Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/3/326131333a646638353a623131323a3a2f34382d3438203d3e20323136333234.roa
File:                     326131333a646638353a623131323a3a2f34382d3438203d3e20323136333234.roa (raw, json)
Hash identifier:          LGI+6JWWFApICDpWhidIsuMVegRDcyxn/lovRku0nDg=
Subject key identifier:   29:6D:8A:6A:95:3B:02:28:12:25:2D:58:FB:48:BB:5F:F8:71:C2:18
Certificate issuer:       /CN=40C5E16CC09D12B91FFDE58141213F2E82A6F498
Certificate serial:       1B4710411EDC6B28D3164D19EF71BFE3CFE8AACD
Authority key identifier: 40:C5:E1:6C:C0:9D:12:B9:1F:FD:E5:81:41:21:3F:2E:82:A6:F4:98
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/40C5E16CC09D12B91FFDE58141213F2E82A6F498.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/3/326131333a646638353a623131323a3a2f34382d3438203d3e20323136333234.roa
Signing time:             Sat 16 Mar 2024 13:37:02 +0000
ROA not before:           Sat 16 Mar 2024 13:32:02 +0000
ROA not after:            Sat 15 Mar 2025 13:37:02 +0000
asID:                     216324
IP address blocks:        2a13:df85:b112::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:47:10:41:1e:dc:6b:28:d3:16:4d:19:ef:71:bf:e3:cf:e8:aa:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40C5E16CC09D12B91FFDE58141213F2E82A6F498
        Validity
            Not Before: Mar 16 13:32:02 2024 GMT
            Not After : Mar 15 13:37:02 2025 GMT
        Subject: CN=296D8A6A953B022812252D58FB48BB5FF871C218
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3d:72:af:a4:69:da:ec:7b:90:98:18:e7:16:
                    9e:fc:3d:ae:25:c6:89:75:46:9e:7e:bf:5b:08:9e:
                    24:94:ef:f2:66:77:29:b3:61:a6:94:c7:bc:68:4c:
                    0a:89:2e:bf:47:2a:56:16:f3:a2:43:5a:c9:4a:d8:
                    6b:3b:5a:85:38:92:d3:b2:eb:cf:f6:e9:47:97:d0:
                    d8:77:40:08:c1:ab:0b:53:91:33:a5:93:62:47:a8:
                    9e:63:be:8a:f6:8f:96:73:0e:73:bb:9b:e2:9f:9a:
                    ed:2f:2d:6d:4b:11:c6:36:2b:4f:00:48:7c:c0:d2:
                    39:d9:93:6f:9c:5b:18:eb:b9:67:8a:c5:c2:11:ce:
                    16:a2:cd:20:5d:fc:e7:64:7f:2c:a2:7f:39:a7:63:
                    94:6b:e0:27:92:b7:e5:19:25:49:00:06:d5:d6:0a:
                    e7:cc:e5:cc:f2:9b:32:40:27:2a:66:89:7d:6d:9f:
                    b1:fd:55:45:d8:b0:9c:cb:63:de:59:2f:f7:ac:98:
                    00:9d:ca:bc:91:6a:8e:94:da:28:ac:88:08:5b:86:
                    1e:d3:58:cb:a5:76:87:bf:af:da:ad:24:f4:9e:61:
                    e2:76:ce:de:35:22:3f:8d:3a:41:03:c0:90:73:c3:
                    31:58:94:b1:ff:71:62:20:2c:09:e5:69:5c:47:e4:
                    4c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:6D:8A:6A:95:3B:02:28:12:25:2D:58:FB:48:BB:5F:F8:71:C2:18
            X509v3 Authority Key Identifier:
