Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638373a613430303a3a2f33382d3438203d3e203437353039.roa
File:                     326131333a646638373a613430303a3a2f33382d3438203d3e203437353039.roa (raw, json)
Hash identifier:          I5UEoLAR0P+fa8DMeKZekQ4Lx6eCH7K3cFwKGn1ltTs=
Subject key identifier:   5B:77:65:B8:1E:AF:BC:2D:B9:31:80:3E:A1:EC:C6:E3:00:DD:C4:41
Certificate issuer:       /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial:       4311CB145CA2F5EE49E505A59B5C471889321B19
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638373a613430303a3a2f33382d3438203d3e203437353039.roa
Signing time:             Mon 04 Dec 2023 14:11:25 +0000
ROA not before:           Mon 04 Dec 2023 14:06:25 +0000
ROA not after:            Mon 02 Dec 2024 14:11:25 +0000
asID:                     47509
IP address blocks:        2a13:df87:a400::/38 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:11:cb:14:5c:a2:f5:ee:49:e5:05:a5:9b:5c:47:18:89:32:1b:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
        Validity
            Not Before: Dec  4 14:06:25 2023 GMT
            Not After : Dec  2 14:11:25 2024 GMT
        Subject: CN=5B7765B81EAFBC2DB931803EA1ECC6E300DDC441
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c9:0f:d3:19:85:ba:48:fd:f0:34:91:33:6a:
                    aa:d6:b8:dc:ed:23:26:75:95:2b:c1:b2:42:d3:21:
                    0d:2f:68:07:b4:78:2c:67:21:61:e9:64:1c:85:96:
                    49:45:d5:dc:41:f6:67:3d:ed:8a:e6:14:e8:19:5f:
                    a3:96:98:a3:53:60:41:7b:02:9d:34:b3:01:b4:38:
                    ec:eb:08:1b:79:e8:7b:af:d4:bb:c1:ec:27:11:91:
                    e2:45:8c:0e:96:3b:eb:67:a0:1f:27:c2:9f:48:07:
                    a3:cf:8e:3c:ff:6c:ae:a4:b6:66:65:67:71:a7:44:
                    2d:78:39:15:67:44:a3:07:7b:eb:fe:e9:a7:d8:b5:
                    29:c8:65:1d:43:3f:44:b7:78:52:94:cd:46:36:6a:
                    8e:3c:65:1c:a9:59:d6:f9:e0:81:4a:5b:66:35:33:
                    eb:a4:ee:da:54:2f:90:d8:49:58:22:18:d2:52:68:
                    93:d3:e1:4e:1e:85:51:a8:bb:47:86:7f:cb:51:97:
                    f5:ff:c8:8e:77:51:56:98:d2:99:1d:99:47:f6:76:
                    cd:c0:aa:a5:18:6e:e6:80:6e:f9:e1:0a:d7:9d:71:
                    be:cc:ea:50:51:9c:45:e5:97:1a:d7:8b:b2:7e:02:
                    11:61:40:2e:50:71:f5:c6:e6:8c:81:c6:d7:12:27:
                    2a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:77:65:B8:1E:AF:BC:2D:B9:31:80:3E:A1:EC:C6:E3:00:DD:C4:41
            X509v3 Authority Key Identifier:
                keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638373a613430303a3a2f33382d3438203d3e203437353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df87:a400::/38

    Signature Algorithm: sha256WithRSAEncryption
         b0:e6:d8:1d:76:34:e9:fa:a2:ae:1f:00:70:b5:23:f9:fa:76:
         b5:3c:1a:34:00:e6:66:fd:44:ba:8f:ea:c0:88:70:1f:c3:d7:
         bf:01:de:0d:ac:55:9f:68:07:34:27:bf:b9:6b:dd:c5:8d:44:
         fa:05:53:67:48:74:fa:8f:72:55:31:2a:69:85:05:81:03:52:
         f4:9c:61:3b:55:52:6c:1a:52:e9:9a:e1:1b:0f:8c:3d:ce:d0:
         66:04:0c:ae:b6:28:f6:72:c1:b0:fe:10:71:44:22:7f:e0:ca:
         ad:ff:d3:c1:36:3e:cc:96:7a:0b:8f:bf:d8:2c:35:34:27:51:
         3b:d7:cb:2b:50:6e:d7:42:67:4a:5f:f4:bc:14:7d:0f:12:3b:
         82:06:59:f9:bf:e0:ce:7e:b6:98:c7:45:4e:e5:3f:53:21:c6:
         e2:f1:ad:e4:ee:8a:c3:e8:a6:0d:95:2e:db:a3:c2:56:39:9d:
         11:ee:24:d3:84:35:e9:22:fb:c0:e5:4f:4b:19:53:c7:47:22:
         3f:61:0f:69:63:99:7c:f1:85:56:60:49:af:6a:d7:f4:1a:a4:
         2f:29:22:18:0f:32:81:85:4e:9f:8f:6c:7e:c3:d6:83:e6:73:
         22:66:76:f1:60:27:62:e9:db:49:08:9a:ad:06:10:e1:91:14:
         08:a2:ad:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----