Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c8a98346-6073-4789-bd98-b376750a1301/1/326130613a363034343a373830313a3a2f34382d3438203d3e20313939363832.roa
File:                     326130613a363034343a373830313a3a2f34382d3438203d3e20313939363832.roa (raw, json)
Hash identifier:          lSei+R6kq5iMDUPAP0txrP7EFNlvoMk/5Pzy3zGHoW4=
Subject key identifier:   42:78:C5:DE:CF:DA:90:35:A2:31:C8:6D:37:2E:87:FB:86:B5:A8:7B
Certificate issuer:       /CN=20F72F3CC9DF8FB0CAAB1063442537DE31C203A3
Certificate serial:       53BB7119BB96ABD307A0E80C681D34B2EDDB1C67
Authority key identifier: 20:F7:2F:3C:C9:DF:8F:B0:CA:AB:10:63:44:25:37:DE:31:C2:03:A3
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/20F72F3CC9DF8FB0CAAB1063442537DE31C203A3.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c8a98346-6073-4789-bd98-b376750a1301/1/326130613a363034343a373830313a3a2f34382d3438203d3e20313939363832.roa
Signing time:             Fri 02 Feb 2024 14:50:29 +0000
ROA not before:           Fri 02 Feb 2024 14:45:29 +0000
ROA not after:            Fri 31 Jan 2025 14:50:29 +0000
asID:                     199682
IP address blocks:        2a0a:6044:7801::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:bb:71:19:bb:96:ab:d3:07:a0:e8:0c:68:1d:34:b2:ed:db:1c:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20F72F3CC9DF8FB0CAAB1063442537DE31C203A3
        Validity
            Not Before: Feb  2 14:45:29 2024 GMT
            Not After : Jan 31 14:50:29 2025 GMT
        Subject: CN=4278C5DECFDA9035A231C86D372E87FB86B5A87B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:5e:04:1b:35:42:4e:ce:4c:0b:26:c1:1b:a7:
                    5a:eb:e6:5b:47:1c:7a:82:67:c7:fc:8b:5b:a5:1f:
                    0e:2a:80:d8:19:52:48:88:ad:cd:02:ee:78:7e:8b:
                    ba:a5:87:1e:cf:00:0c:5f:3e:24:e6:97:09:7d:4f:
                    d1:1f:70:a6:7c:1e:a8:9d:dc:bb:ce:7b:0a:a2:5f:
                    00:25:ca:34:ca:2c:e8:bf:00:c1:9e:50:35:2d:76:
                    01:ff:24:be:2e:d7:07:62:0f:41:e3:74:21:cc:8e:
                    72:44:b8:a1:d8:2e:9f:0a:e4:ff:e5:68:9b:09:d2:
                    be:20:d0:df:f0:51:ab:87:35:ff:77:f0:27:2c:4b:
                    8d:db:64:b2:f5:9c:9b:aa:b0:da:70:a3:09:d4:a3:
                    4d:8b:a3:8b:08:6a:28:3c:cd:94:dc:b6:b2:54:76:
                    e0:2a:b2:d8:e5:0b:01:78:b5:1b:a6:59:52:fc:7f:
                    66:6e:8a:f3:19:be:e7:09:db:59:8a:e9:dc:71:ed:
                    34:72:f4:88:f5:19:f4:a0:8a:6a:12:ed:e3:1a:69:
                    d1:fc:72:ec:a6:96:b5:18:5c:11:8d:ae:e0:58:3b:
                    33:9e:6f:c9:30:61:0c:d7:31:c1:c5:21:d6:a7:31:
                    05:f3:dd:b0:46:e6:4e:6b:9b:3e:41:e2:e9:83:53:
                    11:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:78:C5:DE:CF:DA:90:35:A2:31:C8:6D:37:2E:87:FB:86:B5:A8:7B
            X509v3 Authority Key Identifier:
                keyid:20:F7:2F:3C:C9:DF:8F:B0:CA:AB:10:63:44:25:37:DE:31:C2:03:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c8a98346-6073-4789-bd98-b376750a1301/1/20F72F3CC9DF8FB0CAAB1063442537DE31C203A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/20F72F3CC9DF8FB0CAAB1063442537DE31C203A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c8a98346-6073-4789-bd98-b376750a1301/1/326130613a363034343a373830313a3a2f34382d3438203d3e20313939363832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:7801::/48

    Signature Algorithm: sha256WithRSAEncryption
         43:6b:09:28:ae:d3:80:08:37:8a:a8:41:fb:0c:ac:a6:2f:63:
         d8:ff:ad:60:21:b0:52:a5:f4:55:6a:90:07:7a:04:9c:6d:fd:
         f5:67:47:42:39:2e:41:b8:2d:8b:a9:46:27:ed:89:e9:39:36:
         7f:ae:d3:98:40:99:b4:da:e1:b9:24:e1:4e:dd:a5:50:ab:78:
         bc:f9:f4:83:79:41:94:0d:66:41:b1:71:67:c3:3c:59:f3:0e:
         f3:4d:6a:af:8f:81:c0:81:12:5a:33:54:67:7e:88:6f:2e:e4:
         a7:84:19:8a:9b:88:1a:c2:f9:bf:68:9e:7e:da:ce:9a:8c:61:
         c2:b9:ca:9f:3b:0c:25:1d:80:fe:5d:e6:ee:9c:17:6e:33:af:
         c3:23:6c:d1:aa:b7:f0:d9:38:56:1d:e6:21:5c:1c:6a:01:78:
         94:32:a0:d3:ac:a3:12:ef:74:ea:89:bc:ba:66:09:bf:b5:63:
         4d:66:30:06:c3:5c:9d:8c:df:ce:d7:b2:6c:52:91:fb:18:ba:
         23:1a:ec:84:11:12:96:c1:02:79:72:99:ab:1f:27:29:ec:b4:
         cb:97:60:2a:cb:81:0d:0e:06:d0:58:ce:f2:c0:4b:e4:94:6a:
         ac:74:d7:77:c3:bd:b5:a9:77:7d:c7:1d:62:4c:d2:14:9f:71:
         26:ef:de:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----