Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/3/326131333a646638353a623130363a3a2f34382d3438203d3e20323136333234.roa
File:                     326131333a646638353a623130363a3a2f34382d3438203d3e20323136333234.roa (raw, json)
Hash identifier:          U2uA1r8Vz7I/w8yw6v8x2xsHVKwtzJTENpDrn8MWSBM=
Subject key identifier:   7A:30:38:A2:52:E3:55:D4:46:11:2A:EB:30:6D:E5:3E:22:75:F2:CB
Certificate issuer:       /CN=40C5E16CC09D12B91FFDE58141213F2E82A6F498
Certificate serial:       25C24F169116EAE03D40AA8D4DE29D8B5766465B
Authority key identifier: 40:C5:E1:6C:C0:9D:12:B9:1F:FD:E5:81:41:21:3F:2E:82:A6:F4:98
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/40C5E16CC09D12B91FFDE58141213F2E82A6F498.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/3/326131333a646638353a623130363a3a2f34382d3438203d3e20323136333234.roa
Signing time:             Sat 16 Mar 2024 13:35:50 +0000
ROA not before:           Sat 16 Mar 2024 13:30:50 +0000
ROA not after:            Sat 15 Mar 2025 13:35:50 +0000
asID:                     216324
IP address blocks:        2a13:df85:b106::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:c2:4f:16:91:16:ea:e0:3d:40:aa:8d:4d:e2:9d:8b:57:66:46:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40C5E16CC09D12B91FFDE58141213F2E82A6F498
        Validity
            Not Before: Mar 16 13:30:50 2024 GMT
            Not After : Mar 15 13:35:50 2025 GMT
        Subject: CN=7A3038A252E355D446112AEB306DE53E2275F2CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:8a:f4:0f:b2:1c:fb:42:f6:10:d9:94:a6:8d:
                    a7:78:ad:59:b1:56:8d:6b:24:9b:d8:e5:60:ed:80:
                    d7:01:78:70:71:52:56:92:3c:19:77:c0:99:16:08:
                    a1:1b:d0:b3:ee:6f:c8:af:bf:1d:0e:ed:6a:88:5b:
                    af:5d:37:df:0a:5f:e6:7d:11:ed:3a:16:ca:1f:41:
                    14:44:5a:59:dc:b9:a3:6f:1d:ce:4c:b1:15:af:f3:
                    76:79:1c:2d:50:a5:0d:2d:d4:d7:ea:2c:c8:4b:44:
                    74:d7:b5:b0:62:23:a7:8a:b5:14:89:81:79:67:40:
                    21:b2:8f:8e:c4:ae:8c:d6:d6:a3:c3:b4:f6:bd:b1:
                    5f:49:53:7f:c1:b2:26:a1:54:51:3f:aa:77:cd:3b:
                    ee:40:eb:29:a5:13:3c:26:2a:62:8d:89:e6:ca:76:
                    7a:a5:11:6e:8b:57:63:42:35:02:49:88:97:01:4a:
                    88:ea:61:ff:cb:6c:2b:e5:36:cb:60:fa:3e:44:99:
                    df:a7:ac:f7:34:5e:c0:18:8f:4e:a2:12:97:30:e3:
                    a0:19:dd:10:08:cf:ec:2f:9f:fa:8c:64:8a:8e:da:
                    56:ee:fa:91:62:ee:17:1b:40:84:7e:54:a4:f7:f6:
                    fa:8e:37:32:bc:82:14:52:e6:39:75:65:8e:0a:77:
                    a6:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:30:38:A2:52:E3:55:D4:46:11:2A:EB:30:6D:E5:3E:22:75:F2:CB
            X509v3 Authority Key Identifier:
