Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/2/326131313a323963303a393062323a3a2f34382d3438203d3e203437323732.roa
File:                     326131313a323963303a393062323a3a2f34382d3438203d3e203437323732.roa (raw, json)
Hash identifier:          xiefSJqG5Wm7HQ+uLi9YOTz6DoohQn5Wsu1t9gs0ELw=
Subject key identifier:   E8:C2:C1:54:EF:EE:27:AC:16:93:AF:B9:B2:2A:B7:54:B4:94:B1:E3
Certificate issuer:       /CN=CDC014669D381152AFB94B76936268BFF73E7D50
Certificate serial:       6CB1DE306A9C8C689E2E72EBC0331A793ECDDA33
Authority key identifier: CD:C0:14:66:9D:38:11:52:AF:B9:4B:76:93:62:68:BF:F7:3E:7D:50
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/CDC014669D381152AFB94B76936268BFF73E7D50.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/2/326131313a323963303a393062323a3a2f34382d3438203d3e203437323732.roa
Signing time:             Sun 26 Nov 2023 11:08:46 +0000
ROA not before:           Sun 26 Nov 2023 11:03:46 +0000
ROA not after:            Sun 24 Nov 2024 11:08:46 +0000
asID:                     47272
IP address blocks:        2a11:29c0:90b2::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:b1:de:30:6a:9c:8c:68:9e:2e:72:eb:c0:33:1a:79:3e:cd:da:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDC014669D381152AFB94B76936268BFF73E7D50
        Validity
            Not Before: Nov 26 11:03:46 2023 GMT
            Not After : Nov 24 11:08:46 2024 GMT
        Subject: CN=E8C2C154EFEE27AC1693AFB9B22AB754B494B1E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9d:84:6c:47:34:e3:49:f4:c5:b3:94:e8:f3:
                    5e:8d:8a:54:47:21:4a:1b:9c:38:e8:48:55:88:d9:
                    38:60:4e:aa:99:d4:5b:ed:5e:76:a4:14:c5:79:8d:
                    ed:49:25:ef:a4:7f:fa:c2:66:4d:5f:cf:99:ef:dc:
                    f8:68:40:bd:56:3d:d6:90:5f:ee:aa:47:6b:1b:1f:
                    6b:15:0f:f0:c1:fc:1d:f0:d4:b6:59:48:96:97:be:
                    80:7b:96:2e:81:ed:78:26:d2:71:a8:5c:e1:d8:4c:
                    32:61:a8:43:7d:54:3a:a6:72:0f:45:52:17:c2:95:
                    61:98:9a:24:57:b8:e5:0b:e9:d2:eb:6d:65:b8:da:
                    96:b2:f2:dd:6b:0c:50:ef:b0:f1:11:07:22:74:42:
                    c1:13:04:2f:98:1d:a5:99:a1:d1:17:3c:96:aa:2c:
                    e1:0b:e4:c8:2a:48:20:d9:51:d5:b5:18:ed:7f:f9:
                    1e:86:5d:5d:ed:94:1d:a1:c6:ef:41:c7:70:86:7e:
                    ab:9c:3a:72:d2:a2:43:e0:95:26:9e:cb:2e:27:4b:
                    64:64:44:8d:7f:8a:9b:1a:b2:30:40:6e:dd:79:eb:
                    30:e7:d7:32:d4:79:66:d1:ab:79:e5:2a:ec:d1:87:
                    51:9a:73:e0:eb:96:d9:19:c4:5e:ba:63:d1:f6:a9:
                    30:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:C2:C1:54:EF:EE:27:AC:16:93:AF:B9:B2:2A:B7:54:B4:94:B1:E3
            X509v3 Authority Key Identifier:
                keyid:CD:C0:14:66:9D:38:11:52:AF:B9:4B:76:93:62:68:BF:F7:3E:7D:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/2/CDC014669D381152AFB94B76936268BFF73E7D50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/CDC014669D381152AFB94B76936268BFF73E7D50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/2/326131313a323963303a393062323a3a2f34382d3438203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:29c0:90b2::/48

    Signature Algorithm: sha256WithRSAEncryption
         a0:b6:f8:c2:86:9d:2d:64:ff:8a:a0:1c:9e:a2:f6:3f:08:13:
         76:6e:b7:b5:b4:b6:0c:b4:3a:78:41:bf:51:0d:f3:bb:2c:81:
         ac:f1:9a:26:5a:aa:61:ee:f9:47:eb:03:a8:28:c1:b1:2c:a3:
         91:2f:f8:c5:1d:60:15:08:6e:5c:30:aa:01:64:f7:dd:c9:0f:
         d8:a6:cc:d0:96:12:67:6d:d9:0e:a5:db:d1:a2:62:c9:93:72:
         f7:36:7e:8b:17:fc:c9:ff:34:53:bb:e1:57:48:1f:fe:76:18:
         85:56:7f:4e:35:19:25:6f:3f:c2:bd:28:a3:75:f1:fb:9e:72:
         9b:ff:0c:03:cf:8a:03:2d:92:06:1e:ce:d8:4e:21:94:a9:b7:
         e4:68:68:a4:e4:02:a3:6b:0c:34:c1:2a:9f:84:08:ba:30:80:
         7f:90:26:60:b8:a3:92:58:26:29:8c:34:32:21:28:df:5f:b5:
         d8:e1:c6:69:2f:48:b5:89:ad:27:94:01:a3:ef:b8:d1:df:45:
         d7:10:30:ef:a1:1b:f9:bf:ef:52:20:52:ec:fe:14:78:5a:68:
         6a:32:92:57:61:99:12:dd:4f:f5:e3:5c:ac:06:65:ab:3f:c9:
         f6:a9:3c:32:2e:24:ae:d3:59:da:01:95:39:61:49:24:fe:ef:
         cf:03:1f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----