Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a363830313a3a2f34382d3438203d3e20323136333836.roa
File:                     326131333a646638303a363830313a3a2f34382d3438203d3e20323136333836.roa (raw, json)
Hash identifier:          fVBOo2p15a6QDbOyQrnPnCAGGalKB5vHGwGEF9MSBCE=
Subject key identifier:   3A:6B:74:12:C3:26:FE:53:5D:18:A8:42:BB:3A:3A:7A:5A:36:FF:A7
Certificate issuer:       /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial:       1135ECF0BB57617EC3A515251DB7B05C855E4FC5
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a363830313a3a2f34382d3438203d3e20323136333836.roa
Signing time:             Sun 01 Oct 2023 17:42:17 +0000
ROA not before:           Sun 01 Oct 2023 17:37:17 +0000
ROA not after:            Sun 29 Sep 2024 17:42:17 +0000
asID:                     216386
IP address blocks:        2a13:df80:6801::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:35:ec:f0:bb:57:61:7e:c3:a5:15:25:1d:b7:b0:5c:85:5e:4f:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
        Validity
            Not Before: Oct  1 17:37:17 2023 GMT
            Not After : Sep 29 17:42:17 2024 GMT
        Subject: CN=3A6B7412C326FE535D18A842BB3A3A7A5A36FFA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:dc:69:36:a7:47:d8:79:4a:2c:a3:59:a3:9e:
                    49:9d:90:c7:11:c6:0f:2f:70:7a:ce:2d:8a:99:38:
                    f2:7f:17:72:0a:f1:82:72:4f:5a:32:87:a9:3e:71:
                    65:8c:b1:10:6a:79:c8:19:ed:59:d0:85:b4:47:20:
                    b7:c2:3f:d6:03:26:1a:08:83:91:58:0e:0a:38:bb:
                    42:4d:2b:ac:4e:48:6a:37:0e:fd:a1:43:a0:d1:61:
                    65:b9:4a:3c:19:d5:08:dd:0d:51:02:40:dd:d7:87:
                    a0:e2:8b:2f:6a:5f:f6:cf:17:1f:f2:15:d2:fc:9f:
                    c8:31:4c:e3:c6:0e:c4:ff:66:9c:63:a2:49:fe:ed:
                    18:c5:70:7d:de:7e:fa:c6:cf:3a:cb:61:0a:69:ef:
                    ed:a6:89:bb:6c:3f:53:60:d1:ca:e2:d2:5e:18:ca:
                    c1:35:70:e2:14:3f:f6:d2:42:b5:76:83:30:02:d2:
                    00:49:d4:9c:14:31:61:f3:c6:83:52:4c:e4:11:42:
                    55:e5:ec:87:2d:0f:07:c5:e8:92:89:cc:03:2c:3b:
                    23:d7:0a:f8:a6:d1:ed:b0:68:3b:14:e7:8f:7d:a2:
                    95:b5:57:5f:16:86:0e:e2:19:d6:a5:b8:c6:2c:c9:
                    44:58:8a:e4:71:6d:1c:2d:5d:ca:ea:81:f9:a4:a1:
                    0f:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:6B:74:12:C3:26:FE:53:5D:18:A8:42:BB:3A:3A:7A:5A:36:FF:A7
            X509v3 Authority Key Identifier:
                keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a363830313a3a2f34382d3438203d3e20323136333836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df80:6801::/48

