Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/326130353a646663313a6362333a3a2f34382d3438203d3e20323136313037.roa
File:                     326130353a646663313a6362333a3a2f34382d3438203d3e20323136313037.roa (raw, json)
Hash identifier:          EFOzSMpWqsipCSj+5JRzO/3v9yeiR6i82PkqeUgHCJQ=
Subject key identifier:   DC:5C:EA:60:50:96:C8:EE:5C:CC:71:95:91:33:B5:6D:C7:1F:03:D7
Certificate issuer:       /CN=A0BDCD4CEF02B9AA3CBD0A837666716397198BFD
Certificate serial:       6D70539826E2ED4B23238B3A079A41FC278E3052
Authority key identifier: A0:BD:CD:4C:EF:02:B9:AA:3C:BD:0A:83:76:66:71:63:97:19:8B:FD
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/326130353a646663313a6362333a3a2f34382d3438203d3e20323136313037.roa
Signing time:             Wed 14 Feb 2024 20:07:49 +0000
ROA not before:           Wed 14 Feb 2024 20:02:49 +0000
ROA not after:            Wed 12 Feb 2025 20:07:49 +0000
asID:                     216107
IP address blocks:        2a05:dfc1:cb3::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:70:53:98:26:e2:ed:4b:23:23:8b:3a:07:9a:41:fc:27:8e:30:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0BDCD4CEF02B9AA3CBD0A837666716397198BFD
        Validity
            Not Before: Feb 14 20:02:49 2024 GMT
            Not After : Feb 12 20:07:49 2025 GMT
        Subject: CN=DC5CEA605096C8EE5CCC71959133B56DC71F03D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d4:b9:1b:cb:02:e5:6a:6d:bb:f2:99:df:12:
                    4b:3e:f6:06:98:bd:50:ee:c2:6a:47:ae:fd:96:90:
                    38:39:34:5c:43:95:df:d3:84:cc:0c:d7:08:f2:5d:
                    c1:88:7a:6a:43:a4:29:36:5d:7c:ea:07:08:dd:7d:
                    07:73:af:89:42:8a:89:7f:42:7a:16:8e:c0:2d:fb:
                    97:2b:ff:52:97:6d:bd:3d:54:28:6e:5d:ff:42:55:
                    2f:d5:9b:5a:41:18:53:04:4f:75:ad:2c:e1:88:20:
                    cb:b3:d7:ad:44:81:f7:74:4a:cd:9f:21:5f:0b:fd:
                    3a:72:92:2f:bf:20:81:97:44:2b:1a:e9:d2:f2:c8:
                    2c:cf:62:d1:41:67:d7:81:63:a1:82:3f:ea:88:63:
                    8c:ef:ea:a5:1f:35:ec:a3:d0:66:73:da:49:68:93:
                    ca:d6:01:7e:72:df:4c:bc:4d:8e:29:1c:27:7d:44:
                    a2:a5:00:d2:77:f0:ff:e4:00:2c:b2:38:d8:c3:ad:
                    dd:72:ff:4b:42:78:63:3a:7f:6c:03:e7:99:e5:f3:
                    6f:59:f2:97:9e:84:53:3d:4e:0c:ad:bb:8e:1d:1b:
                    a7:0e:aa:e4:47:ce:51:38:e7:ab:04:9f:36:fa:67:
                    c7:ee:c8:69:8e:ca:3c:13:ab:a2:32:07:36:74:e3:
                    c2:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:5C:EA:60:50:96:C8:EE:5C:CC:71:95:91:33:B5:6D:C7:1F:03:D7
            X509v3 Authority Key Identifier:
                keyid:A0:BD:CD:4C:EF:02:B9:AA:3C:BD:0A:83:76:66:71:63:97:19:8B:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/326130353a646663313a6362333a3a2f34382d3438203d3e20323136313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:cb3::/48

    Signature Algorithm: sha256WithRSAEncryption
         62:b5:bd:22:df:6f:8f:65:76:51:50:d7:14:0a:dc:69:94:b2:
         e3:ce:6e:37:cb:1f:aa:fb:f0:e6:98:5c:54:2a:c6:c0:2b:f8:
         ab:12:0a:43:e1:c3:14:d7:f4:cc:3e:6e:be:84:25:f4:76:32:
         3f:ab:d4:83:08:37:8c:c5:95:a8:66:ec:e1:a2:90:94:15:a0:
         5a:a2:82:dc:62:69:81:42:3c:f2:7d:3f:4f:75:a7:66:32:0c:
         ba:bf:f4:8b:69:50:a8:9b:72:e8:06:2b:fd:0f:90:04:91:65:
         33:c9:0e:02:63:06:9e:e5:1c:c0:29:07:33:b5:aa:01:6b:a8:
         db:28:3d:0d:09:44:eb:19:73:07:53:9a:c0:f6:a6:8a:4a:6c:
         fb:57:71:a1:48:0f:42:2b:1e:83:de:46:1c:4e:f4:b1:35:68:
         e6:59:a9:b8:2e:22:1d:30:23:df:2f:a7:01:cc:36:33:6d:b4:
         5a:fd:df:d3:70:b9:29:42:1d:5f:89:bb:91:16:ad:22:2a:30:
         05:a8:58:f5:cf:ba:c3:dc:4f:f8:23:2a:1e:92:37:6c:af:66:
         30:51:69:68:1c:4e:18:df:bf:73:18:93:ef:3a:4c:d3:93:d3:
         2b:31:d6:17:9b:14:0c:07:f4:4d:e5:a1:e0:f4:c6:0b:09:d6:
         8e:30:88:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----