Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/3/326131333a646638353a623130393a3a2f34382d3438203d3e20323136333234.roa
File:                     326131333a646638353a623130393a3a2f34382d3438203d3e20323136333234.roa (raw, json)
Hash identifier:          85c+L40eljvXqkfoNkhEHGJ/HsIfQTD/KLD2izBUSAg=
Subject key identifier:   0D:E3:D8:3D:78:BC:91:6E:77:4D:86:E0:45:0D:98:45:DF:3C:53:88
Certificate issuer:       /CN=40C5E16CC09D12B91FFDE58141213F2E82A6F498
Certificate serial:       28426C225CFAE3A52A87CF668CF77F9B57E216D0
Authority key identifier: 40:C5:E1:6C:C0:9D:12:B9:1F:FD:E5:81:41:21:3F:2E:82:A6:F4:98
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/40C5E16CC09D12B91FFDE58141213F2E82A6F498.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/3/326131333a646638353a623130393a3a2f34382d3438203d3e20323136333234.roa
Signing time:             Sat 16 Mar 2024 13:36:21 +0000
ROA not before:           Sat 16 Mar 2024 13:31:21 +0000
ROA not after:            Sat 15 Mar 2025 13:36:21 +0000
asID:                     216324
IP address blocks:        2a13:df85:b109::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:42:6c:22:5c:fa:e3:a5:2a:87:cf:66:8c:f7:7f:9b:57:e2:16:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40C5E16CC09D12B91FFDE58141213F2E82A6F498
        Validity
            Not Before: Mar 16 13:31:21 2024 GMT
            Not After : Mar 15 13:36:21 2025 GMT
        Subject: CN=0DE3D83D78BC916E774D86E0450D9845DF3C5388
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:65:27:05:3c:00:b2:92:67:90:3a:2f:56:80:
                    97:0d:08:d6:7c:2d:b7:06:d6:4a:6f:bb:88:c7:96:
                    5f:99:19:6e:b2:8b:48:7c:47:a0:4c:9c:d0:bb:0f:
                    8d:cf:ea:c6:75:50:b1:09:f4:39:d0:09:0a:a2:40:
                    6a:cc:df:fc:ea:ac:e8:e4:c5:bc:94:d2:53:f3:fc:
                    81:4d:37:52:5b:38:85:5d:b3:3b:07:61:40:75:b3:
                    ad:aa:0c:12:c2:b1:02:7a:43:7e:6f:1e:9c:81:76:
                    ae:7d:2e:9a:95:4b:46:86:83:ff:50:63:17:15:91:
                    53:40:13:cb:c0:46:16:45:fa:fe:85:a9:c6:01:19:
                    27:18:4e:1b:6c:95:c7:37:0b:5b:ff:23:cc:6f:12:
                    d0:44:27:ae:ce:80:14:05:43:01:8c:2a:1f:b9:6b:
                    73:d6:df:30:51:9a:17:ea:ad:c3:e4:14:5e:b9:ce:
                    54:8d:2f:48:1a:42:aa:f3:b7:74:83:c7:37:c6:af:
                    2e:62:e7:e5:70:a8:d8:68:01:ac:4a:c0:8b:0c:97:
                    32:6d:3b:cc:a3:fd:cb:82:ef:2b:92:09:e5:24:e7:
                    7f:ff:d0:0a:10:42:09:9c:60:78:03:77:9c:a4:96:
                    35:80:d0:34:30:7a:d7:fc:c2:6d:df:5f:9e:64:65:
                    b9:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:E3:D8:3D:78:BC:91:6E:77:4D:86:E0:45:0D:98:45:DF:3C:53:88
            X509v3 Authority Key Identifier:
                keyid:40:C5:E1:6C:C0:9D:12:B9:1F:FD:E5:81:41:21:3F:2E:82:A6:F4:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/3/40C5E16CC09D12B91FFDE58141213F2E82A6F498.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/40C5E16CC09D12B91FFDE58141213F2E82A6F498.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/3/326131333a646638353a623130393a3a2f34382d3438203d3e20323136333234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df85:b109::/48

    Signature Algorithm: sha256WithRSAEncryption
         76:88:77:3a:45:59:65:55:e0:ca:81:75:99:bd:3e:ff:0d:fe:
         f5:52:c2:c2:07:2b:dd:24:6e:48:7f:29:5f:b5:82:46:ef:81:
         73:bd:2c:9e:bb:f1:66:2e:dc:02:c3:4a:de:d7:79:e5:93:a8:
         36:37:83:e4:ad:4f:cd:dd:7a:d9:5b:2c:a5:21:ad:5a:14:e5:
         25:6d:77:f6:1b:c4:85:86:96:5c:5a:9b:0d:bb:ed:d9:ad:ce:
         7f:49:bc:79:22:da:4b:81:45:7b:11:ba:bb:cf:41:3d:4b:f5:
         7b:71:c7:4f:e5:7f:41:93:e6:cb:47:07:00:61:09:a4:71:f2:
         e2:22:ac:33:70:1a:97:6f:b8:a9:59:3d:65:fe:e3:fb:f5:3d:
         47:b3:6b:39:ef:da:a3:b6:a6:65:98:ec:e2:01:47:f2:4a:50:
         04:72:09:dd:82:2c:62:c3:97:62:65:13:99:0c:89:cf:90:f6:
         48:51:3e:e2:44:81:75:3f:80:a4:cc:ed:a5:ed:84:ea:ab:ea:
         13:e4:63:4d:c8:90:27:44:4e:26:9e:63:31:74:5b:05:57:bb:
         25:7f:f3:31:ce:61:e1:b6:d8:50:72:2a:7a:df:65:43:ad:07:
         2b:22:91:63:08:12:19:30:7f:05:5f:45:4f:2d:6d:17:78:62:
         bb:2e:06:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----