Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/1/326130373a353463313a333830373a3a2f34382d3438203d3e203437323732.roa
File:                     326130373a353463313a333830373a3a2f34382d3438203d3e203437323732.roa (raw, json)
Hash identifier:          ETh0QZdYImdJGDNZrmoPnelgCz4EAZrtYOEF+T+jVkw=
Subject key identifier:   F3:E1:EA:40:26:64:E9:F2:45:EF:DB:AA:E1:3A:10:59:86:98:F2:79
Certificate issuer:       /CN=CEE50F8654426B5A60EE8C52A9AE958F8D77B848
Certificate serial:       2E2672B4AB4B6D1C9F89194BAD1F7852F9F26C4C
Authority key identifier: CE:E5:0F:86:54:42:6B:5A:60:EE:8C:52:A9:AE:95:8F:8D:77:B8:48
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/CEE50F8654426B5A60EE8C52A9AE958F8D77B848.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/1/326130373a353463313a333830373a3a2f34382d3438203d3e203437323732.roa
Signing time:             Mon 25 Sep 2023 12:14:25 +0000
ROA not before:           Mon 25 Sep 2023 12:09:25 +0000
ROA not after:            Mon 23 Sep 2024 12:14:25 +0000
asID:                     47272
IP address blocks:        2a07:54c1:3807::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:26:72:b4:ab:4b:6d:1c:9f:89:19:4b:ad:1f:78:52:f9:f2:6c:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEE50F8654426B5A60EE8C52A9AE958F8D77B848
        Validity
            Not Before: Sep 25 12:09:25 2023 GMT
            Not After : Sep 23 12:14:25 2024 GMT
        Subject: CN=F3E1EA402664E9F245EFDBAAE13A10598698F279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:15:ac:75:a4:53:44:85:65:77:07:5e:f6:0b:
                    06:48:46:b8:97:73:98:36:f7:5b:82:b1:94:d7:aa:
                    1b:b8:e4:1d:47:3e:04:f3:e9:d3:f6:07:61:6c:d4:
                    fb:65:43:50:22:24:8a:9c:e5:ce:2d:6b:c7:fc:d4:
                    46:31:7b:7b:25:8e:d7:cd:49:82:5c:04:af:f6:a3:
                    f2:69:fe:12:a5:58:52:66:9f:50:c8:3a:54:cd:52:
                    7d:01:ce:27:4d:b6:41:35:ee:22:b3:37:eb:42:8f:
                    87:b5:fe:ac:e4:60:e5:1a:58:c5:0e:8e:07:54:d4:
                    f7:5c:1c:3a:93:9b:a6:b5:b0:7b:5c:5d:0c:55:25:
                    a8:9e:bb:9b:bf:d4:bd:90:37:0a:b6:02:a8:08:ad:
                    e4:a3:85:46:63:b5:a4:39:2c:6f:c8:de:0e:c2:6b:
                    9e:34:3b:57:74:00:b4:dd:76:eb:7e:75:5b:b3:e4:
                    54:35:92:4d:ed:8b:83:93:a3:05:1b:34:c7:b2:39:
                    f8:a9:d8:2c:21:5a:01:73:0f:03:ac:20:88:71:87:
                    28:6d:0e:a4:8c:5d:af:16:bf:df:77:00:d6:34:63:
                    9a:c8:d9:a9:11:b4:a3:05:78:33:79:02:df:32:4b:
                    5b:51:0a:e8:69:9d:52:50:46:5d:e7:16:bc:dd:6f:
                    db:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:E1:EA:40:26:64:E9:F2:45:EF:DB:AA:E1:3A:10:59:86:98:F2:79
            X509v3 Authority Key Identifier:
                keyid:CE:E5:0F:86:54:42:6B:5A:60:EE:8C:52:A9:AE:95:8F:8D:77:B8:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/1/CEE50F8654426B5A60EE8C52A9AE958F8D77B848.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/CEE50F8654426B5A60EE8C52A9AE958F8D77B848.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/1/326130373a353463313a333830373a3a2f34382d3438203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:3807::/48

