Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/6/326131323a646434373a383466653a3a2f34382d3438203d3e20323035343332.roa
File:                     326131323a646434373a383466653a3a2f34382d3438203d3e20323035343332.roa (raw, json)
Hash identifier:          sToTGeZMi0VWX8evfppncp9+CfZ8w2nh10Kuc2Gf/Rc=
Subject key identifier:   13:3D:F3:C5:5F:9A:89:44:83:9D:22:A7:52:23:C2:6F:8F:B8:C8:FA
Certificate issuer:       /CN=34E6AAC74193FE34C57CB5F562608EE1E50DAD51
Certificate serial:       0AA633DCAD5D411C1513DE0432E70FD2815C531A
Authority key identifier: 34:E6:AA:C7:41:93:FE:34:C5:7C:B5:F5:62:60:8E:E1:E5:0D:AD:51
Authority info access:    rsync://rpki.co/repo/AS945/1/34E6AAC74193FE34C57CB5F562608EE1E50DAD51.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/6/326131323a646434373a383466653a3a2f34382d3438203d3e20323035343332.roa
Signing time:             Tue 11 Apr 2023 01:14:07 +0000
ROA not before:           Tue 11 Apr 2023 01:09:07 +0000
ROA not after:            Tue 09 Apr 2024 01:14:07 +0000
asID:                     205432
IP address blocks:        2a12:dd47:84fe::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:a6:33:dc:ad:5d:41:1c:15:13:de:04:32:e7:0f:d2:81:5c:53:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34E6AAC74193FE34C57CB5F562608EE1E50DAD51
        Validity
            Not Before: Apr 11 01:09:07 2023 GMT
            Not After : Apr  9 01:14:07 2024 GMT
        Subject: CN=133DF3C55F9A8944839D22A75223C26F8FB8C8FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:17:fb:e9:f1:59:3e:3e:37:ae:00:fc:a3:c9:
                    a8:42:ac:b4:34:b1:9b:39:14:25:a8:e3:fc:4a:f4:
                    00:82:01:3c:23:0c:87:0e:8b:10:52:74:cf:ed:c4:
                    f3:4e:a6:57:5b:d7:ab:c3:3f:58:6e:f8:ba:87:c3:
                    25:3d:6e:ab:8d:63:1e:30:42:bf:88:33:2b:a6:ac:
                    4d:91:62:49:ae:7f:3c:86:96:a8:42:c2:5d:9b:0a:
                    b6:f5:9e:cb:8e:b9:fe:76:4c:ca:04:a0:a2:89:63:
                    f7:46:71:ee:55:d9:46:88:60:c2:5a:c4:9a:36:84:
                    78:dc:71:18:73:78:e7:8a:a8:e4:05:cc:2a:5a:f6:
                    d8:03:1d:25:88:6a:67:45:6a:6c:86:82:7f:28:44:
                    bf:6e:31:c2:dd:8b:b0:8f:c5:26:1f:9b:2d:fd:97:
                    7f:7e:3a:40:76:28:7b:58:c2:c5:7c:0d:a4:90:f9:
                    b8:2b:fa:49:6d:bd:73:90:b9:5b:54:f3:24:d1:1e:
                    75:cb:3e:99:09:fc:be:5b:b5:6b:c8:41:50:a6:b2:
                    74:3d:ca:a3:76:15:ac:7a:03:a2:be:5b:d0:e6:40:
                    c6:0d:c2:0c:d7:b7:6f:a0:7b:bb:87:95:84:7b:53:
                    4a:21:04:de:ef:40:46:00:24:68:41:da:23:f3:83:
                    81:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:3D:F3:C5:5F:9A:89:44:83:9D:22:A7:52:23:C2:6F:8F:B8:C8:FA
            X509v3 Authority Key Identifier:
                keyid:34:E6:AA:C7:41:93:FE:34:C5:7C:B5:F5:62:60:8E:E1:E5:0D:AD:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/6/34E6AAC74193FE34C57CB5F562608EE1E50DAD51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/AS945/1/34E6AAC74193FE34C57CB5F562608EE1E50DAD51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/6/326131323a646434373a383466653a3a2f34382d3438203d3e20323035343332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:84fe::/48

