Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a666266323a3a2f34382d3438203d3e20313937393933.roa
File:                     326131333a646638303a666266323a3a2f34382d3438203d3e20313937393933.roa (raw, json)
Hash identifier:          Wu59ac6KJnyZZPfGeWLVSYCe3YLJV7D4ul/jFpG0Ng0=
Subject key identifier:   C0:42:88:C6:7F:1A:85:91:A6:4C:6B:46:FF:2D:DC:4A:81:2C:C7:40
Certificate issuer:       /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial:       538A4F5AB56BDDE08185B6DE8030117D121D8386
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a666266323a3a2f34382d3438203d3e20313937393933.roa
Signing time:             Thu 24 Aug 2023 14:38:39 +0000
ROA not before:           Thu 24 Aug 2023 14:33:39 +0000
ROA not after:            Thu 22 Aug 2024 14:38:39 +0000
asID:                     197993
IP address blocks:        2a13:df80:fbf2::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:8a:4f:5a:b5:6b:dd:e0:81:85:b6:de:80:30:11:7d:12:1d:83:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
        Validity
            Not Before: Aug 24 14:33:39 2023 GMT
            Not After : Aug 22 14:38:39 2024 GMT
        Subject: CN=C04288C67F1A8591A64C6B46FF2DDC4A812CC740
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c4:1b:6c:91:a3:25:ba:2a:a1:8e:c5:ab:2c:
                    36:df:3a:74:b3:b2:8d:7e:33:e0:59:f9:36:18:1e:
                    59:a9:e7:0d:21:4d:38:0b:02:4e:4d:1a:05:c1:af:
                    d5:5b:8e:7a:a3:92:35:b8:88:14:74:47:b6:de:fb:
                    df:09:f5:75:6c:94:7a:db:cb:c2:1a:3b:84:a1:8c:
                    10:df:d0:66:0a:3d:fa:84:66:b4:cf:92:63:ac:21:
                    cc:9b:18:fd:ce:da:93:22:4b:d8:76:66:0a:d4:fc:
                    b8:a0:6b:72:57:39:c9:e4:4e:5e:76:9e:ce:10:c2:
                    6c:8b:cd:8b:ee:e4:7c:0c:d7:11:57:10:15:84:71:
                    ad:25:9d:23:12:50:ff:84:5a:a5:eb:3f:96:9b:4d:
                    d9:3a:0b:8b:d6:36:cd:f2:b5:c3:5c:a6:49:f9:0c:
                    34:a2:d4:03:44:f7:02:28:9a:75:30:e6:60:7f:88:
                    be:9b:08:13:70:d0:31:dd:db:18:7b:dd:cb:b1:0d:
                    f6:08:9f:69:51:9e:94:9f:d1:79:2e:a7:e9:4e:cd:
                    1c:43:8c:fa:84:cc:5d:66:4a:7b:45:b7:e9:b3:78:
                    eb:22:55:c8:3b:1b:b4:8a:18:a1:47:be:22:74:ab:
                    39:b9:d0:39:df:ba:d8:0f:03:73:59:6d:91:d7:c1:
                    9a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:42:88:C6:7F:1A:85:91:A6:4C:6B:46:FF:2D:DC:4A:81:2C:C7:40
            X509v3 Authority Key Identifier:
                keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a666266323a3a2f34382d3438203d3e20313937393933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df80:fbf2::/48

