Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/2/326131313a323963303a393062383a3a2f34382d3438203d3e203437323732.roa
File:                     326131313a323963303a393062383a3a2f34382d3438203d3e203437323732.roa (raw, json)
Hash identifier:          Y4j6Itlxxkkhy8K2R/4JxEEuRYC89ZH6FXSwxX3kn8g=
Subject key identifier:   BF:E2:90:AE:2D:BB:62:46:17:E5:CF:9C:29:D8:E6:F4:9C:95:F6:3E
Certificate issuer:       /CN=CDC014669D381152AFB94B76936268BFF73E7D50
Certificate serial:       77ABB9D411E92EAB6C4FA61F673D1DCE0A5CC991
Authority key identifier: CD:C0:14:66:9D:38:11:52:AF:B9:4B:76:93:62:68:BF:F7:3E:7D:50
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/CDC014669D381152AFB94B76936268BFF73E7D50.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/2/326131313a323963303a393062383a3a2f34382d3438203d3e203437323732.roa
Signing time:             Sun 26 Nov 2023 11:08:44 +0000
ROA not before:           Sun 26 Nov 2023 11:03:44 +0000
ROA not after:            Sun 24 Nov 2024 11:08:44 +0000
asID:                     47272
IP address blocks:        2a11:29c0:90b8::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:ab:b9:d4:11:e9:2e:ab:6c:4f:a6:1f:67:3d:1d:ce:0a:5c:c9:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDC014669D381152AFB94B76936268BFF73E7D50
        Validity
            Not Before: Nov 26 11:03:44 2023 GMT
            Not After : Nov 24 11:08:44 2024 GMT
        Subject: CN=BFE290AE2DBB624617E5CF9C29D8E6F49C95F63E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d2:5f:72:7e:84:47:dc:69:51:45:0b:0d:bf:
                    c0:c6:e2:b6:53:82:d7:b3:d9:e3:0c:ea:52:ef:be:
                    50:4e:00:bc:f8:f3:a8:85:ab:fc:4d:01:bc:7f:e5:
                    a7:4f:f4:73:bc:90:c2:c4:1d:c2:02:63:72:0e:af:
                    ee:45:c7:f7:1b:c5:97:90:4d:33:a6:9c:74:ff:f4:
                    3b:af:b9:88:ab:fd:92:09:37:15:e0:e9:d3:95:7e:
                    f1:f4:bc:89:2b:7d:7d:09:5d:21:de:1a:c8:26:66:
                    42:b9:6d:8e:0e:ef:83:b9:48:d4:d3:da:96:77:8c:
                    aa:85:6f:2c:0d:bd:79:c7:50:b9:8d:64:09:a3:0a:
                    8e:13:31:39:b0:8b:d5:05:99:c0:6d:a0:da:13:45:
                    12:98:cc:0d:b5:ea:e9:e5:2a:21:64:43:5d:36:07:
                    a1:44:86:72:d6:13:25:65:74:be:27:7f:42:06:7d:
                    83:63:6d:37:f6:17:7d:d4:ea:74:42:ff:18:6f:65:
                    76:9c:56:26:84:a2:0e:95:4e:b6:64:3f:8f:a9:cb:
                    5c:08:cb:a1:df:99:b1:02:1a:b7:d1:66:b3:6e:86:
                    8b:c9:d6:7b:1a:c2:31:ea:24:e6:fe:42:ff:98:0a:
                    90:24:c8:4c:a3:b3:87:be:7a:b3:fa:04:80:21:5b:
                    d5:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:E2:90:AE:2D:BB:62:46:17:E5:CF:9C:29:D8:E6:F4:9C:95:F6:3E
            X509v3 Authority Key Identifier:
                keyid:CD:C0:14:66:9D:38:11:52:AF:B9:4B:76:93:62:68:BF:F7:3E:7D:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/2/CDC014669D381152AFB94B76936268BFF73E7D50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/CDC014669D381152AFB94B76936268BFF73E7D50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/2/326131313a323963303a393062383a3a2f34382d3438203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:29c0:90b8::/48

    Signature Algorithm: sha256WithRSAEncryption
         75:13:69:b0:84:fb:20:65:f0:7a:f0:ab:cb:75:ef:8b:22:7c:
         42:36:5b:d8:71:c5:62:47:87:6f:81:d6:28:f4:c5:10:42:21:
         65:e6:23:70:df:b7:52:91:9a:02:bc:57:c8:89:db:38:a2:1a:
         33:ce:3d:75:3d:08:73:3e:98:4c:c9:b3:74:05:dc:fe:96:49:
         ec:66:e4:82:0e:22:33:2c:dc:ff:81:b5:ec:f8:9e:aa:f4:b2:
         7c:a7:c6:80:52:6a:2e:14:fd:c1:e5:fb:a4:9b:55:e5:b7:82:
         26:3d:9d:2a:6d:b9:5b:00:e1:f1:8e:4b:e4:c0:28:81:ea:f4:
         60:4d:af:db:e6:d6:20:58:bd:9c:6d:6d:ea:e8:a1:f3:ad:1b:
         91:cc:dc:e5:b8:8e:87:0f:44:ba:67:f5:05:b6:d2:25:28:94:
         c1:08:f7:15:01:cc:0d:d2:c0:29:05:81:3b:fb:d9:9e:d4:2a:
         71:de:04:64:49:1c:48:e5:f9:d8:78:af:64:a5:c4:01:b7:70:
         35:21:f1:15:3c:8d:85:9c:06:37:ff:78:9c:98:76:d6:8d:61:
         b2:9b:e2:4a:6e:67:47:00:c8:c9:22:c7:4a:32:46:68:1a:8c:
         41:17:57:f9:25:90:fd:58:f2:6d:ca:bb:77:ff:b5:41:4f:b0:
         de:59:c0:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----