    Signature Algorithm: sha256WithRSAEncryption
         76:27:b4:9d:84:7a:26:9e:c4:41:81:0c:11:2c:d1:63:81:8e:
         aa:85:4e:f8:1f:8c:e4:34:f4:c0:35:9c:ec:48:e0:23:93:3a:
         b0:e1:74:1d:70:da:27:89:86:ff:c0:70:0b:9d:db:1d:49:45:
         5a:24:70:a5:ad:64:39:de:e1:80:02:72:cc:a9:73:c3:5f:24:
         9c:2c:8b:8b:47:e1:9a:ef:98:b1:4b:ca:bc:a8:19:5e:3a:21:
         42:48:cc:8a:3d:ee:66:ca:3e:03:eb:d7:b3:db:b5:d5:c9:a1:
         96:ef:44:03:57:57:0e:12:cc:28:c4:bb:a2:72:a5:66:fd:9d:
         50:03:6a:f0:99:4a:38:aa:2e:e8:91:27:c2:a5:72:38:bd:5f:
         f2:c4:d5:60:a0:1d:bf:aa:a2:0d:3a:6d:4a:b3:e9:a9:e7:a1:
         12:6c:99:69:10:0b:e0:a6:38:23:8d:c6:d7:4b:61:cb:1c:69:
         60:e4:56:65:22:8b:43:bb:17:d1:67:78:1c:81:dd:d0:b5:5c:
         6e:72:2c:3b:aa:0b:64:a8:71:bb:ca:95:6e:bc:5e:a9:03:45:
         99:cc:14:a2:75:d7:d8:dc:81:8b:42:61:d2:2f:32:45:45:c4:
         03:67:ca:82:b7:06:99:bd:a8:47:ca:a8:00:9f:10:75:94:81:
         70:3c:10:90
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUCqYz3K1dQRwVE94EMucP0oFcUxowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzRFNkFBQzc0MTkzRkUzNEM1N0NCNUY1NjI2MDhFRTFF
NTBEQUQ1MTAeFw0yMzA0MTEwMTA5MDdaFw0yNDA0MDkwMTE0MDdaMDMxMTAvBgNV
BAMTKDEzM0RGM0M1NUY5QTg5NDQ4MzlEMjJBNzUyMjNDMjZGOEZCOEM4RkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeF/vp8Vk+PjeuAPyjyahCrLQ0
sZs5FCWo4/xK9ACCATwjDIcOixBSdM/txPNOpldb16vDP1hu+LqHwyU9bquNYx4w
Qr+IMyumrE2RYkmufzyGlqhCwl2bCrb1nsuOuf52TMoEoKKJY/dGce5V2UaIYMJa
xJo2hHjccRhzeOeKqOQFzCpa9tgDHSWIamdFamyGgn8oRL9uMcLdi7CPxSYfmy39
l39+OkB2KHtYwsV8DaSQ+bgr+kltvXOQuVtU8yTRHnXLPpkJ/L5btWvIQVCmsnQ9
yqN2Fax6A6K+W9DmQMYNwgzXt2+ge7uHlYR7U0ohBN7vQEYAJGhB2iPzg4FLAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUEz3zxV+aiUSDnSKnUiPCb4+4yPowHwYDVR0j
BBgwFoAUNOaqx0GT/jTFfLX1YmCO4eUNrVEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMWJmOGU5NzctNzI3OC00NmNmLWFiZDEtOTljZDFmZDJi
ZTRlLzYvMzRFNkFBQzc0MTkzRkUzNEM1N0NCNUY1NjI2MDhFRTFFNTBEQUQ1MS5j
cmwwZQYIKwYBBQUHAQEEWTBXMFUGCCsGAQUFBzAChklyc3luYzovL3Jwa2kuY28v
cmVwby9BUzk0NS8xLzM0RTZBQUM3NDE5M0ZFMzRDNTdDQjVGNTYyNjA4RUUxRTUw
REFENTEuY2VyMIG3BggrBgEFBQcBCwSBqjCBpzCBpAYIKwYBBQUHMAuGgZdyc3lu
YzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzFiZjhlOTc3
LTcyNzgtNDZjZi1hYmQxLTk5Y2QxZmQyYmU0ZS82LzMyNjEzMTMyM2E2NDY0MzQz
NzNhMzgzNDY2NjUzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMwMzUzNDMzMzIu
cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzAR
MA8EAgACMAkDBwAqEt1HhP4wDQYJKoZIhvcNAQELBQADggEBAHYntJ2EeiaexEGB
DBEs0WOBjqqFTvgfjOQ09MA1nOxI4COTOrDhdB1w2ieJhv/AcAud2x1JRVokcKWt
ZDne4YACcsypc8NfJJwsi4tH4ZrvmLFLyryoGV46IUJIzIo97mbKPgPr17PbtdXJ
oZbvRANXVw4SzCjEu6JypWb9nVADavCZSjiqLuiRJ8Klcji9X/LE1WCgHb+qog06
bUqz6annoRJsmWkQC+CmOCONxtdLYcscaWDkVmUii0O7F9FneByB3dC1XG5yLDuq
C2SocbvKlW68XqkDRZnMFKJ119jcgYtCYdIvMkVFxANnyoK3Bpm9qEfKqACfEHWU
gXA8EJA=
-----END CERTIFICATE-----