Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/2/326131313a323963303a393030323a3a2f34382d3438203d3e203437323732.roa
File:                     326131313a323963303a393030323a3a2f34382d3438203d3e203437323732.roa (raw, json)
Hash identifier:          wbesHq3jsPoNVlH0HlF4RaWiVLfTqViY9kNqSMUPuzM=
Subject key identifier:   DA:6C:6C:04:BD:5F:9C:D2:58:05:98:3C:6D:A2:5E:53:14:2E:1D:97
Certificate issuer:       /CN=CDC014669D381152AFB94B76936268BFF73E7D50
Certificate serial:       19E6019FDC34A29097D59E3F6F5E0B125368DE07
Authority key identifier: CD:C0:14:66:9D:38:11:52:AF:B9:4B:76:93:62:68:BF:F7:3E:7D:50
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/CDC014669D381152AFB94B76936268BFF73E7D50.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/2/326131313a323963303a393030323a3a2f34382d3438203d3e203437323732.roa
Signing time:             Sun 26 Nov 2023 11:08:46 +0000
ROA not before:           Sun 26 Nov 2023 11:03:46 +0000
ROA not after:            Sun 24 Nov 2024 11:08:46 +0000
asID:                     47272
IP address blocks:        2a11:29c0:9002::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:e6:01:9f:dc:34:a2:90:97:d5:9e:3f:6f:5e:0b:12:53:68:de:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDC014669D381152AFB94B76936268BFF73E7D50
        Validity
            Not Before: Nov 26 11:03:46 2023 GMT
            Not After : Nov 24 11:08:46 2024 GMT
        Subject: CN=DA6C6C04BD5F9CD25805983C6DA25E53142E1D97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:11:86:e6:76:12:a5:9b:39:82:96:a9:7c:3d:
                    88:3c:21:01:25:a8:74:27:0c:95:0a:2e:1e:e6:0c:
                    47:f1:58:b0:d6:24:ea:35:63:d4:41:05:5e:e9:87:
                    5f:5f:f4:7e:8c:bf:a1:cb:39:df:b1:8b:cb:86:32:
                    a9:8f:15:2e:f9:c1:ca:b6:f5:35:80:57:38:ae:91:
                    2a:17:0b:ae:8e:cc:9c:bd:f6:52:46:43:b6:9f:7f:
                    7d:57:37:6c:cc:51:51:c4:67:62:51:3c:69:d6:2e:
                    bf:ff:4b:d5:be:81:3f:62:4b:11:9b:69:c7:b9:07:
                    39:93:df:70:5d:aa:b9:27:5d:ce:35:e1:2f:2c:51:
                    03:d1:29:6a:d2:2b:ed:ee:f1:ac:2f:14:49:e5:c2:
                    a7:b3:5a:de:6b:f8:d6:5f:dc:8d:98:62:26:6b:63:
                    2c:b7:ea:10:b8:a8:ea:3e:de:51:0f:4e:bd:f3:27:
                    5c:cc:db:c5:f7:41:c7:bb:51:32:9c:ee:19:b8:3d:
                    bd:32:71:c3:f6:e6:aa:62:01:97:49:d9:cb:f1:e1:
                    d3:8f:17:b8:03:dc:b8:03:4d:b0:a2:b5:f0:fb:75:
                    ef:31:cd:c8:e1:a6:a1:de:1d:82:d2:34:58:c5:d5:
                    2a:a8:24:7a:40:50:28:79:80:2d:79:df:fe:33:c6:
                    4e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:6C:6C:04:BD:5F:9C:D2:58:05:98:3C:6D:A2:5E:53:14:2E:1D:97
            X509v3 Authority Key Identifier:
                keyid:CD:C0:14:66:9D:38:11:52:AF:B9:4B:76:93:62:68:BF:F7:3E:7D:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/2/CDC014669D381152AFB94B76936268BFF73E7D50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/CDC014669D381152AFB94B76936268BFF73E7D50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/2/326131313a323963303a393030323a3a2f34382d3438203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:29c0:9002::/48

    Signature Algorithm: sha256WithRSAEncryption
         65:25:93:dc:a5:48:43:14:32:ba:69:e5:be:ef:8c:2b:17:c3:
         19:a6:b1:3a:11:8f:24:3a:7a:95:9b:2c:ff:55:cc:91:50:99:
         61:6c:71:de:3c:57:84:ca:d0:64:e2:84:8f:4c:db:1b:cc:1d:
         7c:04:2b:36:c2:fc:c7:3a:54:4f:a7:b9:da:b6:f8:5d:33:35:
         91:2f:64:09:dd:8d:75:3b:fa:18:a0:fd:2e:10:bb:33:3d:e1:
         54:a5:18:8d:43:49:63:6c:dc:69:db:ad:d5:dd:af:95:de:16:
         f9:07:7d:52:f5:34:8d:23:c0:5c:6b:06:f6:10:2c:e2:03:0f:
         a8:1d:da:7c:2c:92:7b:e4:76:70:35:ca:cb:b2:1d:18:e5:0d:
         d5:f1:c3:ed:f3:7f:98:fb:41:f0:da:2c:72:70:ef:16:a1:34:
         41:8c:47:99:53:0c:97:dd:ac:2a:4e:aa:13:fb:1c:ce:eb:03:
         a0:d2:50:85:e5:32:46:d2:22:20:c3:a1:5b:4c:6e:2d:43:90:
         98:a2:03:f4:d8:f3:88:ce:41:a7:13:f7:09:84:61:f5:41:f6:
         dc:29:43:1e:fb:77:96:0a:c7:2d:f6:6b:a7:f4:bc:99:3f:51:
         a9:12:af:36:67:04:3d:61:40:ae:9d:64:f2:8d:ee:e0:40:06:
         1d:df:6c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----