Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/2/326131313a323963303a393062373a3a2f34382d3438203d3e203437323732.roa
File:                     326131313a323963303a393062373a3a2f34382d3438203d3e203437323732.roa (raw, json)
Hash identifier:          OPq5HIxVghooNTddMC86p1gR31jKkhqqBeIQ5pu4YCk=
Subject key identifier:   D9:96:B5:69:A0:0D:9D:B9:AD:B7:86:49:C9:C4:79:AF:2F:14:EF:BA
Certificate issuer:       /CN=CDC014669D381152AFB94B76936268BFF73E7D50
Certificate serial:       0C21D46B859A5253BDF2400E273F6F0E704EDE43
Authority key identifier: CD:C0:14:66:9D:38:11:52:AF:B9:4B:76:93:62:68:BF:F7:3E:7D:50
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/CDC014669D381152AFB94B76936268BFF73E7D50.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/2/326131313a323963303a393062373a3a2f34382d3438203d3e203437323732.roa
Signing time:             Sun 26 Nov 2023 11:08:46 +0000
ROA not before:           Sun 26 Nov 2023 11:03:46 +0000
ROA not after:            Sun 24 Nov 2024 11:08:46 +0000
asID:                     47272
IP address blocks:        2a11:29c0:90b7::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:21:d4:6b:85:9a:52:53:bd:f2:40:0e:27:3f:6f:0e:70:4e:de:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDC014669D381152AFB94B76936268BFF73E7D50
        Validity
            Not Before: Nov 26 11:03:46 2023 GMT
            Not After : Nov 24 11:08:46 2024 GMT
        Subject: CN=D996B569A00D9DB9ADB78649C9C479AF2F14EFBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e5:a3:a5:5d:75:8e:ff:16:3e:9f:6d:d9:b5:
                    50:57:84:e1:a6:a7:5e:65:ed:c6:7a:eb:44:89:94:
                    5e:17:6b:4d:5f:ea:d5:7e:6e:91:27:d8:86:e7:0e:
                    6b:e0:64:c7:2f:83:d8:91:5b:28:88:92:6b:1e:df:
                    dc:0f:c8:52:5d:69:04:63:57:e2:69:a1:3c:88:9d:
                    92:45:d6:c1:7d:76:35:9e:ff:19:f6:f5:a6:6f:91:
                    a2:09:0a:86:c2:a4:43:24:2a:cc:96:8f:7b:0d:5a:
                    f4:7f:bb:96:85:c7:3d:0a:c2:a9:ac:a8:64:cf:23:
                    a4:fa:a7:13:3c:f4:76:78:17:52:9a:dd:f5:fe:13:
                    13:93:de:71:cb:a6:1e:e2:c4:ec:4b:41:dd:ae:f7:
                    f6:48:27:f6:0b:4d:0e:6b:13:af:c0:88:00:bd:82:
                    7a:01:1b:de:3e:a1:e6:71:12:4f:2e:88:bc:88:a4:
                    46:8f:c4:53:51:31:71:cb:fd:e5:ec:68:47:06:a0:
                    4a:2e:e6:3e:de:b1:e8:40:cb:1d:38:f1:24:53:71:
                    57:77:04:e3:97:54:42:a4:bd:a5:17:43:a9:51:c3:
                    10:d3:12:2e:62:6c:39:20:c9:8e:46:25:a6:b8:69:
                    85:d4:e9:eb:19:9f:65:11:f1:8e:fb:5f:7b:15:15:
                    38:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:96:B5:69:A0:0D:9D:B9:AD:B7:86:49:C9:C4:79:AF:2F:14:EF:BA
            X509v3 Authority Key Identifier:
                keyid:CD:C0:14:66:9D:38:11:52:AF:B9:4B:76:93:62:68:BF:F7:3E:7D:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/2/CDC014669D381152AFB94B76936268BFF73E7D50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/CDC014669D381152AFB94B76936268BFF73E7D50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/2/326131313a323963303a393062373a3a2f34382d3438203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:29c0:90b7::/48

    Signature Algorithm: sha256WithRSAEncryption
         97:3b:c6:ab:12:91:5d:86:6e:7a:40:ae:1e:1f:39:33:46:77:
         67:5c:b8:57:6a:a7:2d:f0:f6:11:53:cb:fb:0c:4d:33:2f:9a:
         d2:8b:98:12:06:9d:ee:4d:eb:90:5e:15:1f:30:f3:9d:07:d0:
         89:14:c5:88:df:5b:f2:ac:01:a4:89:5b:9a:50:26:66:49:0a:
         a5:65:06:1d:e9:21:11:30:95:e8:09:e6:91:09:13:52:be:27:
         9b:13:b8:10:78:5f:40:0f:c2:56:73:d5:3e:bd:bd:3a:5e:94:
         c5:58:46:c5:2d:4d:7f:d5:04:d3:6d:47:ba:12:4a:b2:11:f5:
         7b:0f:7f:b6:14:a3:9e:e3:a8:1a:51:8d:b0:35:4c:e7:1f:d5:
         bc:73:3d:f2:57:c0:8d:29:c2:96:8e:38:be:b9:3f:9f:1f:1a:
         0e:20:90:a2:2a:58:25:0e:13:21:9c:ee:c2:a0:36:7b:ea:ff:
         f5:03:7a:c6:e6:21:5d:84:d7:61:da:0f:e3:5e:ee:fe:44:1c:
         dc:a5:b5:a7:af:c7:a9:79:75:67:ee:b6:9d:5c:30:84:e8:bb:
         dc:4e:b0:55:96:d9:82:81:2b:59:a8:c4:cf:29:0c:33:9f:ef:
         21:e6:1b:37:10:4a:6f:14:22:d9:39:94:f8:24:15:34:c2:1f:
         91:87:94:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----