Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/3/326131333a646638353a623131333a3a2f34382d3438203d3e20323136333234.roa
File:                     326131333a646638353a623131333a3a2f34382d3438203d3e20323136333234.roa (raw, json)
Hash identifier:          3LMuA304ttl46Brc/O1BY7CU6t73P9Omv4U+kta+iQ8=
Subject key identifier:   03:6C:FC:E3:70:37:2C:B9:0B:A7:1D:45:97:6C:2E:BC:4A:D7:9D:E8
Certificate issuer:       /CN=40C5E16CC09D12B91FFDE58141213F2E82A6F498
Certificate serial:       63E32964AB97EF76FB251AEBF33ACD0CF84B756D
Authority key identifier: 40:C5:E1:6C:C0:9D:12:B9:1F:FD:E5:81:41:21:3F:2E:82:A6:F4:98
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/40C5E16CC09D12B91FFDE58141213F2E82A6F498.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/3/326131333a646638353a623131333a3a2f34382d3438203d3e20323136333234.roa
Signing time:             Sat 16 Mar 2024 13:37:13 +0000
ROA not before:           Sat 16 Mar 2024 13:32:13 +0000
ROA not after:            Sat 15 Mar 2025 13:37:13 +0000
asID:                     216324
IP address blocks:        2a13:df85:b113::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:e3:29:64:ab:97:ef:76:fb:25:1a:eb:f3:3a:cd:0c:f8:4b:75:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40C5E16CC09D12B91FFDE58141213F2E82A6F498
        Validity
            Not Before: Mar 16 13:32:13 2024 GMT
            Not After : Mar 15 13:37:13 2025 GMT
        Subject: CN=036CFCE370372CB90BA71D45976C2EBC4AD79DE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3f:da:46:66:28:a2:6b:fb:a0:7b:4b:cb:3e:
                    7c:b1:ff:d3:0c:94:a6:f2:46:db:f4:eb:d5:06:18:
                    b3:d3:27:0b:89:ec:95:e1:34:b8:22:25:df:3e:52:
                    31:cd:dc:57:88:ba:3d:49:e9:2a:90:31:08:fc:af:
                    60:34:62:94:2e:87:74:ca:f6:fb:9f:b6:9f:6e:86:
                    5f:23:b1:5d:8c:09:49:c2:d2:b8:2f:3d:d0:07:94:
                    8f:13:85:97:da:a8:51:7e:d7:74:8f:2e:38:14:25:
                    9e:05:52:c4:fc:8a:76:55:e1:f6:7c:e5:cf:0e:af:
                    06:60:4c:55:ef:2d:fb:c8:bf:f3:a7:b7:02:a8:c4:
                    8d:73:3e:3c:13:c3:74:80:fd:7d:9d:81:08:9a:4e:
                    e0:ed:dc:1f:4e:7f:d1:19:3a:93:6b:c9:31:6d:98:
                    b2:07:d4:b6:b9:51:a0:10:97:d6:b5:8f:cc:99:7b:
                    7a:a5:b9:56:e2:3d:1f:13:34:8b:b8:21:f0:8e:48:
                    6d:32:d1:cf:0b:80:53:44:02:36:25:50:f4:82:17:
                    bf:7e:ed:d5:58:fa:6b:f1:a1:98:67:e8:62:22:f0:
                    8e:7c:4b:29:e5:31:eb:c0:8c:20:60:6f:a3:43:a8:
                    f1:8f:ea:a7:0c:9f:28:8a:25:35:75:4d:d3:56:f9:
                    2c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:6C:FC:E3:70:37:2C:B9:0B:A7:1D:45:97:6C:2E:BC:4A:D7:9D:E8
            X509v3 Authority Key Identifier:
                keyid:40:C5:E1:6C:C0:9D:12:B9:1F:FD:E5:81:41:21:3F:2E:82:A6:F4:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/3/40C5E16CC09D12B91FFDE58141213F2E82A6F498.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/40C5E16CC09D12B91FFDE58141213F2E82A6F498.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/3/326131333a646638353a623131333a3a2f34382d3438203d3e20323136333234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df85:b113::/48

    Signature Algorithm: sha256WithRSAEncryption
         a9:56:7c:c2:20:41:b4:ba:b2:c5:53:d6:7a:f7:13:bd:5e:c0:
         8a:3f:52:d2:50:02:73:9b:1d:18:a8:bd:fc:02:53:e3:dd:a4:
         9c:d6:fe:4f:13:08:08:12:83:74:cb:70:54:91:4a:8a:5f:a6:
         f5:f8:22:16:54:20:16:f8:d0:65:48:b2:ee:82:dc:11:a7:0b:
         c6:14:ff:c6:8f:9f:c0:f2:86:19:13:d9:03:42:25:21:37:fb:
         2c:7f:9c:f7:73:65:cc:47:97:67:f9:92:20:1d:dd:bf:b1:bd:
         88:a9:61:8f:9c:fe:f1:ac:7b:07:84:f8:de:47:82:75:e7:3f:
         fa:8a:59:05:66:0c:ad:fd:36:d5:8b:26:cf:a2:48:f8:61:35:
         79:10:25:fc:44:8c:94:ef:a5:09:b3:8c:0e:55:c2:50:81:95:
         ba:59:b9:33:f7:2e:b9:41:ea:94:20:d3:f4:f8:9f:23:a8:47:
         ea:e4:97:0a:a9:b5:47:6b:50:a2:16:ab:d7:9b:bd:37:f4:49:
         79:94:1e:f2:d3:7a:e3:ba:27:d4:dc:51:93:a0:36:17:db:84:
         5a:d4:f4:f5:a6:e5:f0:c4:b0:81:39:f8:62:31:bb:29:4a:a4:
         40:f4:17:a3:52:0c:48:cf:9a:3a:57:99:9b:23:42:e8:48:a3:
         ad:30:68:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----