Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a3362353a3a2f34382d3438203d3e20323136343132.roa
File:                     326131333a646638303a3362353a3a2f34382d3438203d3e20323136343132.roa (raw, json)
Hash identifier:          YjyIaePuvAp6JdgE13kYfukkQeiAR+LWZTIPUl+rzCo=
Subject key identifier:   20:E0:1D:68:34:57:77:7B:F2:DA:DA:DB:97:9C:3C:23:5F:EA:ED:B8
Certificate issuer:       /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial:       543CC425556B8851608FCDE33214A32E33918C8B
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a3362353a3a2f34382d3438203d3e20323136343132.roa
Signing time:             Thu 24 Aug 2023 14:37:55 +0000
ROA not before:           Thu 24 Aug 2023 14:32:55 +0000
ROA not after:            Thu 22 Aug 2024 14:37:55 +0000
asID:                     216412
IP address blocks:        2a13:df80:3b5::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:3c:c4:25:55:6b:88:51:60:8f:cd:e3:32:14:a3:2e:33:91:8c:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
        Validity
            Not Before: Aug 24 14:32:55 2023 GMT
            Not After : Aug 22 14:37:55 2024 GMT
        Subject: CN=20E01D683457777BF2DADADB979C3C235FEAEDB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:6e:e7:23:eb:24:7d:9e:5f:3f:1e:b9:8e:e3:
                    40:d1:f6:56:83:76:4b:67:08:ae:13:65:88:d8:9b:
                    9a:3c:91:b3:02:f0:1d:a2:30:16:6e:ac:6b:64:d2:
                    7e:68:21:20:5b:fc:d0:fd:dc:32:eb:80:b3:a4:91:
                    2c:8a:35:21:26:f9:a2:6c:56:46:fd:2b:4e:bc:36:
                    c0:ab:c3:b9:97:a7:80:dd:62:b7:e8:02:77:00:16:
                    e5:55:3b:cc:d2:ca:02:2d:35:bf:09:7e:40:42:52:
                    9f:82:97:8e:68:da:5f:fa:38:9b:8e:ad:8a:ba:8f:
                    30:48:c6:7d:44:a0:be:69:ab:7e:25:cb:0f:12:52:
                    b6:48:83:ef:6e:fe:74:a7:ff:6e:64:0a:8a:5b:e2:
                    8a:9e:a2:73:18:e3:b6:bd:29:a8:85:c9:5c:75:6c:
                    29:4e:10:d7:83:e3:0b:6e:f7:07:93:69:30:47:62:
                    63:51:81:51:c2:26:6b:0a:60:06:f8:bb:c8:0d:8a:
                    c0:04:ca:70:46:75:99:f8:3f:d0:cf:01:16:81:b5:
                    14:e3:03:85:00:93:da:4d:fa:4a:79:2f:d4:06:08:
                    c4:db:0c:bb:4f:6c:79:74:db:b9:d1:8b:30:30:74:
                    c9:fb:d3:e7:a9:fe:aa:72:ad:9f:f4:5c:11:91:c4:
                    a0:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:E0:1D:68:34:57:77:7B:F2:DA:DA:DB:97:9C:3C:23:5F:EA:ED:B8
            X509v3 Authority Key Identifier:
                keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a3362353a3a2f34382d3438203d3e20323136343132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df80:3b5::/48

    Signature Algorithm: sha256WithRSAEncryption
         ae:5c:9b:2f:3e:f4:be:f0:d5:81:98:22:fd:07:25:67:78:bb:
         ce:77:79:e5:35:db:fa:46:2b:61:8e:b2:0b:53:eb:8e:ea:32:
         2e:6f:0b:2c:d4:2b:7c:cb:7f:db:7e:dc:3a:52:50:55:a8:06:
         7a:14:54:76:7c:66:98:47:19:4f:6f:d2:5b:0a:2a:2d:8d:1c:
         9a:46:c8:3c:8e:0e:ae:9d:e3:19:40:46:d3:33:2e:4d:b2:a5:
         e6:f3:6d:9d:d1:9a:67:53:e6:58:8f:b3:05:91:55:fd:47:83:
         f5:ab:aa:4d:52:38:74:28:75:08:e1:c5:ab:6a:bb:50:8a:87:
         43:30:f1:5e:ac:a8:1c:66:af:ce:5e:1f:da:97:ca:7f:26:1b:
         51:55:92:90:83:da:cf:cf:e1:ae:11:94:d4:fc:83:b7:3a:51:
         f5:6a:59:e1:9d:4e:eb:05:1d:c2:52:5d:10:c7:c3:db:e7:37:
         b5:ba:42:b5:1b:94:11:99:e2:80:aa:a5:84:64:ca:fb:62:ba:
         12:3e:5e:8f:b5:89:48:45:af:54:38:1b:bf:83:2e:8a:74:8c:
         7d:32:45:ef:c3:36:ee:3f:5d:78:a6:78:5b:48:ba:2f:7d:38:
         e7:54:88:5e:3d:8c:94:7d:1a:0a:a0:66:dc:78:36:ce:75:30:
         8e:75:6c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----