Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a333831313a3a2f34382d3438203d3e203437353039.roa
File:                     326131333a646638303a333831313a3a2f34382d3438203d3e203437353039.roa (raw, json)
Hash identifier:          xpAZlIMc2WjIE/xtfrhfpl++wzZy160G8pBL6rT9R1E=
Subject key identifier:   19:91:70:CD:A8:7A:B0:A8:5C:BC:0C:D4:9E:0D:3C:72:4D:A0:68:CA
Certificate issuer:       /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial:       01F4E00740802E2B9434655AC2F567F86501642D
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a333831313a3a2f34382d3438203d3e203437353039.roa
Signing time:             Sat 09 Sep 2023 10:32:17 +0000
ROA not before:           Sat 09 Sep 2023 10:27:17 +0000
ROA not after:            Sat 07 Sep 2024 10:32:17 +0000
asID:                     47509
IP address blocks:        2a13:df80:3811::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:f4:e0:07:40:80:2e:2b:94:34:65:5a:c2:f5:67:f8:65:01:64:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
        Validity
            Not Before: Sep  9 10:27:17 2023 GMT
            Not After : Sep  7 10:32:17 2024 GMT
        Subject: CN=199170CDA87AB0A85CBC0CD49E0D3C724DA068CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:e9:0d:e0:8b:9c:1b:f9:9c:ab:4a:44:fb:5b:
                    18:4b:c9:1d:83:f6:56:28:d6:d7:60:8b:4e:80:21:
                    21:09:21:e1:a4:23:bc:13:5f:11:74:7b:4f:3b:8c:
                    a1:c8:23:9c:29:07:4f:6e:7d:d5:e9:67:bc:33:b5:
                    32:e8:52:58:8d:19:f7:44:62:d5:d0:51:22:61:0a:
                    e4:28:16:4d:46:f0:eb:cd:c0:7d:60:4c:e0:cf:b4:
                    04:c0:8d:e9:34:00:47:0d:1c:a0:ce:57:bf:fc:1e:
                    7c:be:47:00:76:27:34:08:bd:04:3c:f8:8f:27:70:
                    a8:56:03:80:9b:da:d7:6a:43:43:de:3e:ba:38:44:
                    3f:8e:47:0f:7a:bc:67:81:29:eb:e0:15:be:34:3c:
                    86:7b:95:35:7f:c9:66:2b:bf:fe:be:73:c8:91:25:
                    36:5e:76:1e:5b:7e:17:06:60:2e:e0:62:9e:ca:0b:
                    30:0f:39:08:0d:5b:11:34:ec:7a:4a:a9:90:1a:76:
                    b7:51:8d:00:d4:5e:72:ab:b9:20:b9:c9:94:51:e1:
                    54:34:09:84:61:7d:f2:2a:dc:43:c6:ca:7d:ca:15:
                    59:f8:24:ff:26:60:52:11:3f:83:da:1e:95:37:c4:
                    d1:91:d9:d4:ca:74:3b:7f:0d:bc:4b:1b:e6:30:21:
                    af:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:91:70:CD:A8:7A:B0:A8:5C:BC:0C:D4:9E:0D:3C:72:4D:A0:68:CA
            X509v3 Authority Key Identifier:
                keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a333831313a3a2f34382d3438203d3e203437353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df80:3811::/48

    Signature Algorithm: sha256WithRSAEncryption
         4d:e1:96:5f:c2:f0:4c:0f:d0:52:f2:aa:83:fd:c0:96:68:40:
         58:d6:98:ad:aa:e5:dc:9e:e6:7e:4b:19:90:d6:cb:16:0e:f9:
         4b:82:ab:30:54:69:67:16:6f:ff:73:a3:8f:f7:f1:32:86:b7:
         88:c8:b6:05:ef:c3:76:f4:08:bd:47:ad:5f:36:7a:6d:85:10:
         a8:56:bb:e0:b3:0a:a8:de:38:c4:b4:3f:44:12:8e:84:9f:98:
         fe:52:af:27:ba:b0:e8:a5:a4:2a:ec:25:09:56:7f:66:8d:0f:
         d1:06:e7:3d:e6:47:f1:e8:a5:21:c7:83:6d:45:6a:58:f9:bb:
         03:dd:d1:c9:6e:e4:1f:6f:3b:4b:d1:07:f1:de:1c:05:39:17:
         bd:86:e7:d9:7f:b9:42:d6:8e:8c:cd:37:f3:3c:98:30:88:7e:
         df:00:44:09:a8:89:f5:5b:94:8d:56:c9:a9:32:c4:08:ce:18:
         50:07:c1:16:77:ed:c8:47:4f:18:a9:bb:36:73:3a:f9:2b:7a:
         f1:a3:68:67:a9:9e:a8:e4:a8:05:ab:4a:a1:f1:30:cd:4f:85:
         c0:58:6c:c6:df:77:fe:a6:42:3f:a1:fa:53:7a:28:44:c0:20:
         02:f4:57:b5:3c:59:2e:f3:a2:fa:35:89:70:4f:da:0e:be:93:
         c8:00:0e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----