Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a333830373a3a2f34382d3438203d3e20323136333836.roa
File:                     326131333a646638303a333830373a3a2f34382d3438203d3e20323136333836.roa (raw, json)
Hash identifier:          TNOwIu71LDAeBclywsjuKcY4gy+wujEocEjAwS1Or9M=
Subject key identifier:   0D:9F:70:D3:B4:90:A4:BC:2A:5E:83:4D:AA:87:0E:42:71:F0:26:95
Certificate issuer:       /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial:       7170C2FC09BEF0C1323D536D5CF6D8D10910B63D
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a333830373a3a2f34382d3438203d3e20323136333836.roa
Signing time:             Sun 01 Oct 2023 17:42:06 +0000
ROA not before:           Sun 01 Oct 2023 17:37:06 +0000
ROA not after:            Sun 29 Sep 2024 17:42:06 +0000
asID:                     216386
IP address blocks:        2a13:df80:3807::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:70:c2:fc:09:be:f0:c1:32:3d:53:6d:5c:f6:d8:d1:09:10:b6:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
        Validity
            Not Before: Oct  1 17:37:06 2023 GMT
            Not After : Sep 29 17:42:06 2024 GMT
        Subject: CN=0D9F70D3B490A4BC2A5E834DAA870E4271F02695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9f:cd:57:f2:25:84:40:cc:4e:d6:aa:5d:24:
                    18:a7:69:2c:a5:3d:68:f0:e1:91:c0:31:ed:24:08:
                    eb:30:18:a8:8e:1b:6b:62:22:81:62:4c:8a:cc:19:
                    11:f9:b7:64:6e:0b:e8:8f:d3:90:03:76:2f:60:2c:
                    1c:9e:d7:a1:95:9e:75:e0:b9:14:2b:67:57:fc:74:
                    0f:75:05:14:46:c2:51:eb:e6:01:1a:d6:61:ce:ba:
                    91:55:ee:22:24:17:67:33:aa:5b:43:38:9e:c6:4e:
                    3f:a6:0b:d4:8a:8b:7c:7f:f6:a4:ef:ed:4c:a8:fd:
                    4d:9d:4b:83:81:a8:de:65:97:30:9a:a7:04:ad:51:
                    48:eb:ef:d3:43:c7:b7:f1:a7:68:2e:b4:c0:2a:3b:
                    76:09:4a:1d:36:70:23:27:13:d8:8d:28:d1:16:57:
                    34:96:1e:95:e3:58:17:af:40:df:5f:ee:07:b2:73:
                    4a:0e:52:2e:1f:90:37:2a:f8:0d:80:f7:96:b4:20:
                    1a:4c:7c:fb:ab:5b:cb:cd:42:f9:85:49:fd:a0:5e:
                    45:a3:fc:46:52:b9:20:ca:d9:93:b8:6c:34:70:58:
                    5b:9c:19:61:8f:df:29:90:18:af:4c:1f:45:b2:fa:
                    c3:2d:19:88:25:20:58:14:4c:32:41:56:87:0c:a3:
                    ab:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:9F:70:D3:B4:90:A4:BC:2A:5E:83:4D:AA:87:0E:42:71:F0:26:95
            X509v3 Authority Key Identifier:
                keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a333830373a3a2f34382d3438203d3e20323136333836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df80:3807::/48

    Signature Algorithm: sha256WithRSAEncryption
         a9:a7:36:dd:d9:7f:6b:09:18:d8:71:f5:ac:23:7b:69:d8:13:
         e5:8f:55:b0:a1:2a:6a:32:21:6a:e3:df:f3:08:ff:27:50:f4:
         dd:63:48:0e:63:31:92:50:82:d4:ed:82:a4:ca:e0:f4:34:c4:
         93:f6:ad:3f:8f:50:be:45:dd:a6:27:d6:ef:7e:81:d6:a5:52:
         28:17:fc:fd:0d:d5:58:d1:22:24:87:2b:5b:41:20:9a:fb:26:
         11:49:f9:02:25:99:a7:26:02:fa:78:32:d8:13:5e:23:93:b6:
         fb:ca:c4:2b:31:7f:16:9b:82:fb:cf:41:85:01:ce:f0:2a:8f:
         0a:2e:a5:f7:70:85:d5:69:78:01:0f:84:d4:1b:7a:1c:a6:8a:
         a1:c5:79:d2:a7:41:e8:6a:ab:63:2c:89:f6:54:77:21:7e:d0:
         6b:34:51:26:d3:0a:be:fa:1f:f5:b1:cd:4b:ae:5c:8b:04:35:
         8e:ac:f2:04:73:b0:7d:bb:ed:4b:c8:f2:e7:a8:c7:04:13:ed:
         68:87:5d:74:9c:00:c0:6d:70:42:cc:e1:f1:be:75:75:88:b5:
         e9:59:4f:04:b1:83:78:33:29:19:d3:51:05:ee:11:b6:a6:09:
         09:e8:b5:44:b7:49:1d:d0:fa:17:5d:44:37:b2:3f:63:9b:fb:
         ca:fd:a5:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----