Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/3/326131333a646638353a623130323a3a2f34382d3438203d3e20323136333234.roa
File:                     326131333a646638353a623130323a3a2f34382d3438203d3e20323136333234.roa (raw, json)
Hash identifier:          fGy54DCrJR3zAtEC6P6IAr4KerntLkTXFW1Ie00702E=
Subject key identifier:   36:49:D0:2A:9E:17:E1:AA:25:5F:9E:5F:99:02:65:64:87:8D:91:42
Certificate issuer:       /CN=40C5E16CC09D12B91FFDE58141213F2E82A6F498
Certificate serial:       498698EBA8B6E81857AFBAE6652E38FEB3CF8D9D
Authority key identifier: 40:C5:E1:6C:C0:9D:12:B9:1F:FD:E5:81:41:21:3F:2E:82:A6:F4:98
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/40C5E16CC09D12B91FFDE58141213F2E82A6F498.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/3/326131333a646638353a623130323a3a2f34382d3438203d3e20323136333234.roa
Signing time:             Sat 16 Mar 2024 13:35:27 +0000
ROA not before:           Sat 16 Mar 2024 13:30:27 +0000
ROA not after:            Sat 15 Mar 2025 13:35:27 +0000
asID:                     216324
IP address blocks:        2a13:df85:b102::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:86:98:eb:a8:b6:e8:18:57:af:ba:e6:65:2e:38:fe:b3:cf:8d:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40C5E16CC09D12B91FFDE58141213F2E82A6F498
        Validity
            Not Before: Mar 16 13:30:27 2024 GMT
            Not After : Mar 15 13:35:27 2025 GMT
        Subject: CN=3649D02A9E17E1AA255F9E5F99026564878D9142
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:81:12:79:59:b8:a6:e1:78:42:60:42:bc:e7:
                    26:37:5b:a9:9d:b1:6e:76:1d:b4:52:e9:6a:2a:8b:
                    2a:17:83:17:a0:83:18:7b:17:b0:11:85:cf:44:73:
                    62:e8:7a:1e:36:1c:4c:48:a2:40:c8:0b:da:f6:08:
                    86:f1:82:6b:52:ee:80:cd:98:ae:c8:3a:0b:41:a0:
                    2c:07:4b:5e:1e:63:fd:81:cf:14:80:da:08:e1:21:
                    80:97:d0:2b:43:32:b4:e1:80:c3:0c:3b:70:96:be:
                    d8:0b:f5:ea:a3:64:dd:e0:87:80:3a:5c:a7:d8:43:
                    3a:6e:55:0a:30:ca:43:a1:6c:dc:6f:6f:2f:1e:9c:
                    08:6c:93:78:eb:35:31:f6:14:c5:93:1c:d5:10:c7:
                    54:87:0c:90:0c:c0:04:d4:91:0e:39:70:cd:56:8f:
                    2e:c5:ef:17:c2:00:0e:d6:21:24:ba:b7:d6:f3:42:
                    3b:27:72:d3:1e:ce:dd:a8:5e:99:f5:e5:13:f7:03:
                    5e:b3:4e:83:d2:04:06:7c:54:6d:a1:3a:1f:32:f1:
                    91:6c:2e:51:3f:40:94:4b:56:49:be:68:18:32:f5:
                    90:b5:3d:e2:d7:0b:9b:79:1f:2c:85:34:d3:5d:f4:
                    11:50:1b:09:47:a2:d8:d6:48:39:1c:37:32:8a:11:
                    88:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:49:D0:2A:9E:17:E1:AA:25:5F:9E:5F:99:02:65:64:87:8D:91:42
            X509v3 Authority Key Identifier:
                keyid:40:C5:E1:6C:C0:9D:12:B9:1F:FD:E5:81:41:21:3F:2E:82:A6:F4:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/3/40C5E16CC09D12B91FFDE58141213F2E82A6F498.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/40C5E16CC09D12B91FFDE58141213F2E82A6F498.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/3/326131333a646638353a623130323a3a2f34382d3438203d3e20323136333234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df85:b102::/48

    Signature Algorithm: sha256WithRSAEncryption
         6e:9c:26:1c:d2:7b:38:0d:32:b7:c7:17:b9:bf:1f:31:37:58:
         4a:0b:57:a8:59:34:25:6b:5a:6b:6f:7d:cd:ce:45:e1:ed:12:
         61:ec:ff:ad:ce:04:41:a2:7c:4e:c8:98:45:72:3a:78:41:3c:
         37:ed:18:86:ae:e0:c2:42:75:16:9a:79:e6:66:61:5d:96:2b:
         56:c3:40:df:36:2b:fa:b2:4c:93:a0:f8:40:8a:4b:fc:e3:1f:
         a6:bf:23:d5:e6:2e:a4:ec:e1:94:43:15:c9:fb:19:53:6d:3d:
         13:a7:9e:9f:3e:98:ff:b3:5d:db:6b:9f:73:8f:56:0e:08:56:
         e6:78:d2:7f:82:20:dd:70:56:e3:92:b6:0e:50:dd:49:01:bf:
         a8:05:8e:64:d1:b5:4e:36:ba:fc:1d:89:00:a0:5e:58:1f:09:
         4f:f8:7d:a6:37:ee:27:fb:7f:ef:74:6b:99:b9:4f:94:ca:2a:
         c2:46:41:34:21:da:1f:40:bc:ad:f1:68:19:31:d2:14:74:3a:
         d9:8f:41:43:db:18:54:be:81:e5:48:d1:71:59:7c:3f:05:8a:
         15:f6:78:f5:70:8e:c3:47:2f:56:e3:bb:fd:76:06:c7:93:c9:
         38:45:1e:e1:16:7e:d8:50:5e:12:6a:3c:ce:b2:b1:1f:88:8d:
         c6:a5:a0:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----