Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/3/326131333a646638353a623130383a3a2f34382d3438203d3e20323136333234.roa
File:                     326131333a646638353a623130383a3a2f34382d3438203d3e20323136333234.roa (raw, json)
Hash identifier:          gD7arhkSHEOjXegd5nEm1Lo3EkbqsXkr0sOkSW7Od2A=
Subject key identifier:   F1:5A:47:43:7F:72:4A:58:60:24:7D:35:67:2E:47:7B:B7:92:7F:39
Certificate issuer:       /CN=40C5E16CC09D12B91FFDE58141213F2E82A6F498
Certificate serial:       62F9DF7A975E8A92C7706CCF1A3A5B93AC4E4A35
Authority key identifier: 40:C5:E1:6C:C0:9D:12:B9:1F:FD:E5:81:41:21:3F:2E:82:A6:F4:98
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/40C5E16CC09D12B91FFDE58141213F2E82A6F498.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/3/326131333a646638353a623130383a3a2f34382d3438203d3e20323136333234.roa
Signing time:             Sat 16 Mar 2024 13:36:11 +0000
ROA not before:           Sat 16 Mar 2024 13:31:11 +0000
ROA not after:            Sat 15 Mar 2025 13:36:11 +0000
asID:                     216324
IP address blocks:        2a13:df85:b108::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:f9:df:7a:97:5e:8a:92:c7:70:6c:cf:1a:3a:5b:93:ac:4e:4a:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40C5E16CC09D12B91FFDE58141213F2E82A6F498
        Validity
            Not Before: Mar 16 13:31:11 2024 GMT
            Not After : Mar 15 13:36:11 2025 GMT
        Subject: CN=F15A47437F724A5860247D35672E477BB7927F39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:4e:51:85:73:b5:3b:33:74:4a:bb:4e:fc:c8:
                    e0:58:c1:f3:3c:8f:c6:c0:45:72:26:96:30:5c:af:
                    57:3f:e0:2f:89:32:71:03:d6:13:b7:28:3b:76:1e:
                    51:a7:d6:bb:eb:ad:56:2d:eb:81:2a:36:48:9c:6f:
                    be:1a:02:ad:cf:04:65:d6:08:d6:b1:7c:57:c5:41:
                    58:c0:a3:4f:68:16:6a:88:50:40:ca:17:ca:b8:aa:
                    31:d6:27:38:e1:cd:7e:d6:ec:63:37:01:a9:03:65:
                    00:20:c1:93:81:bc:23:52:52:8f:1a:11:54:71:59:
                    c9:e5:70:96:47:b8:be:7a:35:6d:20:32:40:dd:9a:
                    bc:b5:b9:c8:46:b7:07:ee:c4:67:dc:f0:30:ee:c1:
                    57:85:c8:bc:fb:d5:e3:f6:8e:b6:c7:75:e0:c9:52:
                    96:2f:ef:48:3c:a0:12:c1:1e:5a:48:ba:7c:9b:65:
                    34:de:1f:63:ab:53:2d:94:67:ca:f8:7d:6d:01:c5:
                    52:45:cb:64:d8:d4:6c:dc:3a:a5:16:d1:1d:46:39:
                    72:32:5c:85:fd:3a:be:1d:32:64:84:3e:78:33:9b:
                    d2:38:ad:3b:6c:82:5f:a9:0d:89:6a:36:52:6d:1a:
                    f4:bb:c6:84:04:90:72:29:5a:c3:51:eb:05:25:80:
                    25:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:5A:47:43:7F:72:4A:58:60:24:7D:35:67:2E:47:7B:B7:92:7F:39
            X509v3 Authority Key Identifier:
                keyid:40:C5:E1:6C:C0:9D:12:B9:1F:FD:E5:81:41:21:3F:2E:82:A6:F4:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/3/40C5E16CC09D12B91FFDE58141213F2E82A6F498.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/40C5E16CC09D12B91FFDE58141213F2E82A6F498.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/3/326131333a646638353a623130383a3a2f34382d3438203d3e20323136333234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df85:b108::/48

    Signature Algorithm: sha256WithRSAEncryption
         05:8f:17:34:be:2c:c3:0a:11:80:86:82:26:01:e1:91:46:7d:
         f6:04:b9:b1:c9:34:9e:27:e9:56:dd:e4:d9:dd:27:3a:76:5e:
         51:5d:21:77:41:39:93:92:9b:aa:28:75:3f:91:c5:e0:6b:8c:
         06:cc:f2:fa:40:64:80:81:d3:5c:b7:e8:86:c6:80:f9:8f:db:
         e5:24:44:43:9e:1c:46:51:ec:44:3b:b3:7a:09:99:d6:c8:3b:
         33:33:70:d5:6e:cd:ab:4e:c4:af:4a:33:40:e1:8d:2e:7a:f6:
         7c:4e:f6:ff:22:17:35:66:0e:15:6f:50:fa:65:94:38:91:2d:
         7e:66:1e:f7:30:ae:7f:4a:f8:2d:90:83:0c:f5:45:97:2f:6c:
         21:87:1a:23:fa:49:83:a1:c0:70:89:8b:b0:18:65:09:75:a1:
         2c:0c:6b:6e:b9:b8:7f:53:2b:c7:08:9d:c9:ad:c7:cb:d3:36:
         70:c3:3e:aa:d9:31:54:4b:7e:2d:1a:62:0e:e2:1f:fa:4a:f5:
         fb:e3:e6:47:45:22:78:49:b3:b1:f7:a8:f1:5e:5d:a7:44:c9:
         f4:a8:99:0b:f4:b1:0d:55:3e:6a:48:5f:b8:f5:de:66:0f:e4:
         bf:7f:df:35:33:fb:20:e9:06:2a:c1:c9:a7:76:6c:3e:ef:ca:
         47:53:69:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----