Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638373a383030303a3a2f33382d3438203d3e20323136313332.roa
File:                     326131333a646638373a383030303a3a2f33382d3438203d3e20323136313332.roa (raw, json)
Hash identifier:          4oEC7zZqLUTu7Ajvz5FakFNDikPzzMosVOe/xZki0mo=
Subject key identifier:   23:D0:7F:CE:AA:A0:A4:5D:A7:82:B0:1A:09:43:41:0A:FC:4B:0E:31
Certificate issuer:       /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial:       7FAABE67ECF2ADA163A02EA32C37D5162C516C4E
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638373a383030303a3a2f33382d3438203d3e20323136313332.roa
Signing time:             Fri 15 Dec 2023 22:54:39 +0000
ROA not before:           Fri 15 Dec 2023 22:49:39 +0000
ROA not after:            Fri 13 Dec 2024 22:54:39 +0000
asID:                     216132
IP address blocks:        2a13:df87:8000::/38 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:aa:be:67:ec:f2:ad:a1:63:a0:2e:a3:2c:37:d5:16:2c:51:6c:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
        Validity
            Not Before: Dec 15 22:49:39 2023 GMT
            Not After : Dec 13 22:54:39 2024 GMT
        Subject: CN=23D07FCEAAA0A45DA782B01A0943410AFC4B0E31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a8:68:c3:32:68:c9:df:46:82:91:b7:e6:17:
                    55:53:7a:2e:6f:cc:b6:65:4e:a7:69:a4:b8:60:07:
                    f6:a7:33:64:78:8d:91:2b:a3:67:6c:df:a0:a4:e1:
                    4a:87:f7:37:18:29:e0:d4:15:35:8d:0a:50:84:d2:
                    29:b6:56:26:ea:13:99:f3:4b:98:b5:1c:e8:87:fc:
                    15:d3:10:2a:e1:c5:03:e0:f4:9c:0e:a1:c0:ee:69:
                    ac:bd:85:a2:2d:15:ae:52:86:df:ba:a2:61:4c:07:
                    b5:0c:43:10:fb:ed:13:49:0c:a8:0d:a7:07:09:6c:
                    aa:b9:61:39:18:ef:18:4f:fc:7e:dd:b3:cd:99:64:
                    10:72:17:43:da:66:a1:12:49:92:ae:47:9b:7b:c0:
                    aa:5f:1f:7e:00:ee:d4:bb:d8:31:27:1d:b3:e7:f1:
                    ed:63:1b:f0:76:f3:92:02:b6:76:05:13:e3:a4:4f:
                    19:23:2b:73:ba:e3:74:fe:dd:24:70:5a:c7:f3:53:
                    46:5c:71:8a:ac:f2:fb:a6:f1:56:6c:bf:d1:10:05:
                    5f:18:d9:d1:4a:3c:c5:24:0b:2a:6d:21:22:e8:bb:
                    51:dd:2f:91:9e:69:84:5a:9a:1f:7b:5b:51:78:fe:
                    e7:82:fb:eb:5f:3a:b8:97:7d:51:c5:f7:e5:1d:5e:
                    ae:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:D0:7F:CE:AA:A0:A4:5D:A7:82:B0:1A:09:43:41:0A:FC:4B:0E:31
            X509v3 Authority Key Identifier:
                keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638373a383030303a3a2f33382d3438203d3e20323136313332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df87:8000::/38

    Signature Algorithm: sha256WithRSAEncryption
         20:44:61:11:9f:6d:51:06:fe:a5:87:97:f0:25:b2:6c:e9:a7:
         fb:48:b7:60:22:c8:9a:39:05:b5:0a:04:23:eb:33:01:52:82:
         6e:eb:51:04:6f:0d:ed:5a:2b:37:24:0b:a7:04:f2:39:47:0f:
         a4:30:cc:5d:b8:f4:c3:36:b5:b4:8c:56:ea:e8:2c:a6:a6:d7:
         2c:8f:dd:0f:63:59:ce:24:f0:f6:1d:32:03:98:2b:a4:16:7a:
         c0:39:63:26:19:9f:7d:f0:32:8f:2a:95:8b:5b:25:b6:59:4a:
         c5:46:94:94:88:2b:5a:21:27:03:d3:2a:0d:7e:23:06:0a:43:
         45:b3:bb:bc:03:ed:a9:a1:a0:13:ec:6b:29:53:79:97:97:a7:
         c8:a8:db:b3:5a:9b:75:a8:22:8e:93:25:8b:f8:1e:dc:bb:3d:
         f1:c2:70:d4:17:1e:63:9a:d8:8a:1e:df:95:cb:1a:c4:b8:df:
         ef:fd:da:85:9d:cf:eb:a6:bd:1d:57:df:82:00:13:16:4d:f7:
         44:a9:e3:76:4a:e0:00:51:ff:cb:3e:d4:32:c4:72:40:8c:79:
         d2:32:3e:f0:5d:23:c9:89:7f:6c:2c:42:8e:a4:1f:42:07:80:
         50:aa:10:70:da:7b:fa:d4:5e:2d:a1:0c:b2:a1:36:26:68:50:
         5f:b2:d3:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----