Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/3/326131333a646638353a623131343a3a2f34382d3438203d3e20323136333234.roa
File:                     326131333a646638353a623131343a3a2f34382d3438203d3e20323136333234.roa (raw, json)
Hash identifier:          n2WqicxMjrTVicShMR2qzHDv7OMcb5BUJ7jY9L3ylj4=
Subject key identifier:   1B:07:FB:F9:5B:48:6E:0F:57:60:6A:12:1F:8D:8E:63:24:FF:F8:E9
Certificate issuer:       /CN=40C5E16CC09D12B91FFDE58141213F2E82A6F498
Certificate serial:       30A2FC52A596C63253A1DF8559F6AA76D6A49563
Authority key identifier: 40:C5:E1:6C:C0:9D:12:B9:1F:FD:E5:81:41:21:3F:2E:82:A6:F4:98
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/40C5E16CC09D12B91FFDE58141213F2E82A6F498.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/3/326131333a646638353a623131343a3a2f34382d3438203d3e20323136333234.roa
Signing time:             Sat 16 Mar 2024 13:37:28 +0000
ROA not before:           Sat 16 Mar 2024 13:32:28 +0000
ROA not after:            Sat 15 Mar 2025 13:37:28 +0000
asID:                     216324
IP address blocks:        2a13:df85:b114::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:a2:fc:52:a5:96:c6:32:53:a1:df:85:59:f6:aa:76:d6:a4:95:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40C5E16CC09D12B91FFDE58141213F2E82A6F498
        Validity
            Not Before: Mar 16 13:32:28 2024 GMT
            Not After : Mar 15 13:37:28 2025 GMT
        Subject: CN=1B07FBF95B486E0F57606A121F8D8E6324FFF8E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:39:bf:47:28:6d:cf:db:ab:2e:b2:41:6d:7d:
                    15:6b:95:ca:16:5d:30:fc:bd:a4:50:17:a8:80:ce:
                    27:bc:88:81:8a:22:dc:7b:3b:56:b4:a5:86:da:b6:
                    84:bf:03:14:d2:76:ad:8c:b9:1f:80:78:80:c5:32:
                    89:86:f9:90:b6:16:25:de:0e:61:70:8f:aa:2e:be:
                    fa:e9:cc:67:54:d5:53:34:48:9b:9f:84:56:ea:95:
                    29:48:85:21:9c:ab:ba:b5:ac:1e:89:7e:18:5f:1d:
                    ed:b3:32:97:ed:58:5a:f1:a6:a7:60:4c:f3:fd:e6:
                    11:50:49:24:8f:3e:ce:98:4e:48:56:f2:34:75:28:
                    4c:12:e1:8c:b4:bd:78:9d:b6:e0:8a:68:bf:bb:af:
                    37:9b:b1:27:ff:be:e0:bd:ec:a1:d0:dd:2d:d8:07:
                    db:bf:0d:a8:af:d8:48:3e:c3:36:ae:73:1f:c0:da:
                    ab:4f:92:df:c0:2a:7a:10:11:f3:36:3d:ff:d8:7c:
                    d1:59:a0:cb:fe:c8:29:1d:9e:64:70:c7:c9:bd:79:
                    a4:3d:ae:e8:21:a2:aa:4e:83:49:54:ac:ca:a9:c9:
                    55:c6:e3:c3:5f:3f:e7:59:79:3b:9b:af:64:72:5b:
                    28:84:a5:ad:37:c0:db:e2:ca:3e:d0:ea:63:5e:4f:
                    84:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:07:FB:F9:5B:48:6E:0F:57:60:6A:12:1F:8D:8E:63:24:FF:F8:E9
            X509v3 Authority Key Identifier:
                keyid:40:C5:E1:6C:C0:9D:12:B9:1F:FD:E5:81:41:21:3F:2E:82:A6:F4:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/3/40C5E16CC09D12B91FFDE58141213F2E82A6F498.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/40C5E16CC09D12B91FFDE58141213F2E82A6F498.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/3/326131333a646638353a623131343a3a2f34382d3438203d3e20323136333234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df85:b114::/48

    Signature Algorithm: sha256WithRSAEncryption
         59:54:01:9d:6c:90:94:fa:9b:22:a9:d3:bb:1e:af:ee:42:52:
         02:a7:d7:5a:17:bf:c9:7d:90:ba:56:83:80:4c:32:48:6b:c6:
         a4:40:c8:67:bc:a1:94:a9:07:2a:b5:33:a6:70:3c:dc:21:55:
         c9:04:bb:cb:c3:39:02:84:c4:9c:58:fe:9e:76:06:77:67:c9:
         c9:83:0f:75:4c:5b:8c:a9:25:ba:5c:6c:7e:ed:ee:e6:df:71:
         43:31:b9:b9:86:3a:ae:92:b4:09:84:f2:30:e0:b9:d2:7c:27:
         89:ac:65:0d:03:5e:5a:a2:01:28:f2:80:0b:d5:6f:78:f2:a5:
         b8:4a:ad:ec:73:94:33:5a:ee:37:c9:6e:e9:0c:73:bc:bd:85:
         4a:c0:2a:63:16:17:47:07:39:10:70:20:b3:4c:05:5a:ac:d9:
         94:9e:3d:43:4f:c3:b3:99:da:5f:80:5f:73:ab:42:e8:56:65:
         4f:af:3d:57:7a:7a:b6:bd:a1:c9:27:f5:b6:0c:c8:10:45:f2:
         68:f0:16:b1:f7:d5:5c:c3:da:4c:63:62:4c:db:a8:8f:1c:a7:
         9f:cc:44:b2:58:74:6b:8c:89:f9:2b:9b:f4:36:25:17:ad:f6:
         4f:a0:eb:9f:b5:07:9b:42:ef:16:e4:04:6b:86:b7:87:eb:56:
         ba:00:f5:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----