Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/3/326131333a646638353a623130343a3a2f34382d3438203d3e20323136333234.roa
File:                     326131333a646638353a623130343a3a2f34382d3438203d3e20323136333234.roa (raw, json)
Hash identifier:          JoV/30CD/AoC+Ltyj4+eSSnACwfX2+nmEWHIVnAFHak=
Subject key identifier:   F5:D3:E1:6E:D5:48:53:BD:02:78:C8:6C:6E:13:B5:81:44:35:B9:D8
Certificate issuer:       /CN=40C5E16CC09D12B91FFDE58141213F2E82A6F498
Certificate serial:       41D5B35313CE080B411A74BBB9BBA4F0EF3E0B6E
Authority key identifier: 40:C5:E1:6C:C0:9D:12:B9:1F:FD:E5:81:41:21:3F:2E:82:A6:F4:98
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/40C5E16CC09D12B91FFDE58141213F2E82A6F498.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/3/326131333a646638353a623130343a3a2f34382d3438203d3e20323136333234.roa
Signing time:             Tue 19 Mar 2024 02:22:42 +0000
ROA not before:           Tue 19 Mar 2024 02:17:42 +0000
ROA not after:            Tue 18 Mar 2025 02:22:42 +0000
asID:                     216324
IP address blocks:        2a13:df85:b104::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:d5:b3:53:13:ce:08:0b:41:1a:74:bb:b9:bb:a4:f0:ef:3e:0b:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40C5E16CC09D12B91FFDE58141213F2E82A6F498
        Validity
            Not Before: Mar 19 02:17:42 2024 GMT
            Not After : Mar 18 02:22:42 2025 GMT
        Subject: CN=F5D3E16ED54853BD0278C86C6E13B5814435B9D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b3:96:95:53:a0:32:ca:1d:f2:31:14:f5:68:
                    37:da:e4:83:72:02:bc:62:c4:e5:25:5f:b1:a6:4c:
                    a9:9a:b2:57:4e:ee:8f:c9:99:5d:79:0b:97:a9:f4:
                    46:df:27:44:03:fa:c9:44:91:db:dc:84:45:93:70:
                    15:4b:b1:46:55:04:90:c0:fa:3d:42:a6:fd:34:70:
                    fb:88:e1:09:a0:68:c2:d7:20:38:43:98:76:74:96:
                    45:59:fc:7e:ee:3c:a8:d6:a4:08:19:9b:cd:e4:48:
                    66:c7:29:26:74:aa:84:6f:6a:02:19:fa:94:c8:4f:
                    76:57:cc:8c:02:5d:9c:47:d6:49:00:3b:df:11:80:
                    3b:bc:6e:5d:ec:f9:09:48:46:04:a4:4d:e5:1b:ff:
                    56:80:f5:31:3c:58:9a:9c:80:52:bb:f0:ff:c6:54:
                    ac:14:78:5d:db:c2:81:4f:53:50:1d:06:3e:33:a4:
                    de:d5:7e:c3:d2:b6:14:af:06:1f:c2:06:c5:c4:06:
                    80:1d:6e:73:ab:df:f9:b0:79:93:00:72:ee:ac:50:
                    ae:1e:6e:06:b8:43:ed:d8:79:0d:49:aa:b7:ee:a8:
                    a7:8c:58:ac:6b:7a:b6:1c:17:1b:07:51:0e:f3:3a:
                    84:94:7c:bb:82:b3:a4:43:d5:e9:22:a5:31:f7:f8:
                    64:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:D3:E1:6E:D5:48:53:BD:02:78:C8:6C:6E:13:B5:81:44:35:B9:D8
            X509v3 Authority Key Identifier:
                keyid:40:C5:E1:6C:C0:9D:12:B9:1F:FD:E5:81:41:21:3F:2E:82:A6:F4:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/3/40C5E16CC09D12B91FFDE58141213F2E82A6F498.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/40C5E16CC09D12B91FFDE58141213F2E82A6F498.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/3/326131333a646638353a623130343a3a2f34382d3438203d3e20323136333234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df85:b104::/48

    Signature Algorithm: sha256WithRSAEncryption
         38:8c:7f:ed:24:77:e7:51:6e:24:bc:3b:ce:30:e9:8a:3f:50:
         d5:4f:82:03:0a:57:a6:45:62:eb:d3:0b:d5:28:d1:eb:80:92:
         47:27:72:c6:31:86:57:20:73:5e:ed:3c:1d:ca:3f:24:55:03:
         1e:00:65:d0:f8:58:e8:5f:d7:21:5c:77:11:dd:cb:80:b1:0e:
         68:08:ba:78:82:38:50:cf:80:56:cc:61:5c:a6:d2:4e:80:f0:
         31:f2:a3:61:95:1b:83:06:55:3e:e2:2f:46:09:b0:8e:cc:0f:
         f4:47:d5:f3:52:1f:e0:20:12:83:a3:b4:dd:77:ad:93:41:b0:
         38:af:a7:10:1b:5b:46:2b:df:9c:f1:28:57:4f:0b:0e:05:4c:
         8d:e3:03:57:57:31:a8:b6:22:05:79:7b:39:de:47:08:98:37:
         d4:ae:40:fa:bb:46:ab:5e:7a:02:75:21:5a:fc:b4:95:e0:b4:
         3d:39:78:d9:ad:63:9a:47:0b:a0:0b:8d:43:d2:d2:46:40:79:
         61:80:94:93:77:7e:a4:77:df:2c:69:f1:2f:3d:3b:d5:a9:a8:
         3d:ab:ca:f8:ce:6d:99:a6:23:46:a3:6f:81:fb:d9:1b:3a:24:
         a8:2a:4f:23:73:d6:70:3f:d9:d3:d4:81:11:d9:ca:bb:33:47:
         e7:7c:64:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----