                keyid:40:C5:E1:6C:C0:9D:12:B9:1F:FD:E5:81:41:21:3F:2E:82:A6:F4:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/3/40C5E16CC09D12B91FFDE58141213F2E82A6F498.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/40C5E16CC09D12B91FFDE58141213F2E82A6F498.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/3/326131333a646638353a623130363a3a2f34382d3438203d3e20323136333234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df85:b106::/48

    Signature Algorithm: sha256WithRSAEncryption
         ac:bb:e6:70:64:09:06:c0:40:8c:e3:6f:d7:4a:51:1f:a0:2a:
         ac:cf:a1:e6:b3:f0:f3:1c:af:cb:8f:4d:30:cb:c0:2c:8a:7c:
         55:0c:db:18:d8:56:05:0d:c6:96:1e:65:f2:5f:da:1c:2c:c3:
         71:4d:5b:ac:2b:9f:ba:1d:65:d9:c9:9a:2e:44:44:4a:87:33:
         1b:06:fc:40:d0:db:f3:24:4e:36:67:33:02:63:5a:ad:2d:27:
         3d:53:8c:7b:32:57:6a:fa:be:c1:3a:00:6f:bb:62:23:4c:c3:
         eb:d3:d3:70:de:ba:e4:91:5b:5d:ea:4b:d6:81:a5:ba:86:4c:
         7e:b9:00:fb:25:c7:f5:c5:c6:ee:f0:85:3c:bf:62:14:df:99:
         1b:be:c9:5e:d6:81:6a:7b:11:e0:25:95:90:a7:07:68:01:18:
         64:e2:be:43:31:80:d5:ac:77:68:24:03:29:76:34:66:2d:a8:
         a2:5f:8b:96:0a:01:3b:01:76:d9:7e:d0:6e:19:76:ec:5f:53:
         91:27:a8:d3:6c:b6:54:34:84:1d:86:80:e6:70:10:3e:c2:c9:
         42:af:63:d1:c3:e8:73:90:ae:24:83:1b:bd:29:79:f6:d4:0f:
         86:d3:19:66:11:85:22:10:71:5a:01:bb:5c:81:9e:2f:f9:72:
         ec:35:48:78
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUJcJPFpEW6uA9QKqNTeKdi1dmRlswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDBDNUUxNkNDMDlEMTJCOTFGRkRFNTgxNDEyMTNGMkU4
MkE2RjQ5ODAeFw0yNDAzMTYxMzMwNTBaFw0yNTAzMTUxMzM1NTBaMDMxMTAvBgNV
BAMTKDdBMzAzOEEyNTJFMzU1RDQ0NjExMkFFQjMwNkRFNTNFMjI3NUYyQ0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFivQPshz7QvYQ2ZSmjad4rVmx
Vo1rJJvY5WDtgNcBeHBxUlaSPBl3wJkWCKEb0LPub8ivvx0O7WqIW69dN98KX+Z9
Ee06FsofQRREWlncuaNvHc5MsRWv83Z5HC1QpQ0t1NfqLMhLRHTXtbBiI6eKtRSJ
gXlnQCGyj47ErozW1qPDtPa9sV9JU3/BsiahVFE/qnfNO+5A6ymlEzwmKmKNiebK
dnqlEW6LV2NCNQJJiJcBSojqYf/LbCvlNstg+j5Emd+nrPc0XsAYj06iEpcw46AZ
3RAIz+wvn/qMZIqO2lbu+pFi7hcbQIR+VKT39vqONzK8ghRS5jl1ZY4Kd6ZJAgMB
AAGjggKFMIICgTAdBgNVHQ4EFgQUejA4olLjVdRGESrrMG3lPiJ18sswHwYDVR0j
BBgwFoAUQMXhbMCdErkf/eWBQSE/LoKm9JgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjNkNWY2ODItYjUxYi00ODEyLWI4YjEtNDMwZTM4Njgz
NzQ4LzMvNDBDNUUxNkNDMDlEMTJCOTFGRkRFNTgxNDEyMTNGMkU4MkE2RjQ5OC5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wNDAzMmM4Zi0xZDU3LTRj
M2ItOTA0My1hMGU3ZmViZjE2N2QvMC80MEM1RTE2Q0MwOUQxMkI5MUZGREU1ODE0
MTIxM0YyRTgyQTZGNDk4LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS8yM2Q1ZjY4Mi1iNTFiLTQ4MTItYjhiMS00MzBlMzg2ODM3NDgvMy8zMjYxMzEz
MzNhNjQ2NjM4MzUzYTYyMzEzMDM2M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz
MTM2MzMzMjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAKhPfhbEGMA0GCSqGSIb3DQEBCwUAA4IBAQCs
u+ZwZAkGwECM42/XSlEfoCqsz6Hms/DzHK/Lj00wy8AsinxVDNsY2FYFDcaWHmXy
X9ocLMNxTVusK5+6HWXZyZouRERKhzMbBvxA0NvzJE42ZzMCY1qtLSc9U4x7Mldq
+r7BOgBvu2IjTMPr09Nw3rrkkVtd6kvWgaW6hkx+uQD7Jcf1xcbu8IU8v2IU35kb
vsle1oFqexHgJZWQpwdoARhk4r5DMYDVrHdoJAMpdjRmLaiiX4uWCgE7AXbZftBu
GXbsX1ORJ6jTbLZUNIQdhoDmcBA+wslCr2PRw+hzkK4kgxu9KXn21A+G0xlmEYUi
EHFaAbtcgZ4v+XLsNUh4
-----END CERTIFICATE-----