Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a313133373a3a2f34382d3438203d3e2033323039.roa
File:                     326131333a646638303a313133373a3a2f34382d3438203d3e2033323039.roa (raw, json)
Hash identifier:          i5SWDYQjT/IAZ0rT4Re9LwhKWHRsM/TTDt+p5X2XoFQ=
Subject key identifier:   EE:19:1E:A9:D5:94:87:E5:49:26:94:01:A3:BC:93:7C:B7:FA:F8:87
Certificate issuer:       /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial:       731296D831F1B0DA74E1AD659CEE96986A99F0F9
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a313133373a3a2f34382d3438203d3e2033323039.roa
Signing time:             Thu 05 Oct 2023 16:16:58 +0000
ROA not before:           Thu 05 Oct 2023 16:11:58 +0000
ROA not after:            Thu 03 Oct 2024 16:16:58 +0000
asID:                     3209
IP address blocks:        2a13:df80:1137::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:12:96:d8:31:f1:b0:da:74:e1:ad:65:9c:ee:96:98:6a:99:f0:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
        Validity
            Not Before: Oct  5 16:11:58 2023 GMT
            Not After : Oct  3 16:16:58 2024 GMT
        Subject: CN=EE191EA9D59487E549269401A3BC937CB7FAF887
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:52:d4:b8:29:83:cc:ac:fc:e1:3c:33:56:8c:
                    47:74:46:04:28:c7:8b:35:28:38:bb:a7:19:1a:49:
                    76:18:0c:9f:e0:57:f5:69:63:10:97:5c:47:f1:0a:
                    4d:3e:94:18:43:2b:41:47:10:3f:90:22:88:91:43:
                    89:00:08:dd:d7:ab:9a:31:33:96:6b:5c:d3:97:15:
                    70:d4:fa:be:c8:02:3b:a4:87:df:fd:ed:d9:b1:c7:
                    02:d7:73:9e:e5:cb:69:c0:f9:13:6e:b3:5a:9f:d9:
                    b8:a3:f4:13:ef:71:4e:6d:20:8f:5c:a7:11:6f:87:
                    b3:92:50:ce:79:ad:09:25:3d:d7:8e:e1:f4:e2:db:
                    b9:5e:2a:a6:69:98:91:7a:26:2a:25:d1:c8:29:fd:
                    d5:0c:04:62:f8:bb:cb:79:27:c3:5f:76:88:0b:65:
                    a0:73:c8:2f:6a:e8:57:6f:d8:02:f7:03:26:fc:7c:
                    c1:b4:6d:61:6e:a8:b1:c8:95:92:cc:2b:28:65:a4:
                    df:b1:c8:66:de:8e:af:42:64:18:db:07:07:2b:9c:
                    29:3d:ac:c3:2c:32:0b:c1:40:0c:4c:69:b5:4f:bd:
                    79:58:9a:02:89:83:3f:b1:78:17:3b:0f:dd:c0:45:
                    45:8c:37:2d:1c:a2:27:35:7d:ef:49:50:db:04:1b:
                    25:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:19:1E:A9:D5:94:87:E5:49:26:94:01:A3:BC:93:7C:B7:FA:F8:87
            X509v3 Authority Key Identifier:
                keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a313133373a3a2f34382d3438203d3e2033323039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df80:1137::/48

