Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/7/326131313a323963303a396562303a3a2f34342d3438203d3e20323033303639.roa
File:                     326131313a323963303a396562303a3a2f34342d3438203d3e20323033303639.roa (raw, json)
Hash identifier:          6183sIw9wws5ZNWgImgpIu//+lR8QUGwdl2AE38GKak=
Subject key identifier:   CA:A5:25:16:5A:00:18:94:54:24:C3:35:A9:FE:4D:87:08:2F:6E:49
Certificate issuer:       /CN=2C68D9AD77CBE389FA0C83BF07FB699791262CCA
Certificate serial:       3BCF5DBAC61D0E03329EE7E0CFB7DEA35DBDD89A
Authority key identifier: 2C:68:D9:AD:77:CB:E3:89:FA:0C:83:BF:07:FB:69:97:91:26:2C:CA
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/2/2C68D9AD77CBE389FA0C83BF07FB699791262CCA.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/7/326131313a323963303a396562303a3a2f34342d3438203d3e20323033303639.roa
Signing time:             Sun 22 Oct 2023 22:30:03 +0000
ROA not before:           Sun 22 Oct 2023 22:25:03 +0000
ROA not after:            Sun 20 Oct 2024 22:30:03 +0000
asID:                     203069
IP address blocks:        2a11:29c0:9eb0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:cf:5d:ba:c6:1d:0e:03:32:9e:e7:e0:cf:b7:de:a3:5d:bd:d8:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C68D9AD77CBE389FA0C83BF07FB699791262CCA
        Validity
            Not Before: Oct 22 22:25:03 2023 GMT
            Not After : Oct 20 22:30:03 2024 GMT
        Subject: CN=CAA525165A0018945424C335A9FE4D87082F6E49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:56:c3:d4:da:8c:3b:b0:9b:fd:5f:f1:cc:e0:
                    44:d1:b0:3e:ee:43:5d:35:51:29:7e:a0:78:ab:8c:
                    54:ad:f3:05:aa:ae:bd:be:33:f6:1d:4d:5d:ab:bf:
                    9b:31:ed:45:5c:eb:12:a0:2d:d5:e4:83:fa:10:1d:
                    4c:47:83:55:be:9b:aa:7e:cd:14:0b:01:d5:04:48:
                    ab:a6:58:a6:d0:e4:54:67:ac:c5:30:9a:bb:c1:70:
                    cd:c1:d6:14:56:cb:8c:25:fe:d8:40:c7:66:95:64:
                    4d:1c:fa:7e:1b:73:9b:59:fc:72:26:d5:1f:93:a9:
                    98:60:06:d6:6f:40:17:c8:68:89:2c:41:e7:0c:40:
                    dd:37:52:cb:10:1f:38:e9:16:07:1e:d9:c9:63:df:
                    d6:80:bc:ea:7f:d6:c4:31:36:0b:35:2b:89:9b:ad:
                    e8:21:66:8e:13:cd:94:ee:e0:8e:75:1e:b4:36:07:
                    4b:6d:d3:be:67:dc:39:bb:9a:85:f0:42:a1:38:5c:
                    7b:08:17:31:76:0e:cd:53:63:1b:97:5a:33:3f:8b:
                    b6:3f:ea:0c:f1:34:a3:6b:fd:17:f3:be:24:35:82:
                    fc:49:49:a9:4b:85:84:a7:6e:27:42:2a:10:ba:e5:
                    df:ee:59:70:fe:56:b2:de:58:26:4d:b8:7e:dc:a4:
                    87:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:A5:25:16:5A:00:18:94:54:24:C3:35:A9:FE:4D:87:08:2F:6E:49
            X509v3 Authority Key Identifier:
