Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/2/326131313a323963303a393030363a3a2f34382d3438203d3e203437323732.roa
File:                     326131313a323963303a393030363a3a2f34382d3438203d3e203437323732.roa (raw, json)
Hash identifier:          /xsQMPQi5JQz6V3GtFXjm870Ed44ZBd0TliepiXRchI=
Subject key identifier:   DE:59:2B:23:D8:1A:89:EF:A1:2F:9D:66:4A:7C:0A:74:02:56:65:D7
Certificate issuer:       /CN=CDC014669D381152AFB94B76936268BFF73E7D50
Certificate serial:       0E2F2D3A69AE4F6029F16996990D2A3B187E5D8C
Authority key identifier: CD:C0:14:66:9D:38:11:52:AF:B9:4B:76:93:62:68:BF:F7:3E:7D:50
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/CDC014669D381152AFB94B76936268BFF73E7D50.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/2/326131313a323963303a393030363a3a2f34382d3438203d3e203437323732.roa
Signing time:             Sun 26 Nov 2023 11:08:44 +0000
ROA not before:           Sun 26 Nov 2023 11:03:44 +0000
ROA not after:            Sun 24 Nov 2024 11:08:44 +0000
asID:                     47272
IP address blocks:        2a11:29c0:9006::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:2f:2d:3a:69:ae:4f:60:29:f1:69:96:99:0d:2a:3b:18:7e:5d:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDC014669D381152AFB94B76936268BFF73E7D50
        Validity
            Not Before: Nov 26 11:03:44 2023 GMT
            Not After : Nov 24 11:08:44 2024 GMT
        Subject: CN=DE592B23D81A89EFA12F9D664A7C0A74025665D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:0f:6b:be:80:51:a0:8d:46:2f:6e:38:46:00:
                    ba:4d:6f:33:a1:5d:bd:ef:d5:a9:fa:5a:cc:0f:e2:
                    e2:7e:30:96:18:2a:ce:77:6c:e4:89:af:65:c9:e3:
                    d6:d9:c3:95:8c:f1:fe:9c:13:f9:26:09:cb:9e:e0:
                    50:19:10:d8:91:68:a8:ab:f8:9d:03:7d:14:c6:ab:
                    61:13:a0:81:2d:bb:12:15:9f:bb:d7:6d:cd:ef:91:
                    47:dd:6a:32:f5:50:ae:01:d0:48:53:11:25:2e:b3:
                    8e:f7:3f:79:50:19:99:5f:68:ed:ac:97:b3:61:9c:
                    c4:25:ca:e9:7b:0c:2f:37:43:d9:dd:62:20:33:6c:
                    d7:77:cd:2c:a8:c8:6f:dc:04:bb:0a:20:10:d2:f4:
                    a0:34:a7:e5:ee:00:47:e8:b4:d7:e1:e9:88:09:64:
                    d8:fd:da:3c:fb:db:18:63:b1:b6:2a:7f:8b:5f:66:
                    0c:02:ed:9a:06:ce:00:6a:ef:7a:8b:84:f3:f1:5d:
                    c4:69:eb:f4:31:ce:f8:23:5a:19:7b:2a:b1:43:46:
                    0b:0b:ec:59:14:b4:d6:db:4c:8c:98:2c:1f:e8:ea:
                    d4:ac:82:bb:25:05:65:e7:30:ec:a0:c7:57:48:30:
                    9e:b1:bc:cf:1d:b2:c4:12:0b:ed:37:e3:6c:65:00:
                    1e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:59:2B:23:D8:1A:89:EF:A1:2F:9D:66:4A:7C:0A:74:02:56:65:D7
            X509v3 Authority Key Identifier:
                keyid:CD:C0:14:66:9D:38:11:52:AF:B9:4B:76:93:62:68:BF:F7:3E:7D:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/2/CDC014669D381152AFB94B76936268BFF73E7D50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/CDC014669D381152AFB94B76936268BFF73E7D50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/2/326131313a323963303a393030363a3a2f34382d3438203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:29c0:9006::/48

    Signature Algorithm: sha256WithRSAEncryption
         29:4f:74:eb:a6:8b:74:82:a1:8d:d4:18:62:f0:ca:f0:da:56:
         9a:6b:8f:41:d1:9d:f6:14:d2:c5:a3:f5:7f:5b:3d:d8:70:48:
         c5:7d:3e:3b:6d:37:10:9e:c5:0c:dd:7d:c7:e8:4b:94:94:53:
         c8:f2:47:fc:31:76:a3:e7:16:43:c9:4f:12:0d:72:0e:95:75:
         c6:a9:8b:ba:dd:31:c8:82:86:36:c4:e8:9d:83:f3:63:f8:8e:
         5f:8d:e3:ac:1f:85:b7:12:25:c0:dd:56:9c:de:e0:0d:4f:50:
         7b:74:e8:2a:af:d8:09:ed:da:23:6d:a1:ec:de:ac:82:7a:ca:
         6b:64:20:78:84:20:cf:58:75:01:6c:c4:20:1d:42:d0:00:3a:
         2c:0b:08:35:f6:b9:43:b0:2b:c2:7f:8f:f4:36:e2:aa:78:56:
         01:5e:65:6d:4c:3a:f5:89:23:06:40:c8:f3:d9:e6:ac:e2:58:
         77:ed:3a:fd:7e:df:90:8c:67:da:d9:39:5e:79:da:50:05:2a:
         15:e4:d4:53:9f:7b:d0:7c:48:2b:df:c5:32:42:a5:fa:6a:3e:
         7f:ec:5f:60:0a:bc:3e:2e:70:5b:40:b2:76:c0:f0:57:11:11:
         bc:3d:fd:5b:2b:60:13:a6:f9:54:89:34:13:fd:82:5a:b1:aa:
         e8:86:06:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----