    Signature Algorithm: sha256WithRSAEncryption
         62:fc:69:5e:f4:50:34:f6:0c:a9:af:d4:75:9a:33:f3:74:3d:
         07:d1:cb:a8:d7:d7:75:38:53:35:46:36:7d:c9:2e:76:c7:92:
         3d:dc:d5:5f:b3:59:a4:92:13:a5:32:3f:77:86:6b:7e:2a:51:
         96:ef:43:ff:bc:c9:dc:cb:49:9c:95:bf:24:9a:ac:c9:94:60:
         9a:fc:70:7c:0d:53:81:f8:3d:1e:3d:7a:08:68:de:ea:e6:54:
         3f:f6:af:ae:69:bd:64:48:dc:aa:78:c9:86:eb:d4:81:77:5f:
         32:a2:09:02:fc:48:bc:cc:09:d4:bd:df:38:bc:c1:5f:43:39:
         30:8b:f2:7d:a5:eb:19:aa:a5:bc:f0:4b:92:bd:b7:7b:86:e4:
         71:25:8a:6d:dc:01:39:cc:a2:1e:79:98:41:2e:d9:9b:1e:39:
         ed:44:1a:42:f3:35:fb:6b:dc:95:a5:4e:6c:3f:93:dc:92:31:
         d9:c2:e5:f1:e7:22:7e:46:dd:f1:9e:ba:16:30:4b:e3:a3:cc:
         b1:8e:08:d6:99:0a:15:3c:4f:9e:fb:fd:a4:ff:56:50:2d:00:
         01:dc:a3:46:fe:d0:a3:c2:06:f7:5d:0a:a4:3d:a4:32:1f:c5:
         9c:78:16:c0:b6:4e:d9:30:87:ef:98:c3:83:8a:da:74:fe:30:
         f6:9b:33:ae
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgIUcxKW2DHxsNp04a1lnO6WmGqZ8PkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDVjM2Q1ZTcwZmM5YWQxMGJhOTBkNDVkYzY2NDU0ZTll
M2ExNDZhODAeFw0yMzEwMDUxNjExNThaFw0yNDEwMDMxNjE2NThaMDMxMTAvBgNV
BAMTKEVFMTkxRUE5RDU5NDg3RTU0OTI2OTQwMUEzQkM5MzdDQjdGQUY4ODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFUtS4KYPMrPzhPDNWjEd0RgQo
x4s1KDi7pxkaSXYYDJ/gV/VpYxCXXEfxCk0+lBhDK0FHED+QIoiRQ4kACN3Xq5ox
M5ZrXNOXFXDU+r7IAjukh9/97dmxxwLXc57ly2nA+RNus1qf2bij9BPvcU5tII9c
pxFvh7OSUM55rQklPdeO4fTi27leKqZpmJF6Jiol0cgp/dUMBGL4u8t5J8NfdogL
ZaBzyC9q6Fdv2AL3Ayb8fMG0bWFuqLHIlZLMKyhlpN+xyGbejq9CZBjbBwcrnCk9
rMMsMgvBQAxMabVPvXlYmgKJgz+xeBc7D93ARUWMNy0coic1fe9JUNsEGyVrAgMB
AAGjggJGMIICQjAdBgNVHQ4EFgQU7hkeqdWUh+VJJpQBo7yTfLf6+IcwHwYDVR0j
BBgwFoAU1cPV5w/JrRC6kNRdxmRU6eOhRqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDQwMzJjOGYtMWQ1Ny00YzNiLTkwNDMtYTBlN2ZlYmYx
NjdkLzAvRDVDM0Q1RTcwRkM5QUQxMEJBOTBENDVEQzY2NDU0RTlFM0ExNDZBOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFjUFY1d19KclJDNmtOUmR4bVJVNmVP
aFJxZy5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDQwMzJjOGYt
MWQ1Ny00YzNiLTkwNDMtYTBlN2ZlYmYxNjdkLzAvMzI2MTMxMzMzYTY0NjYzODMw
M2EzMTMxMzMzNzNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMzMzIzMDM5LnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA
AjAJAwcAKhPfgBE3MA0GCSqGSIb3DQEBCwUAA4IBAQBi/Gle9FA09gypr9R1mjPz
dD0H0cuo19d1OFM1RjZ9yS52x5I93NVfs1mkkhOlMj93hmt+KlGW70P/vMncy0mc
lb8kmqzJlGCa/HB8DVOB+D0ePXoIaN7q5lQ/9q+uab1kSNyqeMmG69SBd18yogkC
/Ei8zAnUvd84vMFfQzkwi/J9pesZqqW88EuSvbd7huRxJYpt3AE5zKIeeZhBLtmb
HjntRBpC8zX7a9yVpU5sP5PckjHZwuXx5yJ+Rt3xnroWMEvjo8yxjgjWmQoVPE+e
+/2k/1ZQLQAB3KNG/tCjwgb3XQqkPaQyH8WceBbAtk7ZMIfvmMODitp0/jD2mzOu
-----END CERTIFICATE-----