    Signature Algorithm: sha256WithRSAEncryption
         4b:11:09:ea:41:7f:cf:a3:b5:5b:2e:1c:45:91:ce:ad:84:59:
         72:bb:e2:5c:4d:d5:80:b2:e1:0e:1f:ee:9b:49:df:f6:6f:06:
         9f:a2:8f:68:23:c9:f8:cb:d8:a2:0d:d9:e6:da:5d:39:a2:a4:
         33:04:86:0e:4a:34:33:7d:77:4c:b2:c8:c7:e7:1f:ef:fa:01:
         3c:93:ed:b3:96:fc:46:ed:bf:26:c7:15:b6:3a:3e:70:8a:cb:
         90:b5:7b:d6:a5:f5:67:83:27:fb:48:cf:eb:94:e3:44:0d:36:
         07:5e:36:db:01:6e:b9:07:05:24:99:f5:4a:58:c5:16:7d:90:
         be:f6:91:17:fa:ea:21:16:83:db:51:d6:ab:3c:4f:b7:45:cf:
         14:0f:3d:3c:44:91:aa:e8:e1:45:cd:11:0e:57:a4:d0:e9:f1:
         b8:b6:f9:34:20:41:ac:2d:10:9f:c8:01:ce:5a:a0:8d:be:8e:
         90:95:c7:cc:87:6b:f8:de:b6:bb:22:29:64:fc:a9:f8:af:78:
         97:d8:40:95:82:4b:d3:8b:30:78:14:ed:d7:be:9e:97:39:78:
         6b:0d:03:58:76:43:c0:5f:ba:61:2e:ea:02:f4:37:d1:07:66:
         b0:0d:ea:8c:f9:6e:b9:d6:a9:30:7c:f6:97:9d:cb:41:24:da:
         45:17:de:09
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIUETXs8LtXYX7DpRUlHbewXIVeT8UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDVjM2Q1ZTcwZmM5YWQxMGJhOTBkNDVkYzY2NDU0ZTll
M2ExNDZhODAeFw0yMzEwMDExNzM3MTdaFw0yNDA5MjkxNzQyMTdaMDMxMTAvBgNV
BAMTKDNBNkI3NDEyQzMyNkZFNTM1RDE4QTg0MkJCM0EzQTdBNUEzNkZGQTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH3Gk2p0fYeUoso1mjnkmdkMcR
xg8vcHrOLYqZOPJ/F3IK8YJyT1oyh6k+cWWMsRBqecgZ7VnQhbRHILfCP9YDJhoI
g5FYDgo4u0JNK6xOSGo3Dv2hQ6DRYWW5SjwZ1QjdDVECQN3Xh6Diiy9qX/bPFx/y
FdL8n8gxTOPGDsT/Zpxjokn+7RjFcH3efvrGzzrLYQpp7+2mibtsP1Ng0cri0l4Y
ysE1cOIUP/bSQrV2gzAC0gBJ1JwUMWHzxoNSTOQRQlXl7IctDwfF6JKJzAMsOyPX
Cvim0e2waDsU5499opW1V18Whg7iGdaluMYsyURYiuRxbRwtXcrqgfmkoQ9PAgMB
AAGjggJKMIICRjAdBgNVHQ4EFgQUOmt0EsMm/lNdGKhCuzo6elo2/6cwHwYDVR0j
BBgwFoAU1cPV5w/JrRC6kNRdxmRU6eOhRqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDQwMzJjOGYtMWQ1Ny00YzNiLTkwNDMtYTBlN2ZlYmYx
NjdkLzAvRDVDM0Q1RTcwRkM5QUQxMEJBOTBENDVEQzY2NDU0RTlFM0ExNDZBOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFjUFY1d19KclJDNmtOUmR4bVJVNmVP
aFJxZy5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDQwMzJjOGYt
MWQ1Ny00YzNiLTkwNDMtYTBlN2ZlYmYxNjdkLzAvMzI2MTMxMzMzYTY0NjYzODMw
M2EzNjM4MzAzMTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEzNjMzMzgzNi5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw
DwQCAAIwCQMHACoT34BoATANBgkqhkiG9w0BAQsFAAOCAQEASxEJ6kF/z6O1Wy4c
RZHOrYRZcrviXE3VgLLhDh/um0nf9m8Gn6KPaCPJ+MvYog3Z5tpdOaKkMwSGDko0
M313TLLIx+cf7/oBPJPts5b8Ru2/JscVtjo+cIrLkLV71qX1Z4Mn+0jP65TjRA02
B1422wFuuQcFJJn1SljFFn2QvvaRF/rqIRaD21HWqzxPt0XPFA89PESRqujhRc0R
Dlek0OnxuLb5NCBBrC0Qn8gBzlqgjb6OkJXHzIdr+N62uyIpZPyp+K94l9hAlYJL
04sweBTt176elzl4aw0DWHZDwF+6YS7qAvQ30QdmsA3qjPluudapMHz2l53LQSTa
RRfeCQ==
-----END CERTIFICATE-----