Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/0/326130373a353463373a366630303a3a2f34302d3430203d3e20323136333630.roa
File:                     326130373a353463373a366630303a3a2f34302d3430203d3e20323136333630.roa (raw, json)
Hash identifier:          m1gpL5oDxsjPR0bMQ7WRI/0LdIMIbLL7cMqFdf6koh8=
Subject key identifier:   C0:26:88:01:43:DA:79:BF:F0:02:16:15:73:0C:60:BA:09:36:54:F0
Certificate issuer:       /CN=F1ABD9429F3A733668CAC698C113A9E343C99B3E
Certificate serial:       71826458B382425531BAD68342CC05BD8F25C57B
Authority key identifier: F1:AB:D9:42:9F:3A:73:36:68:CA:C6:98:C1:13:A9:E3:43:C9:9B:3E
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F1ABD9429F3A733668CAC698C113A9E343C99B3E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/0/326130373a353463373a366630303a3a2f34302d3430203d3e20323136333630.roa
Signing time:             Mon 04 Mar 2024 01:07:30 +0000
ROA not before:           Mon 04 Mar 2024 01:02:30 +0000
ROA not after:            Mon 03 Mar 2025 01:07:30 +0000
asID:                     216360
IP address blocks:        2a07:54c7:6f00::/40 maxlen: 40

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:82:64:58:b3:82:42:55:31:ba:d6:83:42:cc:05:bd:8f:25:c5:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1ABD9429F3A733668CAC698C113A9E343C99B3E
        Validity
            Not Before: Mar  4 01:02:30 2024 GMT
            Not After : Mar  3 01:07:30 2025 GMT
        Subject: CN=C026880143DA79BFF0021615730C60BA093654F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:5f:d4:5f:9f:08:33:4c:47:91:fb:07:89:79:
                    9a:93:fd:1e:35:a3:2d:cf:cc:26:2b:29:22:c2:54:
                    e9:64:ca:f2:0f:67:5e:ed:89:64:62:f6:7c:a8:13:
                    d1:7b:d3:30:df:ee:c1:94:1b:09:95:9d:8c:58:38:
                    c0:01:52:68:6a:63:3f:f9:7d:9e:3f:10:61:cf:6f:
                    98:1c:f9:f0:f5:ca:07:8a:ab:41:0d:ce:f8:52:89:
                    83:31:34:6b:c4:3e:54:e8:12:8c:0c:48:aa:af:53:
                    0f:1c:0c:80:df:60:93:13:da:61:16:d6:1c:7e:43:
                    74:c4:c8:5b:60:23:e0:e1:23:44:b6:47:04:2a:a5:
                    ed:30:a9:e9:82:e5:1b:93:a4:90:94:f3:39:08:df:
                    f3:64:67:94:6c:27:12:3a:c4:6a:fa:a8:49:4d:15:
                    ca:79:dd:9c:da:6b:66:dc:62:e9:12:f2:85:d7:63:
                    fa:f7:bd:31:7d:dc:1f:f1:73:fa:3f:b0:86:e6:e8:
                    61:ae:1c:9c:da:22:28:b2:b8:5b:4b:ca:5c:ae:00:
                    ef:61:2f:4f:e4:e4:2e:70:e4:39:1c:e5:58:5e:56:
                    fe:36:91:ff:a3:3a:4d:0c:c0:c4:bb:9d:7e:4b:c9:
                    d0:11:79:70:49:e2:60:38:0d:80:27:ce:50:29:ae:
                    0c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:26:88:01:43:DA:79:BF:F0:02:16:15:73:0C:60:BA:09:36:54:F0
            X509v3 Authority Key Identifier:
                keyid:F1:AB:D9:42:9F:3A:73:36:68:CA:C6:98:C1:13:A9:E3:43:C9:9B:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/0/F1ABD9429F3A733668CAC698C113A9E343C99B3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F1ABD9429F3A733668CAC698C113A9E343C99B3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/0/326130373a353463373a366630303a3a2f34302d3430203d3e20323136333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c7:6f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         2a:16:a1:fd:80:5e:e3:f7:a0:68:6a:18:91:14:ea:1b:69:5a:
         3f:be:39:7c:f5:79:a6:e1:54:e3:28:ac:37:7a:dd:b0:5b:b2:
         89:f6:63:22:de:7b:db:45:71:c1:93:2d:5e:d7:39:58:11:e6:
         a8:3e:96:90:f3:b3:29:af:42:96:7f:13:6f:25:f1:f0:d9:d6:
         d2:2f:45:5f:60:1d:a1:18:75:e9:96:a7:d1:a1:88:64:e7:ad:
         2a:eb:4d:76:e2:bb:9e:e9:af:f3:3b:5d:88:02:3d:d0:db:17:
         1d:d3:54:e0:43:bc:41:66:91:49:06:33:09:95:fc:53:d0:cd:
         f8:ff:b3:36:c9:d1:28:ff:e9:08:62:96:39:81:f3:2c:d5:49:
         85:2c:2a:8d:aa:14:a6:14:e5:dd:ca:c5:b9:ed:fb:64:b7:e9:
         1a:89:38:00:38:d2:14:21:d7:db:b6:fa:d6:bf:e8:af:86:4a:
         c0:0d:42:e6:30:ba:8e:f8:ac:0b:b4:73:54:69:bb:28:6b:43:
         d8:0c:f7:04:d9:f5:cb:2b:61:92:92:b2:00:7c:ff:be:9e:69:
         db:a5:c0:01:b4:85:c0:40:29:ec:c6:ba:4f:30:25:55:b4:ac:
         83:a4:e4:4d:c4:bf:da:50:99:33:95:32:87:3a:4a:f0:8b:5f:
         44:f3:4d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----