Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/3/326131333a646638353a623130333a3a2f34382d3438203d3e20323136333234.roa
File:                     326131333a646638353a623130333a3a2f34382d3438203d3e20323136333234.roa (raw, json)
Hash identifier:          Em9Z3b2i8AJ14Osmjop4LDPb/kVDmnbuAGa9T0fREbA=
Subject key identifier:   1C:16:CC:FE:29:2D:08:99:34:EF:65:AA:3E:D4:8D:33:F9:73:5B:74
Certificate issuer:       /CN=40C5E16CC09D12B91FFDE58141213F2E82A6F498
Certificate serial:       28820B4AA1134F6D08A2A4F79D4055822B63626E
Authority key identifier: 40:C5:E1:6C:C0:9D:12:B9:1F:FD:E5:81:41:21:3F:2E:82:A6:F4:98
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/40C5E16CC09D12B91FFDE58141213F2E82A6F498.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/3/326131333a646638353a623130333a3a2f34382d3438203d3e20323136333234.roa
Signing time:             Sat 16 Mar 2024 13:35:40 +0000
ROA not before:           Sat 16 Mar 2024 13:30:40 +0000
ROA not after:            Sat 15 Mar 2025 13:35:40 +0000
asID:                     216324
IP address blocks:        2a13:df85:b103::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:82:0b:4a:a1:13:4f:6d:08:a2:a4:f7:9d:40:55:82:2b:63:62:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40C5E16CC09D12B91FFDE58141213F2E82A6F498
        Validity
            Not Before: Mar 16 13:30:40 2024 GMT
            Not After : Mar 15 13:35:40 2025 GMT
        Subject: CN=1C16CCFE292D089934EF65AA3ED48D33F9735B74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5c:b6:54:46:c1:41:05:b8:14:31:d4:cb:dd:
                    fa:da:1d:be:7c:92:f7:2b:ec:71:63:12:56:03:ca:
                    5b:4c:26:25:5e:48:13:5c:cc:14:d7:81:3c:9f:42:
                    85:ca:07:54:03:3b:be:9d:0e:c1:af:f4:f1:4e:bf:
                    46:3b:4c:5f:f6:05:c5:2a:3f:a7:93:40:4d:5a:2a:
                    0e:42:27:8f:68:45:3e:5e:7e:58:b2:52:3a:ba:de:
                    11:c2:c6:de:52:9e:05:b6:fc:9c:77:71:d9:73:0e:
                    d5:f1:67:b5:1c:25:3d:5a:15:75:63:9c:1d:15:4c:
                    89:83:da:f7:19:d9:b4:35:5f:15:99:ad:55:ba:6a:
                    9a:57:d3:dd:12:8b:8c:d6:15:37:d2:c5:ab:c0:16:
                    6a:ad:31:ea:5d:3c:cb:ba:65:6b:73:d9:ef:2e:32:
                    a3:3b:f4:4c:e2:3f:60:98:6a:9b:a4:ca:83:9b:00:
                    d7:3b:2d:11:3b:cf:62:c8:f2:a1:39:8d:0a:e1:77:
                    cd:7f:00:39:47:72:68:3e:78:3d:ad:2a:fd:5a:b3:
                    38:a1:8f:e5:6d:4f:c4:1b:b7:12:93:2d:67:0c:06:
                    cc:9d:7a:cd:47:ce:e2:08:1c:93:ae:71:7a:b7:75:
                    53:c6:2a:18:4a:35:96:1e:11:ca:16:05:7b:3b:7f:
                    3a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:16:CC:FE:29:2D:08:99:34:EF:65:AA:3E:D4:8D:33:F9:73:5B:74
            X509v3 Authority Key Identifier:
                keyid:40:C5:E1:6C:C0:9D:12:B9:1F:FD:E5:81:41:21:3F:2E:82:A6:F4:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/3/40C5E16CC09D12B91FFDE58141213F2E82A6F498.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/40C5E16CC09D12B91FFDE58141213F2E82A6F498.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/3/326131333a646638353a623130333a3a2f34382d3438203d3e20323136333234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df85:b103::/48

    Signature Algorithm: sha256WithRSAEncryption
         51:70:60:aa:7b:e3:88:b4:23:07:f5:16:86:2b:bf:04:bf:71:
         60:a2:fe:72:88:20:db:0c:1c:c6:98:d6:6f:0a:73:20:ca:bf:
         ce:c9:ed:72:4d:e4:29:a1:45:0b:e3:69:07:e2:40:9f:96:34:
         fe:01:90:59:f5:0e:07:14:24:49:72:3a:3d:ae:35:87:a0:15:
         42:bc:74:52:05:28:d1:cc:13:03:30:f2:e3:15:c6:d7:4e:1e:
         de:9b:0a:6b:1d:5e:0e:04:0d:b3:95:9b:20:75:5c:e5:b9:45:
         d3:a3:68:49:1a:68:b4:00:2d:e6:c8:02:d9:81:ee:7c:dd:7b:
         48:1b:00:68:95:54:a3:83:80:d7:b8:71:a5:d4:04:a9:8c:13:
         d6:b3:df:7c:5e:89:87:78:0d:dd:b4:8e:4a:e2:64:a9:7e:a4:
         56:51:12:02:e7:ba:ba:95:62:4a:ba:5d:78:3e:1f:2a:51:91:
         e7:06:fd:29:54:74:e3:ab:1c:73:2c:8c:af:6e:83:bc:dc:f2:
         02:bc:6f:cd:77:bf:89:38:23:75:aa:27:cc:21:27:7c:f1:b8:
         54:30:0c:ce:cc:8a:67:84:39:01:f2:2a:16:ee:02:1b:a9:18:
         da:10:e2:6a:3e:1a:b5:a3:bf:9b:3d:f6:a5:92:4e:be:ce:0c:
         a0:ea:5f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----