Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/3/326131333a646638353a623131363a3a2f34382d3438203d3e20323136333234.roa
File:                     326131333a646638353a623131363a3a2f34382d3438203d3e20323136333234.roa (raw, json)
Hash identifier:          t49hq3psnJROxSocgBUm266PSkjI7KZBKSxKLwVG+PM=
Subject key identifier:   3F:A2:2C:FB:7F:4D:AB:F8:AE:E5:46:F2:02:B2:B5:EB:A2:0D:38:1B
Certificate issuer:       /CN=40C5E16CC09D12B91FFDE58141213F2E82A6F498
Certificate serial:       489D56BA8CBBF5B1150A4D7B1EBE80B00AD95955
Authority key identifier: 40:C5:E1:6C:C0:9D:12:B9:1F:FD:E5:81:41:21:3F:2E:82:A6:F4:98
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/40C5E16CC09D12B91FFDE58141213F2E82A6F498.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/3/326131333a646638353a623131363a3a2f34382d3438203d3e20323136333234.roa
Signing time:             Sat 16 Mar 2024 13:37:50 +0000
ROA not before:           Sat 16 Mar 2024 13:32:50 +0000
ROA not after:            Sat 15 Mar 2025 13:37:50 +0000
asID:                     216324
IP address blocks:        2a13:df85:b116::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:9d:56:ba:8c:bb:f5:b1:15:0a:4d:7b:1e:be:80:b0:0a:d9:59:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40C5E16CC09D12B91FFDE58141213F2E82A6F498
        Validity
            Not Before: Mar 16 13:32:50 2024 GMT
            Not After : Mar 15 13:37:50 2025 GMT
        Subject: CN=3FA22CFB7F4DABF8AEE546F202B2B5EBA20D381B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:dd:8e:0d:3f:66:0f:2d:0a:d8:b4:c4:d9:ea:
                    0b:16:87:91:f2:30:ee:82:84:b0:4b:59:91:01:f2:
                    75:b1:26:ff:50:de:80:0d:16:d2:95:f1:c5:e0:cc:
                    21:94:99:e4:21:6e:06:e1:2f:c6:af:66:2d:56:c0:
                    e1:b0:37:7d:24:ad:40:0c:cf:30:f6:9c:3d:0c:b1:
                    4b:12:eb:77:e3:a5:cd:94:93:83:5b:d5:53:dd:28:
                    b9:79:fb:3d:5b:ae:01:3b:de:b1:53:6d:da:f2:27:
                    26:c5:5e:ff:a2:20:21:70:d2:d5:71:ba:05:a9:e9:
                    0f:08:cd:a2:22:eb:a5:c7:31:c2:d2:50:57:00:5b:
                    23:30:ce:8e:f6:c0:31:53:09:79:5e:65:e5:1b:b1:
                    8b:46:57:e1:91:b6:a9:ee:b8:dc:dd:9b:18:e8:35:
                    6a:58:43:e4:4f:e4:5b:71:41:9b:f7:be:f9:63:8b:
                    4f:0b:c1:b5:ff:29:c6:e0:0a:64:ea:84:91:47:3e:
                    25:8e:c4:c9:0d:ab:b6:41:7e:3f:07:d4:42:a5:b6:
                    ed:ff:8d:72:79:b2:30:13:4b:e5:ae:06:7d:62:37:
                    a9:3d:bc:ba:61:4d:3c:68:f5:94:f5:c7:06:65:8d:
                    72:78:74:62:e9:e9:81:c4:66:fb:4e:0d:41:34:e3:
                    3c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:A2:2C:FB:7F:4D:AB:F8:AE:E5:46:F2:02:B2:B5:EB:A2:0D:38:1B
            X509v3 Authority Key Identifier:
                keyid:40:C5:E1:6C:C0:9D:12:B9:1F:FD:E5:81:41:21:3F:2E:82:A6:F4:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/3/40C5E16CC09D12B91FFDE58141213F2E82A6F498.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/40C5E16CC09D12B91FFDE58141213F2E82A6F498.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/3/326131333a646638353a623131363a3a2f34382d3438203d3e20323136333234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df85:b116::/48

    Signature Algorithm: sha256WithRSAEncryption
         1b:68:be:64:32:d1:21:2f:34:0b:7e:7a:f8:6a:57:92:15:0d:
         43:76:18:c8:3e:d9:2e:07:0f:1a:5d:aa:0a:ab:74:73:3a:eb:
         b2:86:33:49:ef:ff:e5:54:54:16:dd:0f:c0:3e:2f:e8:a5:87:
         cc:93:8d:b0:82:09:8f:5e:5e:03:45:de:2e:40:df:c6:88:f2:
         1e:c9:17:22:92:49:97:1c:7b:08:e6:36:52:50:1c:51:60:a5:
         dc:bc:f5:57:e5:ae:12:3a:63:5c:1d:d3:92:62:cb:00:4e:7f:
         5f:54:43:20:b0:c1:ac:2d:af:67:b3:49:71:fe:fb:71:76:11:
         5d:4f:34:24:53:56:85:5f:b1:d1:29:98:5c:3a:92:fa:13:e0:
         0c:5e:b3:67:d4:2b:48:78:e4:ad:4a:f6:7e:f8:64:e9:2f:b1:
         05:c2:14:f9:04:8d:4a:5f:30:94:17:4c:37:7d:5e:d2:f5:45:
         01:8d:66:fd:69:fb:c6:c4:f0:97:ce:8e:3d:b6:74:56:33:6a:
         93:15:39:ad:12:84:ce:13:68:d9:5e:f6:dd:55:de:36:38:f9:
         74:fe:c1:30:4a:19:06:df:14:06:6e:64:86:da:f7:d5:2f:7d:
         8d:d7:64:d1:7b:63:3f:9e:5f:44:d6:61:d2:b7:e1:fb:89:af:
         a4:ce:29:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----