Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a363830333a3a2f34382d3438203d3e20323136323833.roa
File:                     326131333a646638303a363830333a3a2f34382d3438203d3e20323136323833.roa (raw, json)
Hash identifier:          lFP+t9CQgkPxusXT9lj232bDYZ877iKrk6z9WpOYYvw=
Subject key identifier:   87:45:B2:12:3F:EA:36:B9:6C:41:FF:D6:0D:C3:01:C8:92:A6:00:D2
Certificate issuer:       /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial:       61A7921B68E0032F7C77054E9EDCAE17722434CD
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a363830333a3a2f34382d3438203d3e20323136323833.roa
Signing time:             Thu 21 Sep 2023 16:39:50 +0000
ROA not before:           Thu 21 Sep 2023 16:34:50 +0000
ROA not after:            Thu 19 Sep 2024 16:39:50 +0000
asID:                     216283
IP address blocks:        2a13:df80:6803::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:a7:92:1b:68:e0:03:2f:7c:77:05:4e:9e:dc:ae:17:72:24:34:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
        Validity
            Not Before: Sep 21 16:34:50 2023 GMT
            Not After : Sep 19 16:39:50 2024 GMT
        Subject: CN=8745B2123FEA36B96C41FFD60DC301C892A600D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:69:97:13:a8:ea:05:a3:38:22:43:93:a7:bc:
                    fc:4f:a6:83:01:8e:6b:72:71:19:80:fd:c7:aa:7d:
                    81:b7:8d:63:af:c0:89:9e:81:f3:5d:9c:79:11:09:
                    a8:46:3f:f3:73:bf:f1:48:5c:6f:40:6d:cd:1b:89:
                    84:f6:ca:48:58:27:8c:98:7d:b6:0f:b0:79:f0:dc:
                    9d:34:49:92:f0:a0:e0:f5:21:40:af:eb:fa:a5:3a:
                    19:72:74:01:9b:b4:55:a3:30:d4:58:a1:77:76:42:
                    ce:0d:e0:86:2b:b4:16:98:41:56:99:de:57:6c:d2:
                    fd:98:ae:97:4b:a1:8e:61:91:d2:71:94:f9:be:13:
                    e6:69:28:25:dc:fb:72:8e:a2:85:4a:45:a5:30:54:
                    61:82:1e:03:11:c5:09:ad:5e:f7:a8:69:7a:9a:30:
                    48:15:2a:0c:2a:51:54:b3:7d:f2:83:bc:a9:bd:af:
                    18:cf:cf:a3:c1:b4:1f:8f:0f:4e:27:2f:64:a4:87:
                    73:e6:53:de:0f:cf:be:b9:2e:69:a7:7b:39:3f:3d:
                    fa:00:1c:68:43:3e:05:19:9e:24:1f:97:c0:4a:78:
                    b6:f7:05:68:d0:8e:48:2e:0e:44:c7:ba:09:3a:14:
                    bb:19:50:6e:da:58:be:94:7d:8f:81:e8:5d:3b:d9:
                    c2:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:45:B2:12:3F:EA:36:B9:6C:41:FF:D6:0D:C3:01:C8:92:A6:00:D2
            X509v3 Authority Key Identifier:
                keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a363830333a3a2f34382d3438203d3e20323136323833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df80:6803::/48

    Signature Algorithm: sha256WithRSAEncryption
         74:44:fc:5f:ff:4f:c7:77:a7:00:05:cf:45:16:e8:0c:89:c8:
         7f:7b:37:21:ac:b0:72:83:6e:02:5a:56:16:4e:ab:77:11:af:
         a1:ae:75:16:f0:6f:5a:b8:eb:97:d3:0c:68:50:53:e5:4d:df:
         9c:03:72:23:10:94:ad:0e:51:b9:18:7e:ba:b1:a9:48:94:27:
         07:95:19:11:83:cc:44:bd:dc:0c:02:d7:d8:be:8c:ef:a8:81:
         e2:a4:07:4f:7b:2d:82:74:b4:1a:64:e4:45:84:75:67:26:4a:
         bc:2e:b0:e1:cb:38:00:1e:63:a6:df:4b:91:d6:4b:63:b6:3f:
         15:cc:07:5a:e2:b4:ae:c8:2f:7f:3d:1e:f0:2a:e7:7f:fe:39:
         5f:c8:3e:ea:a2:47:c6:e6:6f:03:bd:7e:d2:95:c7:5f:a8:5c:
         bf:61:ce:9d:dd:44:f3:58:2d:aa:37:a8:ba:75:50:b2:53:ee:
         cc:48:2e:57:70:de:3a:93:00:23:09:6f:c5:18:27:29:18:49:
         3d:4f:a5:33:b6:fa:d0:e0:77:9a:07:6d:9c:01:34:42:f2:9e:
         5b:d2:f6:62:db:f9:af:b0:4d:4c:72:53:ef:6f:6e:bd:22:6a:
         4b:08:de:80:98:62:03:d5:9a:9e:9b:f4:f2:5d:1d:c1:0d:59:
         78:ad:fc:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----