Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a323530303a3a2f34382d3438203d3e20313939303235.roa
File:                     326131333a646638303a323530303a3a2f34382d3438203d3e20313939303235.roa (raw, json)
Hash identifier:          Ft4FW/liEp3x1yu2FaQNrFuc9x9naljry0oPm0tjslc=
Subject key identifier:   1B:E9:0E:42:DB:20:B5:38:40:38:0C:CC:D8:AD:42:7D:2D:0B:80:B3
Certificate issuer:       /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial:       7612FF771D7513EDB8E26CFD0C83D8AA647D5A3D
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a323530303a3a2f34382d3438203d3e20313939303235.roa
Signing time:             Sat 07 Oct 2023 22:02:16 +0000
ROA not before:           Sat 07 Oct 2023 21:57:16 +0000
ROA not after:            Sat 05 Oct 2024 22:02:16 +0000
asID:                     199025
IP address blocks:        2a13:df80:2500::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:12:ff:77:1d:75:13:ed:b8:e2:6c:fd:0c:83:d8:aa:64:7d:5a:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
        Validity
            Not Before: Oct  7 21:57:16 2023 GMT
            Not After : Oct  5 22:02:16 2024 GMT
        Subject: CN=1BE90E42DB20B53840380CCCD8AD427D2D0B80B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:92:97:2d:4f:85:33:4e:94:76:65:23:67:ae:
                    f8:7d:84:ff:75:1a:22:c2:c0:0a:44:55:fb:7a:6f:
                    1e:02:f1:f2:5e:ad:95:40:86:3d:0b:9e:f0:d5:ce:
                    c5:22:11:e6:10:a2:bb:21:7b:98:e1:20:c4:4c:6a:
                    3d:56:b1:c8:40:3a:59:77:46:0b:94:97:b0:85:7d:
                    79:da:36:16:96:27:c7:e3:b9:8b:12:a0:f3:65:c0:
                    79:2d:4f:c8:22:2b:ff:83:57:be:4d:30:7c:49:6b:
                    99:fa:ee:80:99:e6:45:28:9a:7a:61:2b:32:a3:54:
                    6c:e9:53:07:1c:04:a7:fc:26:6d:cb:ea:99:19:e4:
                    73:72:aa:0f:46:8d:71:61:25:22:64:0f:2d:dd:81:
                    12:25:39:5e:2b:e8:f2:e6:67:86:8c:13:db:04:a1:
                    1a:88:1c:5f:d7:eb:f7:44:43:b7:0a:67:61:b8:f8:
                    48:4f:ff:3e:b2:d5:bf:5d:8f:7d:df:3f:dd:e6:2d:
                    b6:be:be:43:66:bc:00:c0:29:05:86:e3:c6:d4:8a:
                    2c:73:fd:d6:90:c6:c2:10:16:2d:23:30:7b:9c:eb:
                    ab:ce:22:92:60:6b:55:e5:50:45:6c:2c:9b:34:5f:
                    65:6a:68:6a:3d:3b:98:aa:39:db:35:c8:8d:ea:70:
                    b7:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:E9:0E:42:DB:20:B5:38:40:38:0C:CC:D8:AD:42:7D:2D:0B:80:B3
            X509v3 Authority Key Identifier:
                keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a323530303a3a2f34382d3438203d3e20313939303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df80:2500::/48

    Signature Algorithm: sha256WithRSAEncryption
         9b:52:5e:49:f6:60:6f:bc:de:17:c7:c2:9f:9d:b5:08:40:23:
         91:b6:0b:64:a6:00:37:2a:d1:cc:bb:f4:aa:89:ca:fe:e9:88:
         5b:c1:b1:b5:9b:67:83:0a:98:52:7a:2c:01:7f:4b:5e:b0:3b:
         33:f8:d5:4b:14:5e:21:cc:10:8f:06:3b:c8:7d:49:f2:e2:59:
         19:8c:fa:cc:71:2d:06:09:3c:20:4b:c4:9b:6e:6e:ec:be:d5:
         b0:02:ff:21:7b:7f:ab:6d:91:83:ab:a4:64:fc:4e:b5:21:20:
         da:89:80:eb:1e:d5:f3:97:e3:63:99:59:30:d8:ee:c0:e2:14:
         dd:07:4e:fd:5c:2c:b3:01:f9:87:c2:fe:8a:11:4c:41:91:55:
         03:4d:bc:50:12:03:58:57:d7:08:06:ac:ba:a6:59:bd:74:e9:
         e2:03:fc:42:80:35:75:4e:50:9e:9a:8c:5b:f8:fc:70:a5:01:
         bb:bf:84:ee:5d:1a:f3:50:f5:68:1d:f1:6d:72:07:92:20:8d:
         a5:32:db:56:cc:48:f7:39:2a:f6:6a:5f:5d:78:cf:4b:fd:c9:
         71:66:d8:08:59:ca:92:78:27:d4:54:46:0c:96:7d:59:06:2e:
         26:5a:85:e3:56:06:bd:cf:63:22:1b:40:c1:af:a2:68:68:09:
         34:da:b0:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----