Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a363830383a3a2f34382d3438203d3e20323136333035.roa
File:                     326131333a646638303a363830383a3a2f34382d3438203d3e20323136333035.roa (raw, json)
Hash identifier:          2sWk4iqTGgSiWhZdPvlPKiDCin8TxOxYG1d0OHEe2ag=
Subject key identifier:   0B:6B:DE:91:08:DA:77:4E:03:40:E8:15:73:CE:1C:59:53:38:DA:9C
Certificate issuer:       /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial:       44DF261D93F3B3BCE79D3C402B16448B2C9AC726
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a363830383a3a2f34382d3438203d3e20323136333035.roa
Signing time:             Sat 16 Sep 2023 02:34:51 +0000
ROA not before:           Sat 16 Sep 2023 02:29:51 +0000
ROA not after:            Sat 14 Sep 2024 02:34:51 +0000
asID:                     216305
IP address blocks:        2a13:df80:6808::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:df:26:1d:93:f3:b3:bc:e7:9d:3c:40:2b:16:44:8b:2c:9a:c7:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
        Validity
            Not Before: Sep 16 02:29:51 2023 GMT
            Not After : Sep 14 02:34:51 2024 GMT
        Subject: CN=0B6BDE9108DA774E0340E81573CE1C595338DA9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a4:40:8c:d6:c8:b8:f4:7b:60:90:35:7e:93:
                    07:b4:81:17:16:84:54:df:df:ad:98:74:83:c7:39:
                    32:73:3a:37:87:71:33:01:37:72:22:e8:1f:60:3e:
                    54:51:56:c5:9f:5f:e2:2c:17:89:ed:86:03:7c:02:
                    56:7f:20:5c:74:ae:5c:0b:45:0b:00:f4:7d:9e:51:
                    90:81:47:82:6a:22:50:d3:75:a8:18:68:d1:b6:89:
                    bd:cb:29:3d:c1:8d:ea:0c:bd:cf:d3:ad:ea:fa:d9:
                    95:be:2a:ed:0a:6b:c2:d9:31:02:4a:c7:88:d5:95:
                    55:55:7e:66:4b:ef:0c:10:59:f7:64:1c:5a:c7:99:
                    25:04:d3:d2:57:32:e9:9f:5c:4d:6e:a6:f0:9b:e7:
                    b3:3f:47:3d:95:d7:fe:7a:55:2b:44:d4:29:c2:17:
                    5f:57:ac:35:78:bb:cc:e8:9e:b9:76:26:cc:2b:fe:
                    04:5f:b0:68:a3:5f:57:65:f2:29:b9:bb:a5:58:f0:
                    01:d5:64:82:66:d6:37:9e:82:fa:0d:8f:4c:9b:eb:
                    26:9c:53:e1:0a:17:78:b1:a9:0c:10:06:46:cb:9f:
                    ed:cb:5d:c7:1d:46:33:25:c6:06:38:98:0d:52:99:
                    55:0f:2b:57:72:aa:a4:5e:89:a2:b1:96:15:e9:81:
                    15:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:6B:DE:91:08:DA:77:4E:03:40:E8:15:73:CE:1C:59:53:38:DA:9C
            X509v3 Authority Key Identifier:
                keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a363830383a3a2f34382d3438203d3e20323136333035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df80:6808::/48

    Signature Algorithm: sha256WithRSAEncryption
         a4:4f:93:c4:9b:60:87:7a:f1:32:0d:d1:bf:78:77:04:6d:43:
         61:37:c4:3b:93:52:71:33:02:7d:b1:f4:54:4c:cb:55:4f:95:
         1d:ed:c6:ef:b9:cd:80:bb:76:1c:6c:40:c1:f9:d4:1e:20:c1:
         aa:4a:8e:d9:b2:93:1a:bc:3e:67:f0:e8:ff:52:ac:e4:d4:38:
         b1:33:07:3c:0d:e2:1e:ef:33:ef:87:5d:4b:65:18:27:0b:ab:
         6e:ee:75:4b:3a:74:17:a7:fb:c6:51:06:e6:30:1f:b9:99:f7:
         83:93:89:dc:8c:56:3a:c1:4a:95:ec:9e:cf:5c:db:74:c4:78:
         1f:32:f1:f7:ed:dd:2a:f2:92:67:07:f0:a5:d9:8d:87:9d:a3:
         d3:c8:1a:0f:d6:a7:35:f2:b9:e3:b4:4b:aa:d9:85:90:fd:2b:
         01:ac:33:5a:ba:05:08:31:09:67:8d:f7:9f:d8:cc:9d:37:19:
         f2:f0:ff:33:79:33:03:d8:31:cc:f3:3f:b2:bd:f7:6b:97:bf:
         5e:6b:bb:e0:7b:4a:c2:89:2a:b4:96:2d:c0:e1:c4:ba:22:07:
         a4:4c:8e:21:1b:83:9e:0a:21:da:c2:0d:7d:82:74:39:78:be:
         6f:dc:c0:2c:54:91:3d:b7:97:df:29:db:3c:17:00:4a:62:9e:
         68:df:2b:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----