Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/2/326131313a323963303a393062353a3a2f34382d3438203d3e203437323732.roa
File:                     326131313a323963303a393062353a3a2f34382d3438203d3e203437323732.roa (raw, json)
Hash identifier:          Pqe53Ipvz7QBcAQkZXT12Bi9oiYnfNojaOHdyVTzW9Q=
Subject key identifier:   23:66:50:2E:D4:F2:06:12:4B:EA:13:64:C6:20:1E:75:05:07:86:CD
Certificate issuer:       /CN=CDC014669D381152AFB94B76936268BFF73E7D50
Certificate serial:       07D8876BFD81891C238C14ED737FADABC0D573BA
Authority key identifier: CD:C0:14:66:9D:38:11:52:AF:B9:4B:76:93:62:68:BF:F7:3E:7D:50
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/CDC014669D381152AFB94B76936268BFF73E7D50.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/2/326131313a323963303a393062353a3a2f34382d3438203d3e203437323732.roa
Signing time:             Sun 26 Nov 2023 11:08:46 +0000
ROA not before:           Sun 26 Nov 2023 11:03:46 +0000
ROA not after:            Sun 24 Nov 2024 11:08:46 +0000
asID:                     47272
IP address blocks:        2a11:29c0:90b5::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:d8:87:6b:fd:81:89:1c:23:8c:14:ed:73:7f:ad:ab:c0:d5:73:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDC014669D381152AFB94B76936268BFF73E7D50
        Validity
            Not Before: Nov 26 11:03:46 2023 GMT
            Not After : Nov 24 11:08:46 2024 GMT
        Subject: CN=2366502ED4F206124BEA1364C6201E75050786CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:34:eb:46:0a:15:b2:97:04:94:e9:fa:cc:e1:
                    0b:1f:4f:7a:94:0d:de:ee:61:4e:73:fa:5a:ef:0e:
                    14:e0:a4:be:88:85:6b:39:a0:2c:77:47:4a:45:54:
                    88:ac:b0:6f:aa:ff:e0:97:36:50:60:7d:dd:e9:25:
                    75:69:f9:fd:20:a8:da:67:c7:b8:88:03:fa:db:a6:
                    7c:31:a5:6f:ed:22:c1:3f:22:76:84:85:90:b0:6a:
                    c8:73:1d:ea:27:63:fe:c5:00:c7:ac:5d:d9:00:a5:
                    2a:85:8e:03:0c:05:36:cc:89:bf:62:6c:58:4d:80:
                    f8:43:31:4e:2d:4d:77:10:da:dd:56:f1:09:ff:c8:
                    7b:53:17:20:6a:a4:bf:ce:b7:6d:ba:1c:ed:18:96:
                    44:76:c8:e3:66:d1:c1:7d:28:2c:81:b2:b1:3c:09:
                    98:ca:4c:fd:42:5c:94:ff:5d:34:01:9f:c6:96:46:
                    f4:36:1b:fc:53:b0:80:b4:f5:ec:a9:57:93:6d:a6:
                    7b:f6:01:55:ba:3b:7f:be:8e:53:b6:09:a9:e0:a4:
                    81:9f:9e:c2:b4:9b:b6:07:47:9d:f5:6c:84:57:65:
                    89:85:75:8a:fb:c4:63:66:74:4c:7c:38:f7:1c:0f:
                    18:24:3a:b7:97:51:d3:ab:37:10:9d:4f:c0:96:1d:
                    d6:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:66:50:2E:D4:F2:06:12:4B:EA:13:64:C6:20:1E:75:05:07:86:CD
            X509v3 Authority Key Identifier:
                keyid:CD:C0:14:66:9D:38:11:52:AF:B9:4B:76:93:62:68:BF:F7:3E:7D:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/2/CDC014669D381152AFB94B76936268BFF73E7D50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/CDC014669D381152AFB94B76936268BFF73E7D50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/2/326131313a323963303a393062353a3a2f34382d3438203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:29c0:90b5::/48

    Signature Algorithm: sha256WithRSAEncryption
         53:03:5b:39:cb:3f:40:8a:0f:1e:b0:56:8c:e0:78:b4:bf:46:
         bb:52:a7:74:90:9a:dc:b5:4e:03:04:a4:ef:52:b2:f1:87:fd:
         75:41:af:39:e7:aa:4d:c6:15:6e:a6:78:6e:db:14:59:08:49:
         df:80:6d:34:e1:1e:9d:21:5d:50:86:58:b9:a0:79:c8:0f:58:
         58:6c:2a:c0:68:52:58:e4:46:9d:7c:de:14:98:62:ed:92:98:
         2c:33:e0:72:7a:f4:54:73:5b:5f:42:45:3e:ac:9d:60:33:ea:
         92:77:e0:65:af:16:eb:94:89:13:c8:85:73:73:94:cd:38:b6:
         93:86:7d:e4:af:26:71:ca:84:b6:8b:49:55:7a:c1:13:03:13:
         33:fe:ed:f8:4f:ba:f6:7a:25:ff:87:01:8a:64:80:16:ea:e6:
         17:30:b7:80:e9:b4:22:14:54:62:31:99:1a:13:4f:50:74:c9:
         3a:fd:80:c6:7e:c4:48:75:59:83:ba:85:2f:56:78:4e:02:1d:
         f9:0a:b5:89:3a:e9:8f:24:33:ba:6d:2f:bd:34:44:54:72:43:
         47:c6:9c:00:9b:01:05:c2:fb:06:64:fe:8d:a6:ad:f7:ca:e6:
         38:17:86:cf:4c:f3:98:cd:bd:f4:df:7e:79:0d:1e:c9:4d:f7:
         96:27:47:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----