Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a313333303a3a2f34342d3438203d3e20323037323532.roa
File:                     326131333a646638303a313333303a3a2f34342d3438203d3e20323037323532.roa (raw, json)
Hash identifier:          tSx5kRiOXYcFi81PZOdtfVxQv4GmqJoI7JBRy0tivec=
Subject key identifier:   19:49:EA:57:1A:75:05:E8:1B:1E:BF:46:8E:61:33:C8:DA:27:B9:CF
Certificate issuer:       /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial:       6DC48BDC5F2C7D94F88FACE0E125564345EBB5B2
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a313333303a3a2f34342d3438203d3e20323037323532.roa
Signing time:             Tue 07 Nov 2023 14:56:03 +0000
ROA not before:           Tue 07 Nov 2023 14:51:03 +0000
ROA not after:            Tue 05 Nov 2024 14:56:03 +0000
asID:                     207252
IP address blocks:        2a13:df80:1330::/44 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:c4:8b:dc:5f:2c:7d:94:f8:8f:ac:e0:e1:25:56:43:45:eb:b5:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
        Validity
            Not Before: Nov  7 14:51:03 2023 GMT
            Not After : Nov  5 14:56:03 2024 GMT
        Subject: CN=1949EA571A7505E81B1EBF468E6133C8DA27B9CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:5c:97:41:1a:b9:a4:b0:e0:5b:09:fa:4f:8a:
                    ed:05:34:63:a5:cb:80:70:be:02:5e:b0:32:ba:08:
                    cd:6a:6d:aa:68:a7:9e:e4:11:6f:b1:3d:62:58:35:
                    76:8d:dd:4d:db:4a:22:f1:94:9d:ec:53:d5:b8:ce:
                    cc:3f:0a:ea:cc:10:9c:0f:49:94:4d:be:ec:85:3e:
                    cf:5d:0c:38:86:40:10:b5:fe:e3:4d:31:64:b2:3d:
                    58:10:6d:f2:0a:a2:96:a7:89:39:d2:bd:33:9c:c0:
                    c1:46:e4:49:46:8c:cf:2e:e7:99:1d:d3:28:03:d6:
                    07:82:03:f3:17:6f:70:0c:b7:b5:22:80:0d:7c:16:
                    44:9a:72:cc:b0:51:1a:0b:5a:38:03:cf:7c:2c:f7:
                    ac:14:db:67:a9:77:3c:95:9d:5b:3e:f8:41:a6:55:
                    98:83:c4:a6:e4:13:02:a8:cb:a2:b7:6a:c5:aa:1f:
                    1f:bf:30:73:67:52:5b:cd:29:44:e2:bd:9d:4b:61:
                    2e:2a:08:f4:7e:04:f1:90:29:01:53:e3:bf:d7:3f:
                    be:f8:88:b9:45:d9:b4:9d:01:cc:17:19:c3:0f:88:
                    b3:25:d9:55:fd:33:0c:96:63:dd:be:43:c9:3d:f8:
                    37:ef:15:6e:14:00:8c:cd:c7:a5:64:fd:0f:b4:0d:
                    90:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:49:EA:57:1A:75:05:E8:1B:1E:BF:46:8E:61:33:C8:DA:27:B9:CF
            X509v3 Authority Key Identifier:
                keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a313333303a3a2f34342d3438203d3e20323037323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df80:1330::/44

    Signature Algorithm: sha256WithRSAEncryption
         5a:c6:04:95:c2:3c:52:29:06:5a:da:66:03:c1:05:f3:bd:29:
         a7:97:15:30:48:39:61:6d:ff:7e:3f:ab:8b:c3:f9:6b:52:07:
         da:c1:bf:d2:0e:fb:f6:d1:f2:ea:cb:ee:77:29:11:f5:80:8c:
         84:85:24:8b:68:0d:46:1f:da:c9:d3:52:94:39:2d:f2:20:c7:
         7e:1c:26:e0:fc:af:47:dc:e9:0a:62:39:cb:db:4a:49:0a:80:
         46:41:00:35:8a:94:70:17:82:32:20:2b:2b:b4:9e:6a:32:5a:
         52:2d:da:47:b0:0e:c4:ce:b0:1c:b9:e2:4e:f4:69:3f:3f:b4:
         da:03:e0:43:bc:74:0b:62:eb:58:46:c0:5f:d5:94:a8:83:84:
         e3:66:db:bf:5e:cd:01:19:30:f8:7e:4e:6d:41:3d:99:82:8a:
         fa:d1:6d:b5:38:37:94:f1:07:5c:f6:35:bb:c0:a9:9d:c2:70:
         30:56:d4:2a:b3:dd:24:75:c8:9c:0a:79:8a:f0:4c:a0:69:4e:
         b5:f7:7e:58:2a:43:63:cf:cc:f5:76:43:ac:eb:ad:72:08:b0:
         34:f6:d0:af:11:0d:c2:cd:87:0d:d4:e7:49:0d:6c:04:f9:76:
         f1:5d:e4:2d:27:1b:4c:a7:d9:f6:c7:16:c5:c0:04:0a:8e:22:
         f3:7f:2a:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----