Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/3/326131333a646638353a623131313a3a2f34382d3438203d3e20323136333234.roa
File:                     326131333a646638353a623131313a3a2f34382d3438203d3e20323136333234.roa (raw, json)
Hash identifier:          VyP6586KFb8njxjy+0sF9z65qQhByIhXdjDSEM/6qXI=
Subject key identifier:   17:B5:49:D4:B5:00:13:89:DE:E1:93:2A:D3:2D:30:6C:22:28:59:61
Certificate issuer:       /CN=40C5E16CC09D12B91FFDE58141213F2E82A6F498
Certificate serial:       0300A47868D4E046A4464F103B68837C4AC5B2D0
Authority key identifier: 40:C5:E1:6C:C0:9D:12:B9:1F:FD:E5:81:41:21:3F:2E:82:A6:F4:98
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/40C5E16CC09D12B91FFDE58141213F2E82A6F498.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/3/326131333a646638353a623131313a3a2f34382d3438203d3e20323136333234.roa
Signing time:             Sat 16 Mar 2024 13:36:50 +0000
ROA not before:           Sat 16 Mar 2024 13:31:50 +0000
ROA not after:            Sat 15 Mar 2025 13:36:50 +0000
asID:                     216324
IP address blocks:        2a13:df85:b111::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:00:a4:78:68:d4:e0:46:a4:46:4f:10:3b:68:83:7c:4a:c5:b2:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40C5E16CC09D12B91FFDE58141213F2E82A6F498
        Validity
            Not Before: Mar 16 13:31:50 2024 GMT
            Not After : Mar 15 13:36:50 2025 GMT
        Subject: CN=17B549D4B5001389DEE1932AD32D306C22285961
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:eb:e3:4a:51:8b:64:23:ca:64:92:00:65:b8:
                    64:85:1b:d0:db:a4:2a:51:00:70:c7:95:ff:60:ad:
                    e0:86:25:45:20:e3:a1:c8:ea:90:54:27:8d:32:d5:
                    af:16:fe:8c:76:04:24:a6:23:f0:30:8a:9f:c4:05:
                    a6:8d:ef:61:be:ee:62:c0:ab:f1:6d:c7:7e:ae:80:
                    c2:c4:ef:95:d6:e5:7e:8e:bb:00:1a:06:0f:e1:83:
                    e6:73:36:21:16:ed:0b:e1:73:69:b4:dc:cc:83:58:
                    28:13:28:f7:fc:bf:e3:a2:bb:02:f7:64:e8:c1:dd:
                    05:0b:fc:09:6f:e3:35:93:05:2a:a4:22:68:69:55:
                    31:6a:74:0e:bb:56:76:4f:7f:2a:15:9e:39:47:32:
                    f5:32:63:e0:07:77:bf:86:17:cf:2e:01:ce:70:0d:
                    3d:5a:a7:19:52:99:64:ae:9b:3c:61:4a:1b:03:af:
                    dd:a8:13:a4:55:e9:82:1f:9a:f0:ac:8c:d7:b0:59:
                    49:9f:9d:cd:3c:54:5b:2b:72:56:c3:31:21:10:93:
                    73:43:0a:cf:bc:63:02:49:92:5d:76:f0:84:29:88:
                    5b:cd:47:dc:60:9a:01:b8:47:f9:bc:cf:1b:da:b8:
                    fb:3d:05:f5:5a:ed:d4:87:2c:ae:f6:66:b8:80:9e:
                    4a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:B5:49:D4:B5:00:13:89:DE:E1:93:2A:D3:2D:30:6C:22:28:59:61
            X509v3 Authority Key Identifier:
                keyid:40:C5:E1:6C:C0:9D:12:B9:1F:FD:E5:81:41:21:3F:2E:82:A6:F4:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/3/40C5E16CC09D12B91FFDE58141213F2E82A6F498.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/40C5E16CC09D12B91FFDE58141213F2E82A6F498.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/3/326131333a646638353a623131313a3a2f34382d3438203d3e20323136333234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df85:b111::/48

    Signature Algorithm: sha256WithRSAEncryption
         5f:69:ed:b2:45:22:f8:14:61:45:26:2a:0d:42:3a:01:11:94:
         68:bb:2b:f7:82:24:21:61:10:e5:04:25:90:80:48:d3:90:b0:
         a8:2a:e6:7c:3a:37:72:69:d6:d7:83:39:23:25:79:3e:a8:e2:
         94:69:eb:87:dc:0d:c4:2b:33:1f:50:13:8b:c9:a4:e4:e9:18:
         cb:cb:18:11:9d:4f:c5:cf:ae:29:49:9a:fe:e0:18:e1:9a:89:
         31:dd:42:8d:c3:20:d6:c7:f7:bf:8c:82:d1:50:6f:23:92:dd:
         dc:78:3a:52:ce:1c:cc:38:01:e3:48:86:e6:58:8c:8b:46:74:
         01:4e:51:48:16:ec:b5:62:44:fb:08:ba:42:d4:b6:08:02:36:
         46:70:73:32:35:f0:e6:25:fb:d2:9b:56:87:a2:73:e4:b8:fe:
         f7:b7:76:c5:3d:c2:49:83:bf:78:98:21:84:4b:2c:7c:0d:02:
         fe:19:2e:bd:f8:56:1e:3d:1d:89:98:4c:ae:4e:8b:78:b1:bb:
         52:cf:89:f6:02:24:38:8b:f0:c1:1d:81:59:d8:a2:53:ca:a9:
         3d:ef:78:4f:a0:ad:c8:80:e8:a0:a7:0b:aa:0f:37:66:b7:2c:
         7a:2a:da:d1:df:02:cb:87:3b:bf:0d:c2:c1:2d:7c:86:d0:04:
         18:8e:ac:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----