Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/AS48752.roa
File:                     AS48752.roa (raw, json)
Hash identifier:          w0LpRFNTjBc4XfwCPHy/9zNaaVfgo+xgJQ/eYOmIDP4=
Subject key identifier:   10:F9:C3:4E:A9:CA:FE:BD:80:37:8C:39:B7:A2:D5:16:A9:5E:1B:12
Certificate issuer:       /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial:       4F2930EC298F4147805AF89CB26BA9F013C91AA5
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/AS48752.roa
Signing time:             Wed 20 Dec 2023 16:21:42 +0000
ROA not before:           Wed 20 Dec 2023 16:16:42 +0000
ROA not after:            Wed 18 Dec 2024 16:21:42 +0000
asID:                     48752
IP address blocks:        2a13:df80:c00::/38 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:29:30:ec:29:8f:41:47:80:5a:f8:9c:b2:6b:a9:f0:13:c9:1a:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
        Validity
            Not Before: Dec 20 16:16:42 2023 GMT
            Not After : Dec 18 16:21:42 2024 GMT
        Subject: CN=10F9C34EA9CAFEBD80378C39B7A2D516A95E1B12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:90:fb:e2:66:89:c3:cd:7d:3f:86:78:9a:56:
                    71:d9:6a:50:f0:63:82:2f:23:c4:98:65:5d:9c:b4:
                    9a:77:da:af:19:2d:f4:6c:1b:0a:5d:e3:50:53:85:
                    a4:14:57:73:e2:12:36:ec:cf:7c:20:42:76:75:9d:
                    91:a3:64:fe:fd:3c:36:2a:16:22:81:9b:21:b1:d6:
                    17:11:7c:e7:5e:17:30:f1:3a:c6:e2:43:58:14:a9:
                    33:a4:8d:16:48:57:e4:d5:18:55:54:4e:62:52:92:
                    ee:8f:0c:7f:26:33:4a:03:93:39:07:c9:2a:2e:0b:
                    c4:6c:d5:61:ec:ee:f7:c2:97:38:2f:a4:35:3d:de:
                    35:f0:a4:b9:9b:aa:76:e1:c0:b4:d6:c6:4c:07:b0:
                    5f:b0:f6:6d:be:3f:c7:d6:db:fe:66:e4:6b:44:38:
                    58:dc:be:f1:46:57:5f:0d:90:79:27:f1:0a:51:c5:
                    4c:0b:d6:d0:21:41:cd:c5:69:ec:8c:ee:22:97:c8:
                    39:26:4c:61:a0:11:d5:0b:91:6a:88:75:9c:3e:e6:
                    17:c5:7f:75:99:d7:da:64:0f:8b:28:7f:0a:a6:2b:
                    9c:4a:4a:2c:79:55:be:04:31:f4:23:4e:d9:fd:a6:
                    b0:46:a8:3a:9b:2f:ad:69:a8:f2:c7:b1:9a:39:b1:
                    c5:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:F9:C3:4E:A9:CA:FE:BD:80:37:8C:39:B7:A2:D5:16:A9:5E:1B:12
            X509v3 Authority Key Identifier:
                keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/AS48752.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df80:c00::/38

    Signature Algorithm: sha256WithRSAEncryption
         16:7d:f2:b5:b7:f0:8e:8e:0d:3b:62:c1:e8:80:80:e6:f8:0e:
         27:2e:2b:1e:4a:0c:47:0b:be:d4:3e:c9:30:0b:9e:fb:4b:c6:
         e0:4b:29:ec:ca:3b:f7:b8:23:0b:df:4e:5e:b6:fd:30:f1:f3:
         7b:81:05:7f:9d:1a:47:af:55:59:dc:bc:97:f0:51:bb:f5:40:
         3b:f9:96:ad:de:5c:c5:8c:f2:45:4b:7d:c2:c3:95:f5:8d:47:
         49:9c:17:e6:d4:de:0f:e3:7c:c3:bb:c0:0b:ee:19:53:c0:1f:
         c7:aa:ca:6f:bd:eb:1f:49:19:bc:c1:19:34:37:a0:0d:bf:a0:
         10:1d:32:fe:e0:93:03:7e:96:29:95:66:3f:13:53:62:e6:b7:
         56:25:32:cc:0a:e7:92:e0:a4:a7:42:bb:54:66:8c:b2:56:ff:
         97:ac:f3:f6:b2:92:9e:89:37:46:8d:83:41:bb:60:89:19:9c:
         82:cc:04:bb:fb:96:17:76:24:59:78:15:3c:27:03:ad:1f:40:
         30:f2:03:3a:64:28:a3:26:fe:3b:df:c8:4d:e1:b5:90:b5:01:
         9f:f8:35:dc:4c:31:0c:bd:4d:27:41:c8:61:5e:58:34:70:94:
         f1:b7:df:bd:42:5c:55:3a:ad:2a:ab:7d:dc:db:ca:0e:a3:dd:
         b5:20:a9:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----