Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/3/326131333a646638353a623131383a3a2f34382d3438203d3e20323136333234.roa
File:                     326131333a646638353a623131383a3a2f34382d3438203d3e20323136333234.roa (raw, json)
Hash identifier:          +ldtMhqtdgv/uVuSOOgwuyiHZtReaxrP8F4flTbWCAY=
Subject key identifier:   D7:9F:4A:7A:C1:B5:C8:78:3B:0C:0B:17:E1:A7:56:F6:4E:77:DE:E0
Certificate issuer:       /CN=40C5E16CC09D12B91FFDE58141213F2E82A6F498
Certificate serial:       042B3E4C0F4468468F17E9F4A563C5BB73C2B7F8
Authority key identifier: 40:C5:E1:6C:C0:9D:12:B9:1F:FD:E5:81:41:21:3F:2E:82:A6:F4:98
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/40C5E16CC09D12B91FFDE58141213F2E82A6F498.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/3/326131333a646638353a623131383a3a2f34382d3438203d3e20323136333234.roa
Signing time:             Wed 03 Apr 2024 17:55:06 +0000
ROA not before:           Wed 03 Apr 2024 17:50:06 +0000
ROA not after:            Wed 02 Apr 2025 17:55:06 +0000
asID:                     216324
IP address blocks:        2a13:df85:b118::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:2b:3e:4c:0f:44:68:46:8f:17:e9:f4:a5:63:c5:bb:73:c2:b7:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40C5E16CC09D12B91FFDE58141213F2E82A6F498
        Validity
            Not Before: Apr  3 17:50:06 2024 GMT
            Not After : Apr  2 17:55:06 2025 GMT
        Subject: CN=D79F4A7AC1B5C8783B0C0B17E1A756F64E77DEE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:55:b5:b8:9e:b2:23:e8:6b:cd:ee:80:fa:d9:
                    f8:41:5e:9d:e2:5b:03:c3:7f:c3:93:fd:67:1b:13:
                    d9:ee:cd:19:63:f8:14:d6:b1:36:bb:fc:d8:61:92:
                    0e:91:0e:f4:5e:8f:06:18:ee:c6:2c:6b:3c:6a:d7:
                    ea:45:c9:dc:53:ed:39:40:fb:e2:b6:92:06:6e:09:
                    77:e5:bf:78:c6:9c:44:5d:4c:52:43:db:d3:24:cd:
                    e4:d3:fc:66:15:a0:bb:60:4e:a8:b8:99:97:4d:4a:
                    25:1a:9d:49:65:0b:1e:53:54:67:53:da:e0:fa:da:
                    a6:40:9b:d2:b4:16:e7:56:04:53:86:d4:74:70:e0:
                    65:b8:eb:8d:42:21:56:89:11:0c:e5:39:ab:84:3c:
                    27:71:ca:b7:e8:a6:fd:4c:d7:ef:b6:47:75:0a:da:
                    ff:cc:1c:9e:15:cd:6f:a3:d3:42:b0:65:2d:65:72:
                    90:fc:33:f6:fd:29:1f:e4:2a:92:f7:fc:bf:da:1c:
                    5f:6d:1f:ab:0d:4c:c2:96:82:ba:9b:32:60:45:57:
                    4f:19:c6:cb:41:d5:7d:bf:cb:e2:0e:21:3c:4d:5e:
                    78:b4:75:c0:f5:43:80:8d:8e:f4:dd:db:bc:e6:fb:
                    ef:30:1e:63:4a:42:06:58:0a:25:33:be:ef:f1:1b:
                    a0:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:9F:4A:7A:C1:B5:C8:78:3B:0C:0B:17:E1:A7:56:F6:4E:77:DE:E0
            X509v3 Authority Key Identifier:
                keyid:40:C5:E1:6C:C0:9D:12:B9:1F:FD:E5:81:41:21:3F:2E:82:A6:F4:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/3/40C5E16CC09D12B91FFDE58141213F2E82A6F498.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/40C5E16CC09D12B91FFDE58141213F2E82A6F498.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/3/326131333a646638353a623131383a3a2f34382d3438203d3e20323136333234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df85:b118::/48

    Signature Algorithm: sha256WithRSAEncryption
         a1:74:95:c9:c8:0d:90:6c:99:dc:67:b1:bb:8e:1a:37:dd:14:
         66:6e:00:c1:96:f4:bc:f8:05:25:9d:0d:11:01:50:7b:98:c5:
         51:c3:87:eb:9f:3b:8e:72:f4:c5:ae:64:bb:7c:f8:40:a7:ec:
         9c:c6:b0:54:80:57:cf:88:f6:75:f0:b4:a8:e3:a5:96:51:df:
         95:45:da:16:3b:f2:d0:39:2b:26:24:84:eb:b8:14:f7:04:62:
         a8:00:ef:20:33:a5:1c:ec:5a:7d:81:21:f5:43:c5:fd:b3:a3:
         fb:77:02:43:b9:95:e7:f4:8c:5c:75:35:1b:b6:c4:03:a4:bc:
         9e:07:5a:c9:8c:60:4d:bd:c7:a7:76:95:bd:2c:5a:ed:d6:5d:
         c7:37:59:4f:92:57:80:86:a9:81:52:18:2b:9e:52:f4:39:89:
         12:af:97:b4:31:d2:7c:7a:4a:76:13:31:5d:1c:c9:df:92:03:
         b0:4c:fd:81:80:41:eb:97:fe:94:5b:13:7a:e3:d8:f1:02:88:
         62:2c:5c:a8:39:67:c0:37:fa:f3:50:26:83:36:92:7c:ed:b9:
         7a:0b:2f:bf:64:da:d9:d0:57:73:be:63:e1:7c:bb:ff:fa:b8:
         f3:7e:0d:05:81:ac:9f:3a:8e:1c:cc:8b:53:52:e1:ce:5d:59:
         cc:4d:ca:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----