Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a666266663a3a2f34382d3438203d3e20313937393933.roa
File:                     326131333a646638303a666266663a3a2f34382d3438203d3e20313937393933.roa (raw, json)
Hash identifier:          gAruKupg55vk8kAtESZJsY8oP2iWqdz7wu/9suJRgs4=
Subject key identifier:   99:30:C2:60:BC:5C:FB:34:51:F3:F4:53:A1:42:BD:43:58:AB:87:D9
Certificate issuer:       /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial:       7EEBB7280973557D1C60D46DDFA1D3CE6FD9BDE5
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a666266663a3a2f34382d3438203d3e20313937393933.roa
Signing time:             Thu 24 Aug 2023 14:38:45 +0000
ROA not before:           Thu 24 Aug 2023 14:33:45 +0000
ROA not after:            Thu 22 Aug 2024 14:38:45 +0000
asID:                     197993
IP address blocks:        2a13:df80:fbff::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:eb:b7:28:09:73:55:7d:1c:60:d4:6d:df:a1:d3:ce:6f:d9:bd:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
        Validity
            Not Before: Aug 24 14:33:45 2023 GMT
            Not After : Aug 22 14:38:45 2024 GMT
        Subject: CN=9930C260BC5CFB3451F3F453A142BD4358AB87D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:51:48:97:8c:f5:fb:ad:f0:fe:4b:e2:df:4e:
                    8d:1c:71:b2:f2:25:95:62:51:19:96:bb:bb:04:3e:
                    7c:11:76:e5:d9:2a:6a:89:ca:b5:b2:b1:e5:dc:5d:
                    04:37:55:0a:b2:b3:14:5b:49:77:4f:f1:d9:4d:37:
                    6c:4a:d9:81:5d:c1:35:ab:a2:67:c2:8d:22:cb:da:
                    06:5d:c8:56:39:3b:5c:53:ba:07:9e:a3:46:00:da:
                    35:4e:85:e5:76:c3:d8:e3:43:8c:b8:0e:b3:87:5f:
                    82:d5:33:18:3f:88:f3:8d:ce:91:3e:f5:97:dd:3f:
                    b3:aa:20:2b:9c:c8:8c:57:27:48:1e:0b:3c:ca:e2:
                    7b:95:4b:e1:78:f3:e7:e9:80:1b:83:7f:fa:2a:d2:
                    07:1c:8b:6e:83:8c:5e:a0:25:fe:2d:16:33:87:ea:
                    90:54:8c:ab:2e:06:cf:c8:03:ee:e5:74:01:cf:97:
                    62:66:d6:08:5a:13:08:99:53:a1:10:c9:1d:e4:69:
                    a1:bc:ac:fc:56:48:e9:d3:1b:12:30:08:45:2c:55:
                    22:13:38:7a:7d:e0:9f:a0:44:7b:b8:4b:29:d2:54:
                    2f:77:79:ea:d1:eb:15:f1:60:89:65:2c:56:0d:a3:
                    6e:4e:3c:01:56:dd:69:1d:36:1d:1f:b2:97:56:45:
                    ba:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:30:C2:60:BC:5C:FB:34:51:F3:F4:53:A1:42:BD:43:58:AB:87:D9
            X509v3 Authority Key Identifier:
                keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a666266663a3a2f34382d3438203d3e20313937393933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df80:fbff::/48

    Signature Algorithm: sha256WithRSAEncryption
         94:61:04:bf:99:ce:70:c5:d7:a2:b6:81:0b:a5:0f:97:30:17:
         b4:f5:76:c5:5f:ee:90:5d:f9:d4:47:0b:14:21:4d:b4:bb:1b:
         3f:22:76:c9:c3:50:1a:3f:aa:34:33:d3:45:4c:83:26:aa:8f:
         4f:ea:4d:51:d0:cd:57:6d:0f:ca:17:3d:c8:0b:85:26:26:35:
         89:d2:a0:67:b7:eb:52:ec:f5:9b:b8:4f:1f:62:b2:59:58:b3:
         6b:c8:c1:99:aa:8b:4a:1a:5c:7d:54:a6:ac:f0:77:cf:af:10:
         cf:02:7b:d7:c1:79:71:a1:d4:7d:fe:5d:92:95:9d:41:a5:85:
         61:1c:ea:ba:05:c1:e8:db:13:ae:8d:e7:34:9d:5b:47:3f:65:
         3e:1f:c8:f2:aa:17:b2:c4:76:be:09:4a:cd:8d:d0:d4:77:c1:
         cb:87:ba:b3:5a:0b:b4:69:aa:4f:db:10:d2:fa:9d:a5:7c:61:
         9e:8e:e4:93:d6:a8:0b:57:4a:ea:64:2e:a7:f5:b1:a0:e9:1f:
         dc:40:5b:32:77:0a:20:3c:71:73:8e:2f:15:09:44:db:d4:ec:
         ad:9f:2f:1b:ab:a0:9c:c2:20:d9:3f:4e:15:52:55:f3:bf:1f:
         35:40:2b:6c:eb:97:13:d0:1c:fc:44:49:57:df:a3:ca:79:d9:
         47:db:b6:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----