Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a36303a3a2f34342d3438203d3e20313938393830.roa
File:                     326131333a646638303a36303a3a2f34342d3438203d3e20313938393830.roa (raw, json)
Hash identifier:          Wn2gjcxvgoz9HQl5JSJHF+B2mKjomIcMKNItB2Ypfl0=
Subject key identifier:   E3:BA:B8:2F:C3:D4:4A:16:16:58:79:7A:82:6C:AB:06:67:E9:63:1E
Certificate issuer:       /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial:       14D57F6077B69057D2DEF575BB23F2E24E6B94D3
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a36303a3a2f34342d3438203d3e20313938393830.roa
Signing time:             Sun 06 Aug 2023 09:27:42 +0000
ROA not before:           Sun 06 Aug 2023 09:22:42 +0000
ROA not after:            Sun 04 Aug 2024 09:27:42 +0000
asID:                     198980
IP address blocks:        2a13:df80:60::/44 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:d5:7f:60:77:b6:90:57:d2:de:f5:75:bb:23:f2:e2:4e:6b:94:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
        Validity
            Not Before: Aug  6 09:22:42 2023 GMT
            Not After : Aug  4 09:27:42 2024 GMT
        Subject: CN=E3BAB82FC3D44A161658797A826CAB0667E9631E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:20:bc:65:ec:49:fc:d9:10:69:22:2f:6a:ca:
                    64:6d:b4:4d:c4:ed:fd:0f:cb:77:e7:66:3e:91:19:
                    3d:de:10:8d:cb:3e:75:d7:1e:a6:b4:e3:16:da:6d:
                    14:87:33:8b:52:f8:86:97:4f:0d:97:1b:27:26:46:
                    04:d1:c0:48:72:dd:70:5a:c4:a5:85:b0:aa:81:4e:
                    27:60:50:af:af:e0:2d:6d:e6:94:17:b9:79:5b:26:
                    09:fa:67:42:14:94:6e:57:92:25:fe:8c:9c:ff:12:
                    99:16:98:01:60:69:b5:a7:93:81:32:7d:2b:85:ce:
                    97:50:6e:3d:94:ae:88:c0:0d:66:5c:81:aa:f3:45:
                    34:40:22:c8:4e:6a:b1:98:19:04:a3:38:56:4f:3d:
                    30:ea:69:6c:af:ca:00:11:90:2f:37:c8:fa:63:aa:
                    c3:bc:ab:1a:96:fa:4e:c4:64:2c:7f:32:75:35:a7:
                    f4:ea:ce:a0:d0:5f:c6:ba:c5:04:e6:73:27:2a:eb:
                    71:83:4f:44:e3:3b:f3:7b:cb:0b:76:a8:14:26:65:
                    e0:60:cb:1b:c5:e8:aa:10:72:b4:54:4a:60:b2:6a:
                    a9:4c:ba:c9:ff:9d:a7:3c:32:ea:e3:1d:6c:cc:bf:
                    db:a4:5a:2f:61:f2:f4:39:9e:26:36:8b:c5:62:cb:
                    db:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:BA:B8:2F:C3:D4:4A:16:16:58:79:7A:82:6C:AB:06:67:E9:63:1E
            X509v3 Authority Key Identifier:
                keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a36303a3a2f34342d3438203d3e20313938393830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df80:60::/44

    Signature Algorithm: sha256WithRSAEncryption
         bf:53:32:3e:27:c2:71:cb:15:3b:1c:e5:be:6f:ce:cd:61:b7:
         46:05:8b:4c:b0:2f:b8:45:32:e6:9a:b5:3c:ac:c5:d6:ed:3c:
         d8:be:29:66:a1:cb:f5:3b:5b:dc:a0:fb:51:66:b9:d3:4e:53:
         67:84:49:18:31:2e:88:63:5e:82:a8:07:c2:24:17:9d:71:08:
         c6:82:6d:05:93:e5:f7:7d:6f:88:42:76:c2:02:9b:24:5b:d3:
         75:54:e4:49:e0:52:5e:f6:bf:48:70:a1:6c:c8:64:c9:44:92:
         46:ba:39:bb:4d:17:f6:76:15:7a:08:b2:d9:f7:f8:9a:dc:e6:
         13:c0:6c:14:e5:74:01:f3:dd:90:47:91:33:60:7d:1a:29:95:
         66:89:08:b5:e3:98:06:35:94:e3:b1:8f:d7:ae:c0:b8:16:91:
         7e:ae:65:d1:ab:30:19:23:51:48:4a:06:8b:a2:89:8f:bc:7d:
         8f:8f:42:32:03:29:f3:f2:fe:2d:63:bf:91:29:1a:30:a7:de:
         22:c2:8e:5f:c3:a2:c6:70:a6:61:d9:01:b8:3d:36:c9:31:49:
         13:02:fe:e6:6f:15:e4:7d:d3:67:44:ff:43:d2:16:92:b8:a8:
         ff:4f:97:78:5e:a7:fa:e1:83:6b:ab:af:ea:60:3a:f6:45:f0:
         5c:e1:19:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----