                keyid:40:C5:E1:6C:C0:9D:12:B9:1F:FD:E5:81:41:21:3F:2E:82:A6:F4:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/3/40C5E16CC09D12B91FFDE58141213F2E82A6F498.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/40C5E16CC09D12B91FFDE58141213F2E82A6F498.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/3/326131333a646638353a623131323a3a2f34382d3438203d3e20323136333234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df85:b112::/48

    Signature Algorithm: sha256WithRSAEncryption
         6a:1e:a5:db:45:35:3b:5f:7f:cb:67:8e:ea:2d:6f:80:86:ef:
         fe:58:09:8a:62:10:41:10:49:21:aa:08:89:57:55:13:68:33:
         9e:72:a6:77:6d:c3:73:07:48:60:d3:37:f2:04:01:ae:66:1f:
         da:39:05:c7:b4:33:94:43:2c:14:37:e0:17:12:6e:f9:c8:ac:
         0f:96:df:f1:cb:a4:31:2c:b7:25:22:71:fe:7d:bd:fb:89:70:
         89:b9:8f:24:3f:75:93:97:24:1f:3a:77:01:92:eb:29:3e:72:
         44:10:d0:34:47:ac:46:87:1a:66:fa:5b:90:06:00:56:87:2e:
         e3:9d:b7:cf:dd:6f:a1:c6:f6:13:b1:a2:59:ff:e6:c6:54:91:
         18:42:a0:e8:3b:71:47:97:17:33:53:0f:25:ba:2a:f2:1d:f2:
         88:a7:de:b7:ae:88:07:38:12:ff:3e:3a:91:12:88:ac:2f:14:
         7e:8b:10:ef:28:58:4e:f2:80:f3:d4:95:63:de:bf:e0:a6:c4:
         ff:af:a4:53:67:74:60:8c:95:bb:e3:7b:65:ae:37:e7:60:7e:
         c5:2c:bf:1c:d1:f1:8a:9b:1b:e6:dc:f6:fe:33:a2:d9:d3:ef:
         59:a6:e2:95:26:93:76:29:ce:ac:58:fb:2c:79:f1:31:f1:27:
         47:1b:79:51
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUG0cQQR7cayjTFk0Z73G/48/oqs0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDBDNUUxNkNDMDlEMTJCOTFGRkRFNTgxNDEyMTNGMkU4
MkE2RjQ5ODAeFw0yNDAzMTYxMzMyMDJaFw0yNTAzMTUxMzM3MDJaMDMxMTAvBgNV
BAMTKDI5NkQ4QTZBOTUzQjAyMjgxMjI1MkQ1OEZCNDhCQjVGRjg3MUMyMTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzPXKvpGna7HuQmBjnFp78Pa4l
xol1Rp5+v1sIniSU7/JmdymzYaaUx7xoTAqJLr9HKlYW86JDWslK2Gs7WoU4ktOy
68/26UeX0Nh3QAjBqwtTkTOlk2JHqJ5jvor2j5ZzDnO7m+Kfmu0vLW1LEcY2K08A
SHzA0jnZk2+cWxjruWeKxcIRzhaizSBd/OdkfyyifzmnY5Rr4CeSt+UZJUkABtXW
CufM5czymzJAJypmiX1tn7H9VUXYsJzLY95ZL/esmACdyryRao6U2iisiAhbhh7T
WMuldoe/r9qtJPSeYeJ2zt41Ij+NOkEDwJBzwzFYlLH/cWIgLAnlaVxH5ExTAgMB
AAGjggKFMIICgTAdBgNVHQ4EFgQUKW2KapU7AigSJS1Y+0i7X/hxwhgwHwYDVR0j
BBgwFoAUQMXhbMCdErkf/eWBQSE/LoKm9JgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjNkNWY2ODItYjUxYi00ODEyLWI4YjEtNDMwZTM4Njgz
NzQ4LzMvNDBDNUUxNkNDMDlEMTJCOTFGRkRFNTgxNDEyMTNGMkU4MkE2RjQ5OC5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wNDAzMmM4Zi0xZDU3LTRj
M2ItOTA0My1hMGU3ZmViZjE2N2QvMC80MEM1RTE2Q0MwOUQxMkI5MUZGREU1ODE0
MTIxM0YyRTgyQTZGNDk4LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS8yM2Q1ZjY4Mi1iNTFiLTQ4MTItYjhiMS00MzBlMzg2ODM3NDgvMy8zMjYxMzEz
MzNhNjQ2NjM4MzUzYTYyMzEzMTMyM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz
MTM2MzMzMjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAKhPfhbESMA0GCSqGSIb3DQEBCwUAA4IBAQBq
HqXbRTU7X3/LZ47qLW+Ahu/+WAmKYhBBEEkhqgiJV1UTaDOecqZ3bcNzB0hg0zfy
BAGuZh/aOQXHtDOUQywUN+AXEm75yKwPlt/xy6QxLLclInH+fb37iXCJuY8kP3WT
lyQfOncBkuspPnJEENA0R6xGhxpm+luQBgBWhy7jnbfP3W+hxvYTsaJZ/+bGVJEY
QqDoO3FHlxczUw8luiryHfKIp963rogHOBL/PjqREoisLxR+ixDvKFhO8oDz1JVj
3r/gpsT/r6RTZ3RgjJW743tlrjfnYH7FLL8c0fGKmxvm3Pb+M6LZ0+9ZpuKVJpN2
Kc6sWPssefEx8SdHG3lR
-----END CERTIFICATE-----