Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a3366303a3a2f34342d3438203d3e20323131383531.roa
File:                     326131333a646638303a3366303a3a2f34342d3438203d3e20323131383531.roa (raw, json)
Hash identifier:          l4QfD5yIX8/4R6dXOsNdRrTIJHmbzoYM9W7ZXIEIZNM=
Subject key identifier:   83:69:F4:1B:6A:FD:DE:09:35:A7:90:56:D8:6F:E3:6A:7B:79:CE:EF
Certificate issuer:       /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial:       2791F7B172142D294AF70752E912B197ABFB33F0
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a3366303a3a2f34342d3438203d3e20323131383531.roa
Signing time:             Sun 06 Aug 2023 09:27:17 +0000
ROA not before:           Sun 06 Aug 2023 09:22:17 +0000
ROA not after:            Sun 04 Aug 2024 09:27:17 +0000
asID:                     211851
IP address blocks:        2a13:df80:3f0::/44 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:91:f7:b1:72:14:2d:29:4a:f7:07:52:e9:12:b1:97:ab:fb:33:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
        Validity
            Not Before: Aug  6 09:22:17 2023 GMT
            Not After : Aug  4 09:27:17 2024 GMT
        Subject: CN=8369F41B6AFDDE0935A79056D86FE36A7B79CEEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:aa:85:56:7e:25:4b:0c:f7:18:4d:2f:38:31:
                    85:3c:65:3f:cd:44:7a:c6:a6:08:09:0f:97:7c:d8:
                    a0:d6:a4:3e:cd:db:0a:69:e9:23:78:99:1f:da:3d:
                    bd:25:f5:c5:6f:67:81:de:c7:7f:e2:02:ea:62:35:
                    dc:5b:0d:df:27:9c:c8:fd:1e:34:25:a2:e5:d4:2c:
                    d6:c0:37:a4:da:b0:97:88:8b:06:48:8d:2a:53:c3:
                    66:ae:af:60:1f:c4:f8:8c:10:e3:34:d0:05:b4:e9:
                    1c:c0:d5:b1:a2:b4:43:cf:94:02:ef:98:b5:b2:22:
                    e0:94:b5:9b:56:c9:b1:39:fe:cb:87:7a:4f:06:3f:
                    25:fb:14:73:c5:91:c7:ca:ec:3b:35:6b:1e:75:6f:
                    e6:17:43:94:e9:37:cf:cc:d7:a7:ca:16:02:a2:17:
                    d1:c6:25:8f:76:10:1e:13:e2:e7:e7:02:0b:6d:17:
                    98:78:5b:d9:90:9d:42:88:ff:dc:95:3d:1e:ce:5b:
                    eb:0a:02:bc:e4:75:89:03:4f:7a:f8:7b:dd:ee:5e:
                    de:1a:02:40:cf:77:11:a8:9a:96:65:e6:a7:fa:d1:
                    ff:5e:12:ea:3e:48:0d:c4:00:db:eb:87:92:21:4a:
                    d7:0c:a2:8d:11:d9:2f:58:68:62:1d:3c:bb:eb:25:
                    56:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:69:F4:1B:6A:FD:DE:09:35:A7:90:56:D8:6F:E3:6A:7B:79:CE:EF
            X509v3 Authority Key Identifier:
                keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a3366303a3a2f34342d3438203d3e20323131383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df80:3f0::/44

    Signature Algorithm: sha256WithRSAEncryption
         4b:db:d1:ea:53:dc:94:83:44:19:34:36:da:67:2d:30:6d:81:
         ec:7c:de:bb:b4:60:4c:d0:ac:dc:4c:2b:16:72:e9:90:84:7b:
         b7:7a:e9:07:61:df:74:e7:c2:58:34:d8:ab:d2:ab:a3:ef:20:
         f3:f4:24:76:28:ee:5d:08:52:47:a5:4d:19:8a:69:30:16:16:
         07:bc:69:74:ae:01:80:37:ec:80:14:e1:49:79:f7:99:3f:cf:
         a6:9a:92:22:83:e0:85:ba:02:3d:6f:4f:61:1d:32:3b:fd:8d:
         30:ef:bd:a8:cc:5b:38:2b:92:23:a0:cd:36:a4:9a:3b:5d:70:
         0e:c4:76:5d:eb:e2:30:89:a0:3c:5a:4b:6e:31:6a:74:03:dd:
         28:e2:74:dd:fa:24:93:5e:a4:85:e5:63:c1:b3:1c:ed:1f:e6:
         cd:18:f2:c2:3e:60:65:4c:4a:1e:d8:4e:20:bb:e7:56:b6:db:
         98:48:3f:6e:d0:7a:ab:c2:ef:23:32:4b:75:7b:c0:b2:3f:c3:
         17:39:45:43:32:c2:f3:ad:8a:5a:78:17:f6:22:8a:ea:54:95:
         ac:dd:85:d4:e1:55:c5:d4:93:b9:4a:9e:8f:67:f3:91:d1:a8:
         db:cb:ae:dd:7e:2b:06:52:d1:8d:f1:e0:de:b5:0e:aa:01:0e:
         38:c3:77:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----