Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638323a393230303a3a2f34302d3438203d3e203438343635.roa
File:                     326131333a646638323a393230303a3a2f34302d3438203d3e203438343635.roa (raw, json)
Hash identifier:          zyKWg+MB/qJJ5Y7JpsafiS2Zr0XVgq8GZp96PNZR7pA=
Subject key identifier:   AB:BE:41:5C:B1:B4:45:F4:E4:55:E1:D5:8E:B6:6D:E0:AC:2C:93:D0
Certificate issuer:       /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial:       64D3DF32E339DAC6617D1940A952EA4533FD2E37
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638323a393230303a3a2f34302d3438203d3e203438343635.roa
Signing time:             Sun 24 Sep 2023 10:45:59 +0000
ROA not before:           Sun 24 Sep 2023 10:40:59 +0000
ROA not after:            Sun 22 Sep 2024 10:45:59 +0000
asID:                     48465
IP address blocks:        2a13:df82:9200::/40 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:d3:df:32:e3:39:da:c6:61:7d:19:40:a9:52:ea:45:33:fd:2e:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
        Validity
            Not Before: Sep 24 10:40:59 2023 GMT
            Not After : Sep 22 10:45:59 2024 GMT
        Subject: CN=ABBE415CB1B445F4E455E1D58EB66DE0AC2C93D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:26:d7:59:8f:f4:f4:55:a0:45:cb:02:24:db:
                    01:ad:d2:5c:c1:b5:35:37:58:40:0e:e1:ae:da:f0:
                    e6:16:af:a6:7a:07:c2:95:16:35:79:22:27:10:4d:
                    b6:3d:fb:62:fb:e0:de:d2:c3:79:ad:4a:30:1c:10:
                    ae:d6:99:f2:ef:17:11:27:92:1e:4b:16:7f:7f:7a:
                    9a:1b:dc:ed:da:9b:2c:06:98:9e:e6:44:f6:33:8e:
                    c6:3e:ba:d1:68:a1:4f:af:4f:c9:08:57:35:b8:f5:
                    64:99:15:3d:a5:92:15:85:91:a7:85:12:37:27:48:
                    c6:d3:23:66:bc:24:ab:6f:5f:cc:0b:f2:cf:ac:8b:
                    8e:00:41:ba:77:5b:79:82:04:d2:a8:77:c8:63:ab:
                    ad:80:9c:92:30:27:13:af:02:23:33:0a:7a:71:31:
                    15:5f:fb:1e:de:1d:53:a5:10:00:78:2e:75:6c:21:
                    cd:03:a2:ac:76:9f:ab:4d:14:ea:1f:ac:ce:dc:d7:
                    5d:84:eb:f7:60:d3:59:e1:a0:ca:bf:4a:65:b9:fc:
                    3f:fd:2f:3e:df:e5:c1:e0:be:df:1f:b7:5c:1e:0a:
                    58:d4:e2:55:b5:f2:fa:9d:8b:26:60:f5:b2:71:15:
                    a4:3e:a2:d2:04:17:fa:06:a7:12:f1:fd:73:3c:0b:
                    3e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:BE:41:5C:B1:B4:45:F4:E4:55:E1:D5:8E:B6:6D:E0:AC:2C:93:D0
            X509v3 Authority Key Identifier:
                keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638323a393230303a3a2f34302d3438203d3e203438343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df82:9200::/40

    Signature Algorithm: sha256WithRSAEncryption
         ab:d8:22:40:ee:fd:09:19:ad:34:0f:17:e1:d0:df:84:6a:28:
         c3:be:d6:55:c9:99:22:ef:9d:bd:27:74:96:50:00:9e:3b:e1:
         ae:1c:53:00:09:52:04:ba:4f:a3:9a:a0:6e:81:bd:b6:07:aa:
         a1:9e:d4:f0:24:7d:f9:2d:35:59:85:71:f9:af:e7:c1:d8:f7:
         56:69:8d:17:2d:17:b6:c2:35:75:2a:b9:c1:16:f7:18:ab:f2:
         65:c8:59:8b:53:33:fa:36:e6:fe:98:37:5a:ca:e8:0c:ce:f5:
         59:85:e6:a3:11:55:7b:ed:9a:d9:07:74:57:cf:dc:bb:d1:81:
         72:b2:44:95:3c:b1:b9:9a:9a:87:5b:12:72:d0:5f:c2:8c:f8:
         32:6b:35:21:1b:9e:a8:6c:25:7e:a9:57:13:8e:bc:5b:b3:9d:
         aa:87:7c:5d:73:c5:08:28:42:3e:ce:a4:58:7f:28:eb:7e:dc:
         77:de:6e:0f:e3:e2:cc:b0:e3:87:32:63:ba:67:30:4b:12:ab:
         55:bf:83:33:61:6c:23:de:bf:63:b8:22:e4:92:cb:9f:cd:78:
         97:49:8d:7b:87:fd:e4:11:d4:2c:e8:71:8b:99:f4:56:b1:5e:
         fc:d1:e2:32:95:45:c6:fc:1e:1c:f2:f1:bb:71:f4:0f:95:e2:
         9a:f6:eb:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----