Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a383430303a3a2f34342d3438203d3e20323136333939.roa
File:                     326131333a646638303a383430303a3a2f34342d3438203d3e20323136333939.roa (raw, json)
Hash identifier:          WHpY+RttczGIpL9c0wedIDbJ3WroPpUHDTBX4ljYfaA=
Subject key identifier:   0A:4F:9F:29:6C:70:AA:E0:E7:64:D8:9B:E0:BB:68:F8:3D:03:12:57
Certificate issuer:       /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial:       133D5981EE935FED95FD7437867AE14AEA4D9038
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a383430303a3a2f34342d3438203d3e20323136333939.roa
Signing time:             Sat 02 Sep 2023 16:55:17 +0000
ROA not before:           Sat 02 Sep 2023 16:50:17 +0000
ROA not after:            Sat 31 Aug 2024 16:55:17 +0000
asID:                     216399
IP address blocks:        2a13:df80:8400::/44 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:3d:59:81:ee:93:5f:ed:95:fd:74:37:86:7a:e1:4a:ea:4d:90:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
        Validity
            Not Before: Sep  2 16:50:17 2023 GMT
            Not After : Aug 31 16:55:17 2024 GMT
        Subject: CN=0A4F9F296C70AAE0E764D89BE0BB68F83D031257
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f4:06:4f:bc:8b:30:a8:a2:5a:4b:49:17:8e:
                    ae:58:fa:20:d6:a9:34:d4:0e:8f:89:86:c7:e4:b9:
                    ab:d9:e4:5b:85:fd:b3:ed:89:48:46:d8:d5:31:60:
                    50:53:85:0c:c7:a3:02:e4:5a:51:a5:0c:d1:ed:f7:
                    cf:86:d9:fd:fd:e9:af:74:2f:6e:c7:07:69:85:83:
                    ed:dc:89:e0:39:56:5d:e4:fa:52:01:83:5a:bc:7a:
                    fc:8e:44:85:2c:25:d0:45:ad:cd:89:2e:db:f7:2a:
                    84:34:54:88:a4:87:88:2b:3a:04:2a:bd:b5:cc:fc:
                    80:c5:16:20:8a:89:55:ee:93:86:fd:89:27:a4:fd:
                    fb:9a:db:1c:2e:10:dd:6e:66:60:c2:33:6a:a9:f3:
                    01:78:89:d0:31:5c:d9:06:d7:3c:7b:d7:8a:ca:a8:
                    e7:5f:1a:55:f0:33:fd:0e:ea:97:38:ee:b5:e0:4c:
                    e9:aa:29:a3:fb:06:8c:46:99:c8:eb:8f:ea:df:db:
                    d5:e2:4d:6d:09:80:2a:1f:71:43:bb:f7:e8:40:72:
                    47:e6:1c:97:e2:c7:47:fb:0e:19:de:00:18:71:2c:
                    fb:c7:0b:b1:81:cf:38:24:13:5e:3e:e0:c1:61:b7:
                    57:d8:4d:2e:e2:15:3b:73:22:cb:03:73:9b:c6:5d:
                    c9:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:4F:9F:29:6C:70:AA:E0:E7:64:D8:9B:E0:BB:68:F8:3D:03:12:57
            X509v3 Authority Key Identifier:
                keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a383430303a3a2f34342d3438203d3e20323136333939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df80:8400::/44

    Signature Algorithm: sha256WithRSAEncryption
         76:7e:b8:2a:a8:a9:47:8d:a9:4a:a4:16:36:d6:96:c0:e8:1a:
         d6:ba:f8:e4:69:82:57:5e:85:43:78:c0:aa:d5:1c:41:fb:f5:
         e6:27:dd:93:80:23:27:d5:b2:41:ad:be:c9:11:8a:66:5f:40:
         66:18:03:34:0e:08:99:26:77:1d:b0:72:25:a6:14:aa:90:49:
         3d:09:46:d3:e1:53:df:18:1c:58:b7:8d:4a:54:65:07:35:66:
         a9:3d:0f:54:a1:f2:12:dc:2b:b9:fb:67:98:f1:8d:79:70:14:
         ab:8f:ef:1e:b4:3c:e8:89:ca:f2:ca:17:15:bd:4a:bd:14:e7:
         11:1b:ea:c8:79:02:74:6c:1c:15:8d:7f:b9:e9:64:4e:d8:7d:
         95:d2:8e:8b:ef:34:45:8e:a1:85:1a:09:5e:6b:69:a8:be:9d:
         d1:e4:ff:2e:ac:0b:01:75:fe:fe:0f:f7:8d:05:d5:e4:6a:96:
         ac:16:38:9f:f0:c2:24:e7:f9:92:c3:25:91:33:90:cf:14:21:
         9e:f9:fd:37:85:ed:cc:5c:d2:16:2f:11:e1:b9:a7:6c:c2:b0:
         63:f7:3a:75:d4:2e:55:17:5a:6a:20:2c:82:f9:dd:7b:70:26:
         66:eb:2e:71:93:46:f4:58:2b:5f:5f:5a:11:66:8f:62:c5:9e:
         2b:84:f8:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----