                keyid:2C:68:D9:AD:77:CB:E3:89:FA:0C:83:BF:07:FB:69:97:91:26:2C:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/7/2C68D9AD77CBE389FA0C83BF07FB699791262CCA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/2/2C68D9AD77CBE389FA0C83BF07FB699791262CCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/7/326131313a323963303a396562303a3a2f34342d3438203d3e20323033303639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:29c0:9eb0::/44

    Signature Algorithm: sha256WithRSAEncryption
         ab:28:3d:03:5e:49:fa:b1:67:f7:fa:a5:a2:ca:02:e1:c8:7b:
         d2:ca:d7:b1:af:db:b1:39:60:4c:80:d0:cd:22:ee:a3:09:2a:
         15:ee:3e:79:90:08:2e:8f:61:c8:2d:f1:3f:b7:ef:a6:34:dc:
         a3:9d:21:73:21:48:0e:1a:b5:af:c1:d9:45:d9:af:e5:48:11:
         5f:9e:ae:da:87:29:4b:be:9c:56:40:f7:8c:7d:cc:72:b9:eb:
         e6:97:3f:40:73:68:f7:d2:f6:de:a3:a1:1e:fe:96:e9:54:4c:
         fe:e1:38:1e:b6:44:2e:32:51:cb:44:1c:68:61:34:7d:01:13:
         3d:d5:22:fc:94:26:6a:9c:4d:e9:4c:c3:18:2b:8e:2f:93:7b:
         c8:b2:9f:e5:7c:ee:05:fc:7b:b3:70:76:dc:87:ab:52:97:84:
         9d:7a:6b:85:b0:9c:b6:bc:2e:fd:8d:96:68:96:08:c9:02:61:
         f9:fa:a4:92:a0:db:d3:2e:1f:8e:8c:32:d7:98:c9:f1:ab:95:
         47:fd:c4:70:bb:f6:cf:2e:df:b7:aa:57:62:e7:e7:d8:cf:37:
         1a:0f:b7:36:1a:ef:2d:06:8f:86:33:2f:25:27:c7:57:92:9d:
         ba:de:c3:4f:24:93:5d:f7:c2:a7:01:2e:92:43:6a:33:d7:6b:
         48:09:cf:99
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUO89dusYdDgMynufgz7feo1292JowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkM2OEQ5QUQ3N0NCRTM4OUZBMEM4M0JGMDdGQjY5OTc5
MTI2MkNDQTAeFw0yMzEwMjIyMjI1MDNaFw0yNDEwMjAyMjMwMDNaMDMxMTAvBgNV
BAMTKENBQTUyNTE2NUEwMDE4OTQ1NDI0QzMzNUE5RkU0RDg3MDgyRjZFNDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoVsPU2ow7sJv9X/HM4ETRsD7u
Q101USl+oHirjFSt8wWqrr2+M/YdTV2rv5sx7UVc6xKgLdXkg/oQHUxHg1W+m6p+
zRQLAdUESKumWKbQ5FRnrMUwmrvBcM3B1hRWy4wl/thAx2aVZE0c+n4bc5tZ/HIm
1R+TqZhgBtZvQBfIaIksQecMQN03UssQHzjpFgce2clj39aAvOp/1sQxNgs1K4mb
reghZo4TzZTu4I51HrQ2B0tt075n3Dm7moXwQqE4XHsIFzF2Ds1TYxuXWjM/i7Y/
6gzxNKNr/RfzviQ1gvxJSalLhYSnbidCKhC65d/uWXD+VrLeWCZNuH7cpIdrAgMB
AAGjggKFMIICgTAdBgNVHQ4EFgQUyqUlFloAGJRUJMM1qf5NhwgvbkkwHwYDVR0j
BBgwFoAULGjZrXfL44n6DIO/B/tpl5EmLMowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMWJmOGU5NzctNzI3OC00NmNmLWFiZDEtOTljZDFmZDJi
ZTRlLzcvMkM2OEQ5QUQ3N0NCRTM4OUZBMEM4M0JGMDdGQjY5OTc5MTI2MkNDQS5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iYzkwZjRmNi1mMmM0LTQ4
ODItOTFjZi05YjhmMGIzOGQ3ZGEvMi8yQzY4RDlBRDc3Q0JFMzg5RkEwQzgzQkYw
N0ZCNjk5NzkxMjYyQ0NBLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS8xYmY4ZTk3Ny03Mjc4LTQ2Y2YtYWJkMS05OWNkMWZkMmJlNGUvNy8zMjYxMzEz
MTNhMzIzOTYzMzAzYTM5NjU2MjMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzIz
MDMzMzAzNjM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcEKhEpwJ6wMA0GCSqGSIb3DQEBCwUAA4IBAQCr
KD0DXkn6sWf3+qWiygLhyHvSytexr9uxOWBMgNDNIu6jCSoV7j55kAguj2HILfE/
t++mNNyjnSFzIUgOGrWvwdlF2a/lSBFfnq7ahylLvpxWQPeMfcxyuevmlz9Ac2j3
0vbeo6Ee/pbpVEz+4TgetkQuMlHLRBxoYTR9ARM91SL8lCZqnE3pTMMYK44vk3vI
sp/lfO4F/HuzcHbch6tSl4SdemuFsJy2vC79jZZolgjJAmH5+qSSoNvTLh+OjDLX
mMnxq5VH/cRwu/bPLt+3qldi5+fYzzcaD7c2Gu8tBo+GMy8lJ8dXkp263sNPJJNd
98KnAS6SQ2oz12tICc+Z
-----END CERTIFICATE-----