Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/3/326131333a646638353a623132303a3a2f34382d3438203d3e20323136333234.roa
File:                     326131333a646638353a623132303a3a2f34382d3438203d3e20323136333234.roa (raw, json)
Hash identifier:          9S3AMMcvHSvFsMpw32/JV2IImAZr1pQZhaWs+ltvhn4=
Subject key identifier:   7A:38:E3:4F:E4:D5:06:D7:DD:08:87:35:0A:C1:C5:22:71:54:2D:E3
Certificate issuer:       /CN=40C5E16CC09D12B91FFDE58141213F2E82A6F498
Certificate serial:       2899032B577CF80456893F955334E55F9B8EF10E
Authority key identifier: 40:C5:E1:6C:C0:9D:12:B9:1F:FD:E5:81:41:21:3F:2E:82:A6:F4:98
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/40C5E16CC09D12B91FFDE58141213F2E82A6F498.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/3/326131333a646638353a623132303a3a2f34382d3438203d3e20323136333234.roa
Signing time:             Sat 16 Mar 2024 13:38:22 +0000
ROA not before:           Sat 16 Mar 2024 13:33:22 +0000
ROA not after:            Sat 15 Mar 2025 13:38:22 +0000
asID:                     216324
IP address blocks:        2a13:df85:b120::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:99:03:2b:57:7c:f8:04:56:89:3f:95:53:34:e5:5f:9b:8e:f1:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40C5E16CC09D12B91FFDE58141213F2E82A6F498
        Validity
            Not Before: Mar 16 13:33:22 2024 GMT
            Not After : Mar 15 13:38:22 2025 GMT
        Subject: CN=7A38E34FE4D506D7DD0887350AC1C52271542DE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f4:e9:a1:55:03:51:95:94:56:6e:6a:4e:1b:
                    7e:3d:4c:db:1a:08:e0:e4:42:27:55:19:9a:76:45:
                    d9:85:37:a8:83:10:7c:99:7d:85:95:b5:3b:0d:5c:
                    01:74:6b:30:65:8c:ea:2b:10:4e:2f:32:68:21:a0:
                    16:5c:66:26:f0:61:8f:7c:04:39:49:e0:b2:69:a9:
                    96:49:ff:3d:b4:1a:a9:26:47:c1:f2:58:6b:95:37:
                    69:c7:7e:fe:33:f0:43:57:1d:02:e1:9b:9c:63:dc:
                    64:1a:b6:62:6c:e9:5e:2a:28:d4:23:84:69:70:79:
                    d1:5f:4d:73:b6:7a:c0:28:cc:56:42:85:92:7b:49:
                    7f:00:76:fb:ca:a4:31:81:2b:19:5a:ad:15:b7:79:
                    9a:66:11:46:54:33:ce:eb:ac:4d:95:a8:bc:68:72:
                    a6:da:89:62:8e:7a:66:03:06:65:dc:7b:7d:64:96:
                    11:e6:f9:c0:7b:7d:6b:d3:f4:9b:53:a1:c3:f0:a4:
                    cd:6b:1d:ab:51:c6:45:23:6c:78:59:47:d2:bc:a1:
                    90:97:33:05:cb:89:2b:ef:68:a0:70:e2:ac:95:5d:
                    27:14:b2:d1:6c:ae:9c:db:c9:4f:73:89:7c:6b:06:
                    4a:13:58:26:46:d3:9e:c7:5a:1c:ae:57:9e:50:37:
                    44:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:38:E3:4F:E4:D5:06:D7:DD:08:87:35:0A:C1:C5:22:71:54:2D:E3
            X509v3 Authority Key Identifier:
                keyid:40:C5:E1:6C:C0:9D:12:B9:1F:FD:E5:81:41:21:3F:2E:82:A6:F4:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/3/40C5E16CC09D12B91FFDE58141213F2E82A6F498.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/40C5E16CC09D12B91FFDE58141213F2E82A6F498.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/3/326131333a646638353a623132303a3a2f34382d3438203d3e20323136333234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df85:b120::/48

    Signature Algorithm: sha256WithRSAEncryption
         28:9b:0a:40:9b:da:94:b9:df:2a:ea:ca:14:d7:57:ca:d6:4e:
         70:ac:02:5d:7d:12:a6:81:57:cc:34:1c:2b:74:58:bf:b7:93:
         2f:30:3e:b1:9c:f1:8a:e1:ac:c9:c1:dc:8d:bc:81:50:23:f5:
         56:d1:50:84:ea:27:f6:58:ca:c0:53:aa:79:ce:cf:7a:2f:28:
         40:ef:91:80:0f:5c:b5:f5:b3:37:5a:d8:2e:1f:cb:9b:24:f0:
         d0:26:5b:ee:67:31:a9:be:7d:e0:6a:95:cb:92:20:0c:66:34:
         f8:5c:ad:e3:ed:04:2e:d6:4b:f6:1c:b1:cd:ce:60:d0:78:95:
         9f:b9:5e:0d:23:59:bf:18:09:3c:73:5f:19:2f:e2:bf:02:0e:
         aa:7a:ad:b5:79:28:ec:b4:b7:c3:4b:47:41:8b:64:6a:8f:68:
         c9:29:88:0f:45:b8:bf:2b:2d:77:8e:4c:7a:26:f7:33:66:94:
         43:cd:67:89:61:96:7a:bc:09:7b:2b:f5:37:e7:19:d2:70:83:
         5c:ca:5f:15:0b:5f:28:5f:3b:ab:df:86:67:43:fc:4b:dd:6c:
         b8:63:57:c0:22:3b:c7:04:11:11:17:cc:9f:b6:19:e5:72:f2:
         8c:59:f8:5a:15:5e:91:5f:a6:05:4e:16:ff:be:45:3c:1c:66:
         13:0c:0e:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----