Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/7/326131313a323963303a396562383a3a2f34362d3438203d3e203134363138.roa
File:                     326131313a323963303a396562383a3a2f34362d3438203d3e203134363138.roa (raw, json)
Hash identifier:          JXsI/Tf2TNOclsU3mkY1QZJtKXUVTmqqOU73P1xf4es=
Subject key identifier:   FB:E1:D1:0E:2E:80:AB:2A:88:29:59:57:99:2F:B6:93:07:74:7A:E2
Certificate issuer:       /CN=2C68D9AD77CBE389FA0C83BF07FB699791262CCA
Certificate serial:       49B3168FAFFE1C17B56EC9B1AAA85CCACEC1F120
Authority key identifier: 2C:68:D9:AD:77:CB:E3:89:FA:0C:83:BF:07:FB:69:97:91:26:2C:CA
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/2/2C68D9AD77CBE389FA0C83BF07FB699791262CCA.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/7/326131313a323963303a396562383a3a2f34362d3438203d3e203134363138.roa
Signing time:             Thu 23 Nov 2023 05:58:18 +0000
ROA not before:           Thu 23 Nov 2023 05:53:18 +0000
ROA not after:            Thu 21 Nov 2024 05:58:18 +0000
asID:                     14618
IP address blocks:        2a11:29c0:9eb8::/46 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:b3:16:8f:af:fe:1c:17:b5:6e:c9:b1:aa:a8:5c:ca:ce:c1:f1:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C68D9AD77CBE389FA0C83BF07FB699791262CCA
        Validity
            Not Before: Nov 23 05:53:18 2023 GMT
            Not After : Nov 21 05:58:18 2024 GMT
        Subject: CN=FBE1D10E2E80AB2A88295957992FB69307747AE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:bd:7b:cb:7e:1a:1a:4b:8c:3c:63:55:44:1a:
                    04:60:d8:d6:d7:8b:79:ae:d8:4c:1f:dd:96:09:a5:
                    38:76:71:99:bb:9d:bd:48:d7:1f:07:55:78:02:86:
                    80:cf:ef:92:ca:78:39:36:29:85:ce:9f:be:ae:cf:
                    64:8b:ed:3c:1b:e3:d3:49:7e:60:ae:ac:73:c2:8f:
                    2a:0f:63:14:d9:88:6b:7d:18:cc:04:b1:88:f5:c5:
                    da:51:2f:f8:b7:38:ea:db:84:41:4f:18:30:88:9b:
                    5f:c7:dc:fd:b3:fc:90:1e:f9:a3:b3:e4:34:5d:b2:
                    f0:72:46:f0:39:5a:a9:4f:c2:ba:46:da:2e:13:0c:
                    63:7e:00:ba:46:49:0a:95:b1:12:8a:f0:b1:87:31:
                    17:fa:67:b2:40:62:00:d9:2f:29:d0:fc:bb:6e:73:
                    64:c2:d4:27:5c:68:cb:e9:d7:73:c7:ae:d0:ac:1e:
                    ce:20:c1:22:41:6e:35:c5:e4:aa:98:8c:aa:c0:0f:
                    6c:62:b0:30:33:0d:13:5c:01:cc:c0:42:ee:a9:e8:
                    85:4d:43:4c:2a:c6:8e:af:41:b6:13:c7:b1:12:b3:
                    3a:99:49:f9:b4:01:0d:7b:81:82:08:0e:96:a2:6c:
                    8b:a6:cc:5c:7e:2e:b1:64:f8:f5:7e:c9:75:a5:5d:
                    c3:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:E1:D1:0E:2E:80:AB:2A:88:29:59:57:99:2F:B6:93:07:74:7A:E2
            X509v3 Authority Key Identifier:
                keyid:2C:68:D9:AD:77:CB:E3:89:FA:0C:83:BF:07:FB:69:97:91:26:2C:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/7/2C68D9AD77CBE389FA0C83BF07FB699791262CCA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/2/2C68D9AD77CBE389FA0C83BF07FB699791262CCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/7/326131313a323963303a396562383a3a2f34362d3438203d3e203134363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:29c0:9eb8::/46

    Signature Algorithm: sha256WithRSAEncryption
         19:fb:29:5a:c5:47:eb:1a:ed:53:36:cc:28:6b:d7:2e:6a:ac:
         65:e4:8d:6c:cb:0a:e6:00:33:44:93:fa:54:fc:e2:25:51:2f:
         e5:c5:df:c2:c4:d1:ec:d4:89:24:f7:18:30:26:46:a1:d0:68:
         81:38:95:de:60:5c:fa:c9:f2:89:3d:f7:e0:89:68:de:9f:48:
         a5:49:67:25:76:ee:1b:03:cd:62:ce:11:f4:51:01:f2:95:97:
         08:e8:77:ca:f9:3c:4c:9b:fe:22:dd:aa:59:be:5b:3e:8d:f4:
         ae:54:e4:ec:97:57:45:dc:2f:97:9e:17:bc:7d:3a:fa:12:0a:
         c7:b6:e0:1a:26:3e:a6:ce:85:ad:e7:c3:cc:ed:07:03:b8:4e:
         28:06:94:ed:78:80:21:c0:37:58:79:ae:46:96:9c:7f:cf:03:
         b7:f2:f9:bf:f9:e6:61:a7:ce:df:58:7f:f3:20:fa:de:37:12:
         f9:b5:23:6a:ff:26:a2:b7:64:ed:69:7f:2e:99:50:d9:50:e6:
         4f:07:f0:1e:ab:fc:ee:b7:b2:50:a5:e7:04:18:01:fd:7b:7e:
         a0:a3:02:7e:bc:53:32:37:f5:81:7b:cc:3f:16:2c:41:2c:ef:
         6b:8c:9e:f7:6e:97:1f:c4:16:ad:97:6f:33:ad:39:1a:e9:f2:
         b0:c1:6e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----