Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/3/326131333a646638353a623131353a3a2f34382d3438203d3e20323136333234.roa
File:                     326131333a646638353a623131353a3a2f34382d3438203d3e20323136333234.roa (raw, json)
Hash identifier:          XC5/QGXxYEc2bc9AfbJKyBGILqdizFzrIK/3sFRCITA=
Subject key identifier:   E3:9A:F9:C7:71:60:EC:4A:FE:8A:6F:17:B5:5F:32:6C:48:DB:70:4B
Certificate issuer:       /CN=40C5E16CC09D12B91FFDE58141213F2E82A6F498
Certificate serial:       7BAA66A8252290336BE5DB0FC368F2EDE707603A
Authority key identifier: 40:C5:E1:6C:C0:9D:12:B9:1F:FD:E5:81:41:21:3F:2E:82:A6:F4:98
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/40C5E16CC09D12B91FFDE58141213F2E82A6F498.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/3/326131333a646638353a623131353a3a2f34382d3438203d3e20323136333234.roa
Signing time:             Sat 16 Mar 2024 13:37:38 +0000
ROA not before:           Sat 16 Mar 2024 13:32:38 +0000
ROA not after:            Sat 15 Mar 2025 13:37:38 +0000
asID:                     216324
IP address blocks:        2a13:df85:b115::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:aa:66:a8:25:22:90:33:6b:e5:db:0f:c3:68:f2:ed:e7:07:60:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40C5E16CC09D12B91FFDE58141213F2E82A6F498
        Validity
            Not Before: Mar 16 13:32:38 2024 GMT
            Not After : Mar 15 13:37:38 2025 GMT
        Subject: CN=E39AF9C77160EC4AFE8A6F17B55F326C48DB704B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:40:cd:27:76:31:68:9c:c3:aa:35:d9:6f:ba:
                    c7:18:a6:4c:52:5b:be:a7:c0:4d:63:02:30:28:8f:
                    3f:ae:14:06:83:66:75:11:a3:d7:05:c1:ee:d5:d6:
                    d5:cb:12:c2:9c:e4:5e:fc:3c:79:90:a4:b3:24:52:
                    c1:26:f0:8d:3a:66:d8:5b:44:5a:ab:f2:b5:84:bc:
                    ba:24:f9:94:27:77:a8:e5:60:26:05:39:82:62:a0:
                    46:7b:be:45:bb:89:66:50:44:a2:d8:e4:3a:bb:05:
                    78:38:71:bc:24:a7:26:32:49:76:6a:24:dc:b8:fa:
                    17:fa:17:ec:41:9f:41:85:68:b1:38:1e:ae:16:34:
                    6e:74:35:73:23:15:63:88:59:8c:81:f1:12:15:d5:
                    5e:91:e1:a0:b4:a5:9d:fe:20:41:b0:80:eb:e1:f3:
                    79:5d:2a:d5:18:02:22:3a:bc:86:6d:ab:a0:92:3a:
                    1d:3c:20:c4:f7:12:7f:28:48:a7:cc:0e:f6:23:41:
                    09:64:14:70:d5:0c:df:5b:8d:e8:25:af:3e:95:f5:
                    31:7d:a5:52:4e:ec:fd:64:dd:c0:7c:67:10:6e:29:
                    99:20:95:9f:bd:95:35:8b:5e:7c:b6:00:17:eb:7d:
                    63:0b:88:9a:ad:41:1b:a9:70:c1:b2:ba:60:c6:d1:
                    1d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:9A:F9:C7:71:60:EC:4A:FE:8A:6F:17:B5:5F:32:6C:48:DB:70:4B
            X509v3 Authority Key Identifier:
                keyid:40:C5:E1:6C:C0:9D:12:B9:1F:FD:E5:81:41:21:3F:2E:82:A6:F4:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/3/40C5E16CC09D12B91FFDE58141213F2E82A6F498.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/40C5E16CC09D12B91FFDE58141213F2E82A6F498.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/3/326131333a646638353a623131353a3a2f34382d3438203d3e20323136333234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df85:b115::/48

    Signature Algorithm: sha256WithRSAEncryption
         4d:f2:a2:3f:a1:02:13:27:3d:c4:f4:7a:ea:84:f6:5f:06:2c:
         d5:d9:ed:18:91:55:e6:02:0e:c1:7f:93:fe:88:c8:12:25:d5:
         95:fc:7e:fc:9e:6c:11:58:5f:c8:84:95:6f:5e:f7:be:48:71:
         58:ed:90:c8:42:2e:06:57:93:50:10:14:71:7b:f3:58:4a:0a:
         7f:f7:75:53:ff:b1:da:cf:6c:2b:21:e6:a9:8a:34:fa:bc:f7:
         cc:56:c9:73:ac:c7:c8:d4:79:8f:e9:90:f7:e8:bd:aa:48:fa:
         f4:66:10:e6:ea:70:1a:7c:b3:42:42:bc:0d:e7:f8:0f:36:d3:
         41:a6:3f:a7:de:d4:c9:54:eb:4c:34:a4:db:09:a3:74:83:d6:
         22:73:6e:9b:96:c3:15:43:6d:01:59:af:17:4e:dd:23:93:d5:
         99:c1:dd:e7:1b:54:0f:64:a0:21:e8:47:f3:53:c5:57:df:1a:
         43:a1:b0:c5:ee:89:7e:1f:ab:ac:37:be:e7:cc:fc:81:3b:60:
         3a:85:5d:a1:07:0a:22:36:c7:c8:ac:f8:06:3b:fa:5d:be:c3:
         92:1e:f0:e4:20:37:8c:05:75:e0:2d:9e:b2:e5:14:3b:92:9d:
         0c:41:03:7c:4c:f4:ac:0f:ad:a7:d5:6c:f1:21:5b:5e:fb:b9:
         59:f9:da:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----