75:e1:3e:59:5e:88:0b:
                    b5:af:34:e5:54:02:48:b0:04:99:49:fa:42:41:72:
                    26:18:0f:b5:fb:3b:1e:c9:25:c3:84:1d:31:fe:5e:
                    47:0d:ad:44:81:5a:ee:52:b5:9b:12:0d:c3:e4:93:
                    70:e5:c6:87:f4:7a:e9:41:2d:8c:b4:91:c0:cd:f7:
                    09:71:da:6d:45:09:42:46:9d:6b:9d:ba:f2:88:9c:
                    4f:78:08:bd:a6:c0:21:d3:b6:7e:7b:b4:8a:4e:c9:
                    07:86:22:8e:30:4a:93:bf:f5:51:ee:ef:38:cc:7b:
                    ce:66:79:01:39:f5:9f:f8:d6:4f:46:80:6f:36:a2:
                    8e:b5:94:e1:b1:98:fd:d5:58:d5:b2:38:c6:d1:86:
                    4c:7b:df:fd:e1:9c:97:cf:59:99:48:8d:95:07:08:
                    70:2a:5b:6a:b0:8e:63:ee:a3:1f:97:0d:97:4d:fb:
                    8e:55:b7:3d:a6:a7:5a:85:50:da:4f:3f:f2:93:d6:
                    f6:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:95:B1:1E:53:5A:21:B3:88:B1:41:72:B8:2C:A2:C4:92:DE:1C:67
            X509v3 Authority Key Identifier:
                keyid:DF:5A:31:E5:49:15:EB:10:EB:01:5E:D8:F0:47:6D:8C:3F:64:FF:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.rpki-test.sit.fraunhofer.de/repo/rpki1_fraunhofer/0/DF5A31E54915EB10EB015ED8F0476D8C3F64FFF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/31ox5UkV6xDrAV7Y8EdtjD9k__E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.rpki-test.sit.fraunhofer.de/repo/rpki1_fraunhofer/0/34352e3135352e3133312e302f32342d3234203d3e20323038313632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.155.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d0:5f:2e:b8:17:8a:7f:11:40:62:2e:44:b1:bc:c1:c3:2a:e8:
         7c:bb:0c:78:81:e5:a0:1b:e0:d7:04:0c:db:41:f0:b5:d6:3b:
         fa:d1:74:fa:28:97:40:59:20:76:68:ff:63:0a:6b:c6:01:6f:
         9e:24:0a:5e:94:db:a3:05:8a:2e:6b:14:3d:84:f7:93:8c:6c:
         e1:34:07:9e:c8:5f:5a:b3:78:d2:a9:37:c3:e1:11:35:25:67:
         58:9b:17:38:ad:bf:a2:64:09:9c:80:dd:e9:18:ab:28:ab:2e:
         4f:f4:63:b8:94:1e:da:d0:82:37:5b:93:15:3f:38:b5:52:cc:
         e4:30:0f:b1:7c:41:f3:03:f4:58:3d:a3:10:e2:4c:2b:70:fc:
         5b:19:e7:f7:4c:c8:59:58:7d:27:68:90:99:d3:19:3b:01:7d:
         51:70:f9:72:3a:bb:a1:98:2e:0b:79:1f:0b:b7:90:38:7e:12:
         d6:3e:42:b4:ab:76:c7:5c:36:08:27:24:c2:b7:25:70:27:a6:
         e9:93:3e:a9:6f:1b:c7:b6:0f:5a:37:a3:85:1b:2b:e6:21:92:
         f6:cc:3f:eb:77:5b:cc:6f:9a:96:a8:ab:35:87:bd:8d:db:eb:
         fd:9d:be:29:a2:59:c5:cd:4d:23:ab:1f:b6:fe:95:5b:a6:99:
         f9:51:2e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----