Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a313330303a3a2f34342d3438203d3e20313937343737.roa
File:                     326131333a646638303a313330303a3a2f34342d3438203d3e20313937343737.roa (raw, json)
Hash identifier:          D4iGP9VO8XS9CLmhsdimSPoOCPbkw146WXhAy+3zmjo=
Subject key identifier:   3B:A4:9E:12:6F:04:1C:E4:54:C0:E6:B8:4D:68:22:17:A4:BA:DA:22
Certificate issuer:       /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial:       487F2301E96BD28F0F6BB3D6D9019CEF58831DBC
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a313330303a3a2f34342d3438203d3e20313937343737.roa
Signing time:             Wed 16 Aug 2023 15:01:00 +0000
ROA not before:           Wed 16 Aug 2023 14:56:00 +0000
ROA not after:            Wed 14 Aug 2024 15:01:00 +0000
asID:                     197477
IP address blocks:        2a13:df80:1300::/44 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:7f:23:01:e9:6b:d2:8f:0f:6b:b3:d6:d9:01:9c:ef:58:83:1d:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
        Validity
            Not Before: Aug 16 14:56:00 2023 GMT
            Not After : Aug 14 15:01:00 2024 GMT
        Subject: CN=3BA49E126F041CE454C0E6B84D682217A4BADA22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7e:b6:95:cd:77:8a:35:57:70:42:48:4b:3d:
                    d0:fc:f0:5a:d3:30:f4:62:6f:71:63:34:4e:f1:5d:
                    94:cd:2f:ea:a0:24:dc:8f:77:93:3f:1c:09:4b:31:
                    59:ec:86:a2:97:55:33:4b:51:35:b8:04:8c:da:44:
                    d2:30:62:10:7e:40:e1:28:a9:2f:36:24:6f:17:2e:
                    80:1e:74:19:ed:59:ff:80:8e:ca:51:4f:4d:f6:15:
                    50:4a:51:c4:8d:e5:d2:97:f4:36:c2:3b:28:d7:50:
                    5e:69:e6:88:c7:a6:fc:81:d7:7b:b7:c3:87:a9:14:
                    12:96:1d:41:da:b4:74:fc:1c:07:1c:4b:0d:fe:cb:
                    bf:fa:0e:77:3e:94:3b:ba:3f:14:c3:c7:4b:e4:9b:
                    e2:db:67:b1:b1:fc:81:0b:1e:c2:2b:a1:32:1b:5f:
                    0d:23:07:e4:66:70:58:19:28:d5:a4:07:08:ee:b4:
                    db:6d:a8:14:ef:90:91:94:dc:bc:6b:8b:4b:21:68:
                    32:fe:5b:da:84:72:c4:e8:9c:50:2f:59:f9:9f:a2:
                    f4:b4:59:33:37:be:40:92:60:d0:64:79:0a:72:0e:
                    6c:29:70:c7:d8:b3:bd:38:40:5b:6a:95:39:66:92:
                    7b:8f:35:a7:b9:70:f4:e2:65:04:83:9e:f4:08:90:
                    a1:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:A4:9E:12:6F:04:1C:E4:54:C0:E6:B8:4D:68:22:17:A4:BA:DA:22
            X509v3 Authority Key Identifier:
                keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a313330303a3a2f34342d3438203d3e20313937343737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df80:1300::/44

    Signature Algorithm: sha256WithRSAEncryption
         1d:e1:25:16:c2:b9:00:78:83:13:97:24:c2:2e:d9:0d:22:3b:
         1c:ef:f6:a7:67:97:88:7d:c8:e4:8c:c3:fa:f6:cd:7b:16:6a:
         09:1e:48:75:2b:8b:e8:0a:22:8a:45:28:71:f2:c9:ea:b4:6f:
         c3:a7:46:e4:74:e8:d6:3e:e3:87:e0:db:a4:a6:c0:12:ca:08:
         a7:be:2d:3b:9f:d8:a6:73:71:83:f3:6d:f7:1f:63:99:61:69:
         f5:21:bf:29:ed:10:86:f7:36:5d:16:a3:54:b0:b4:dc:19:33:
         ab:f5:b2:3c:fb:c3:f9:a7:b4:b8:21:40:bc:7e:ce:56:2c:9f:
         23:df:66:6c:38:67:db:5d:73:b3:a3:29:7c:a5:b9:2c:cc:2a:
         5d:2e:a1:2d:ce:c8:d7:9a:96:6d:19:c4:fa:e3:9a:9d:55:36:
         6d:4b:b7:fb:30:18:95:61:16:7c:35:4c:3b:dc:0c:1d:35:30:
         17:c5:e4:6e:05:59:31:8f:28:25:37:78:9e:d9:92:03:b1:6b:
         b0:3a:f5:ff:72:fe:e5:e1:fb:6d:af:32:ee:5a:e8:63:c4:e7:
         40:c7:eb:c8:48:a4:a4:95:9b:e5:7f:55:46:13:5c:3e:a3:bf:
         0e:b1:8f:11:c1:e9:0e:75:9c:66:56:80:2e:8d:99:ed:77:4c:
         55:3d:a9:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----