    Signature Algorithm: sha256WithRSAEncryption
         38:ae:32:24:9b:38:b1:39:82:07:13:f1:c0:e7:ba:93:14:b8:
         7e:28:e3:65:1e:1c:cc:a8:07:38:a2:eb:43:37:ad:2e:ca:e9:
         c1:3f:29:48:26:f6:60:f1:54:60:e0:03:e9:61:92:1e:10:7b:
         64:9c:4f:74:ef:60:04:e8:aa:fd:56:c9:f0:3f:a4:05:15:28:
         76:6e:94:64:4e:51:76:76:fd:14:c1:90:75:93:c9:e9:64:cf:
         1d:cd:7c:53:d6:4a:58:76:f9:ce:bd:1c:e6:c9:fe:78:fc:77:
         98:04:c3:15:95:83:0a:01:d9:a6:97:f1:8e:fb:10:30:b6:55:
         28:fb:00:15:dd:81:01:b7:2d:c7:b3:fb:65:24:9a:5f:5a:80:
         c7:aa:ad:63:d1:24:dd:32:3e:e4:b2:8c:9d:44:2e:2d:5e:6d:
         64:c1:6a:49:af:38:1c:15:e9:34:49:9d:c3:a2:73:d6:3d:dd:
         5c:3c:63:e7:c6:65:30:bb:fe:83:a6:72:1b:93:63:ac:bb:ca:
         a3:5f:61:d5:fb:66:fb:e0:c8:f9:f9:0c:65:11:11:23:ee:d3:
         6a:5c:7f:45:c4:7d:08:e6:da:7e:78:22:14:a5:22:d8:85:c3:
         51:8c:1c:ef:c6:df:87:2a:d4:41:6b:f9:28:5d:f8:44:9e:78:
         5f:b6:07:00
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIUU4pPWrVr3eCBhbbegDARfRIdg4YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDVjM2Q1ZTcwZmM5YWQxMGJhOTBkNDVkYzY2NDU0ZTll
M2ExNDZhODAeFw0yMzA4MjQxNDMzMzlaFw0yNDA4MjIxNDM4MzlaMDMxMTAvBgNV
BAMTKEMwNDI4OEM2N0YxQTg1OTFBNjRDNkI0NkZGMkREQzRBODEyQ0M3NDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8xBtskaMluiqhjsWrLDbfOnSz
so1+M+BZ+TYYHlmp5w0hTTgLAk5NGgXBr9VbjnqjkjW4iBR0R7be+98J9XVslHrb
y8IaO4ShjBDf0GYKPfqEZrTPkmOsIcybGP3O2pMiS9h2ZgrU/Liga3JXOcnkTl52
ns4QwmyLzYvu5HwM1xFXEBWEca0lnSMSUP+EWqXrP5abTdk6C4vWNs3ytcNcpkn5
DDSi1ANE9wIomnUw5mB/iL6bCBNw0DHd2xh73cuxDfYIn2lRnpSf0Xkup+lOzRxD
jPqEzF1mSntFt+mzeOsiVcg7G7SKGKFHviJ0qzm50DnfutgPA3NZbZHXwZozAgMB
AAGjggJKMIICRjAdBgNVHQ4EFgQUwEKIxn8ahZGmTGtG/y3cSoEsx0AwHwYDVR0j
BBgwFoAU1cPV5w/JrRC6kNRdxmRU6eOhRqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDQwMzJjOGYtMWQ1Ny00YzNiLTkwNDMtYTBlN2ZlYmYx
NjdkLzAvRDVDM0Q1RTcwRkM5QUQxMEJBOTBENDVEQzY2NDU0RTlFM0ExNDZBOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFjUFY1d19KclJDNmtOUmR4bVJVNmVP
aFJxZy5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDQwMzJjOGYt
MWQ1Ny00YzNiLTkwNDMtYTBlN2ZlYmYxNjdkLzAvMzI2MTMxMzMzYTY0NjYzODMw
M2E2NjYyNjYzMjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzkzNzM5MzkzMy5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw
DwQCAAIwCQMHACoT34D78jANBgkqhkiG9w0BAQsFAAOCAQEAOK4yJJs4sTmCBxPx
wOe6kxS4fijjZR4czKgHOKLrQzetLsrpwT8pSCb2YPFUYOAD6WGSHhB7ZJxPdO9g
BOiq/VbJ8D+kBRUodm6UZE5Rdnb9FMGQdZPJ6WTPHc18U9ZKWHb5zr0c5sn+ePx3
mATDFZWDCgHZppfxjvsQMLZVKPsAFd2BAbctx7P7ZSSaX1qAx6qtY9Ek3TI+5LKM
nUQuLV5tZMFqSa84HBXpNEmdw6Jz1j3dXDxj58ZlMLv+g6ZyG5NjrLvKo19h1ftm
++DI+fkMZRERI+7Talx/RcR9CObafngiFKUi2IXDUYwc78bfhyrUQWv5KF34RJ54
X7YHAA==
-----END CERTIFICATE-----