Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638373a613030303a3a2f33382d3438203d3e20323038333238.roa
File:                     326131333a646638373a613030303a3a2f33382d3438203d3e20323038333238.roa (raw, json)
Hash identifier:          xr6hubjN4gKGG6gXCU1Mne2A7szccT64pPSZeQx5s+A=
Subject key identifier:   6E:D0:97:38:02:50:0F:33:EF:7D:D7:45:50:B3:F0:AB:58:DC:3B:7E
Certificate issuer:       /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial:       4E2303DB32E33713F1AD79BF3E8265831A5A737D
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638373a613030303a3a2f33382d3438203d3e20323038333238.roa
Signing time:             Thu 30 Nov 2023 21:26:36 +0000
ROA not before:           Thu 30 Nov 2023 21:21:36 +0000
ROA not after:            Thu 28 Nov 2024 21:26:36 +0000
asID:                     208328
IP address blocks:        2a13:df87:a000::/38 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:23:03:db:32:e3:37:13:f1:ad:79:bf:3e:82:65:83:1a:5a:73:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
        Validity
            Not Before: Nov 30 21:21:36 2023 GMT
            Not After : Nov 28 21:26:36 2024 GMT
        Subject: CN=6ED0973802500F33EF7DD74550B3F0AB58DC3B7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:62:9e:7a:b5:6a:35:d5:3f:be:90:82:66:9f:
                    d7:6a:c0:15:55:e2:c5:ae:61:60:7c:53:d7:12:6a:
                    d8:34:9b:d3:6b:57:6a:68:6b:78:fd:b4:83:ec:e7:
                    f6:87:2a:58:db:2a:cd:93:38:37:65:7d:06:a7:a3:
                    5c:68:6b:e4:7e:3e:43:42:67:41:79:62:70:6e:62:
                    e5:a9:c9:c1:30:52:45:be:f4:0a:03:90:e0:93:71:
                    61:cc:d3:3a:56:18:a1:b5:5c:dc:08:ac:4e:13:d6:
                    f4:40:ff:95:b0:a7:f0:c2:3d:12:ea:ab:6c:d9:f1:
                    43:53:69:82:3f:a2:8e:b9:a2:86:5b:b5:cc:bf:18:
                    d4:37:a4:c2:5e:1e:2e:cd:83:53:4e:13:de:9d:93:
                    1a:91:ef:58:e9:a8:30:d8:3d:53:44:79:09:78:50:
                    65:dc:c7:eb:c2:56:83:cd:83:6c:61:30:dc:49:e5:
                    ab:14:cf:98:94:5f:09:ea:b5:18:15:68:ec:81:94:
                    ba:99:81:de:18:0d:2d:d1:c1:c3:19:7e:17:82:09:
                    73:2a:ce:ae:b0:25:56:10:60:88:04:cc:8e:1f:bd:
                    a7:9b:1a:f3:3c:39:80:46:81:d6:6e:2b:62:ff:03:
                    7e:81:eb:dc:a0:c0:de:11:8d:a2:ee:53:2b:b4:3c:
                    92:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:D0:97:38:02:50:0F:33:EF:7D:D7:45:50:B3:F0:AB:58:DC:3B:7E
            X509v3 Authority Key Identifier:
                keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638373a613030303a3a2f33382d3438203d3e20323038333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df87:a000::/38

    Signature Algorithm: sha256WithRSAEncryption
         be:a9:47:37:19:d6:a7:a4:fa:da:89:3a:b7:f3:ae:14:8d:70:
         97:ca:e5:e9:5e:92:66:e2:fc:39:89:5d:ff:ec:4a:d6:48:42:
         59:ee:1a:a9:77:31:98:00:87:bb:4d:05:53:70:d3:47:7b:c9:
         dc:67:35:ce:c3:a5:59:a5:ab:8f:36:45:14:df:13:23:97:e1:
         40:aa:08:21:57:f5:0b:47:a5:e4:17:43:0c:9e:7a:0f:63:b8:
         dc:0d:85:65:84:97:eb:b7:e3:5a:60:a0:2c:c9:ba:5d:50:d8:
         8a:3f:d4:64:9c:78:71:fc:fe:fa:87:ad:47:8d:a7:6a:24:46:
         f9:c4:c8:e6:18:bd:60:94:b7:4f:d7:75:5c:c1:4d:05:81:56:
         1b:d0:51:64:f6:b5:f2:16:e2:95:b5:30:b1:ae:3c:b2:62:47:
         43:33:51:fb:20:67:0b:9d:f5:0e:57:5c:ba:31:76:d9:9a:ff:
         af:32:e4:a7:64:d0:11:9b:9b:9a:68:b9:ac:1b:ea:34:ee:92:
         50:45:6a:da:e4:64:48:4d:1c:c8:e8:0a:8e:2b:7d:22:bb:60:
         ed:a3:8a:41:41:eb:c2:de:da:fc:3f:9f:06:93:65:9e:37:ea:
         32:bb:72:77:d0:80:b0:30:95:43:d8:80:35:d5:44:51:3c:bc:
         99:7f:27:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----