    Signature Algorithm: sha256WithRSAEncryption
         4f:cb:f2:df:d6:f6:ca:6a:06:76:40:7f:28:d5:13:2b:24:bc:
         92:c3:dc:6f:6a:85:16:b4:9b:ea:8f:54:3f:a2:86:85:ba:6a:
         39:14:cb:3c:1c:d5:dc:91:98:0b:3e:d2:76:16:e6:6b:81:c0:
         c0:a3:b6:ce:1b:98:7f:c9:05:08:c9:f2:4c:44:d8:91:7b:89:
         aa:35:e6:09:35:ee:13:da:7f:7d:3b:f9:4b:bd:ce:a1:42:72:
         11:63:f5:00:75:1b:16:c2:40:10:57:6c:69:dc:18:d8:69:8b:
         46:81:cf:b2:78:7a:d6:19:fa:b8:2e:c0:81:22:12:0e:d0:1e:
         39:92:1a:1c:19:2f:9d:ef:cb:b0:da:69:1b:20:67:16:c3:23:
         e7:43:69:66:61:28:02:92:c9:51:18:f6:76:69:26:1c:68:ba:
         62:c9:40:25:9f:a3:8c:32:a4:9e:ea:97:26:5e:5c:c1:cb:39:
         fc:31:7e:5d:f2:44:82:ed:aa:1c:46:23:34:91:86:58:26:79:
         ec:32:d5:7a:72:e5:04:4a:4f:0b:33:7b:64:fa:2d:ef:ff:7f:
         b9:f3:a5:8a:b0:26:6c:27:7e:33:2d:49:cb:6a:4d:0b:de:ab:
         39:a1:f9:34:f8:32:de:1c:c7:72:9b:66:b1:a6:d3:46:9f:48:
         4b:98:ec:95
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgIULiZytKtLbRyfiRlLrR94UvnybEwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0VFNTBGODY1NDQyNkI1QTYwRUU4QzUyQTlBRTk1OEY4
RDc3Qjg0ODAeFw0yMzA5MjUxMjA5MjVaFw0yNDA5MjMxMjE0MjVaMDMxMTAvBgNV
BAMTKEYzRTFFQTQwMjY2NEU5RjI0NUVGREJBQUUxM0ExMDU5ODY5OEYyNzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoFax1pFNEhWV3B172CwZIRriX
c5g291uCsZTXqhu45B1HPgTz6dP2B2Fs1PtlQ1AiJIqc5c4ta8f81EYxe3sljtfN
SYJcBK/2o/Jp/hKlWFJmn1DIOlTNUn0BzidNtkE17iKzN+tCj4e1/qzkYOUaWMUO
jgdU1PdcHDqTm6a1sHtcXQxVJaieu5u/1L2QNwq2AqgIreSjhUZjtaQ5LG/I3g7C
a540O1d0ALTddut+dVuz5FQ1kk3ti4OTowUbNMeyOfip2CwhWgFzDwOsIIhxhyht
DqSMXa8Wv993ANY0Y5rI2akRtKMFeDN5At8yS1tRCuhpnVJQRl3nFrzdb9sLAgMB
AAGjggKDMIICfzAdBgNVHQ4EFgQU8+HqQCZk6fJF79uq4ToQWYaY8nkwHwYDVR0j
BBgwFoAUzuUPhlRCa1pg7oxSqa6Vj413uEgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYmM5MGY0ZjYtZjJjNC00ODgyLTkxY2YtOWI4ZjBiMzhk
N2RhLzEvQ0VFNTBGODY1NDQyNkI1QTYwRUU4QzUyQTlBRTk1OEY4RDc3Qjg0OC5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk
YjUtYmJkMy01Y2NhNjMzY2FlM2YvMC9DRUU1MEY4NjU0NDI2QjVBNjBFRThDNTJB
OUFFOTU4RjhENzdCODQ4LmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF
BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9iYzkwZjRmNi1mMmM0LTQ4ODItOTFjZi05YjhmMGIzOGQ3ZGEvMS8zMjYxMzAz
NzNhMzUzNDYzMzEzYTMzMzgzMDM3M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzQz
NzMyMzczMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB
BwEB/wQTMBEwDwQCAAIwCQMHACoHVME4BzANBgkqhkiG9w0BAQsFAAOCAQEAT8vy
39b2ymoGdkB/KNUTKyS8ksPcb2qFFrSb6o9UP6KGhbpqORTLPBzV3JGYCz7Sdhbm
a4HAwKO2zhuYf8kFCMnyTETYkXuJqjXmCTXuE9p/fTv5S73OoUJyEWP1AHUbFsJA
EFdsadwY2GmLRoHPsnh61hn6uC7AgSISDtAeOZIaHBkvne/LsNppGyBnFsMj50Np
ZmEoApLJURj2dmkmHGi6YslAJZ+jjDKknuqXJl5cwcs5/DF+XfJEgu2qHEYjNJGG
WCZ57DLVenLlBEpPCzN7ZPot7/9/ufOlirAmbCd+My1Jy2pNC96rOaH5NPgy3hzH
cptmsabTRp9IS5jslQ==
-----END CERTIFICATE-----