Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/2/326131313a323963303a393062393a3a2f34382d3438203d3e203437323732.roa
File:                     326131313a323963303a393062393a3a2f34382d3438203d3e203437323732.roa (raw, json)
Hash identifier:          QsEGfF2drzhP+2jO3GR2Y256CCEwFiQrLQ88SuCdx1w=
Subject key identifier:   4F:95:BD:C5:0E:D6:D5:48:9D:2F:8D:7E:1B:A0:31:94:9B:BB:C5:C4
Certificate issuer:       /CN=CDC014669D381152AFB94B76936268BFF73E7D50
Certificate serial:       4B11B2648CE38C5E7ED3919EE37B5D92E8CBEA8D
Authority key identifier: CD:C0:14:66:9D:38:11:52:AF:B9:4B:76:93:62:68:BF:F7:3E:7D:50
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/CDC014669D381152AFB94B76936268BFF73E7D50.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/2/326131313a323963303a393062393a3a2f34382d3438203d3e203437323732.roa
Signing time:             Sun 26 Nov 2023 11:08:45 +0000
ROA not before:           Sun 26 Nov 2023 11:03:45 +0000
ROA not after:            Sun 24 Nov 2024 11:08:45 +0000
asID:                     47272
IP address blocks:        2a11:29c0:90b9::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:11:b2:64:8c:e3:8c:5e:7e:d3:91:9e:e3:7b:5d:92:e8:cb:ea:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDC014669D381152AFB94B76936268BFF73E7D50
        Validity
            Not Before: Nov 26 11:03:45 2023 GMT
            Not After : Nov 24 11:08:45 2024 GMT
        Subject: CN=4F95BDC50ED6D5489D2F8D7E1BA031949BBBC5C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f1:33:86:e7:cb:6e:ac:72:76:74:6c:4f:86:
                    28:10:0b:7b:cd:66:d4:3c:ad:aa:f8:fd:19:a9:8a:
                    6d:9c:06:10:e4:f7:b0:ed:b0:18:eb:f0:db:88:ef:
                    5b:bb:c1:56:b5:90:28:a0:55:2d:00:87:69:49:d7:
                    42:c2:8e:2e:92:35:b7:13:42:5a:16:10:c5:e7:81:
                    26:18:ef:95:43:ab:e2:1f:59:04:1e:f6:73:b7:5f:
                    31:5a:d6:82:36:bb:69:06:f4:18:c8:87:62:92:47:
                    28:38:a0:91:a2:df:03:83:e1:84:35:cb:71:77:cb:
                    d5:6d:be:d1:5f:53:8a:34:76:8a:cf:b0:b8:b4:19:
                    b1:1a:79:d8:e1:60:46:e9:37:a6:5e:99:d5:db:87:
                    13:ce:17:cd:cd:fd:3c:4d:6b:4c:32:ec:5f:45:f6:
                    17:db:87:ad:a3:11:af:b1:52:2b:da:4f:82:e3:8c:
                    af:e3:32:3b:01:12:b1:1d:3b:a4:73:9d:ac:a5:5c:
                    d8:67:8b:3f:cd:6e:62:b2:4d:bf:da:95:5c:55:48:
                    1a:36:48:2b:99:7c:16:9c:d6:4d:c5:01:bf:c4:07:
                    b6:09:fd:09:a9:5c:89:f3:03:dd:6c:c7:c5:f6:71:
                    7a:dc:92:82:b5:13:0f:40:d0:ea:6a:0c:59:ed:b9:
                    ba:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:95:BD:C5:0E:D6:D5:48:9D:2F:8D:7E:1B:A0:31:94:9B:BB:C5:C4
            X509v3 Authority Key Identifier:
                keyid:CD:C0:14:66:9D:38:11:52:AF:B9:4B:76:93:62:68:BF:F7:3E:7D:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/2/CDC014669D381152AFB94B76936268BFF73E7D50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/CDC014669D381152AFB94B76936268BFF73E7D50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/2/326131313a323963303a393062393a3a2f34382d3438203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:29c0:90b9::/48

    Signature Algorithm: sha256WithRSAEncryption
         21:93:27:58:86:d6:30:81:f4:76:3e:cf:8e:38:72:a3:50:c7:
         08:5f:98:7f:96:fd:61:09:1c:fe:e1:99:a7:bb:ec:e2:e9:c5:
         ad:2e:f7:d2:59:06:7b:4a:96:c1:59:4e:07:d6:c0:70:8e:ca:
         b1:93:9b:c6:b8:2f:2b:8c:b9:8b:7c:07:cf:ad:66:d8:f4:55:
         d8:09:de:25:4f:0f:f0:94:0a:aa:0e:25:83:7f:6e:f8:af:de:
         fa:26:b4:c7:bd:a1:02:f8:7c:36:ca:15:f1:5b:b2:dc:28:43:
         0a:28:29:8d:ba:a6:f8:ed:b8:38:f4:78:bb:00:47:d9:a3:35:
         a6:3b:61:ad:da:68:70:aa:7a:e7:a6:47:5b:28:52:85:7b:ed:
         39:b7:f0:a6:81:f9:0b:1d:d4:e8:36:18:c3:04:98:f3:df:39:
         0e:54:73:97:f3:86:32:c0:5a:4a:43:5a:99:2a:5c:ba:79:8b:
         f6:99:bd:05:e9:f1:64:96:89:65:d5:02:9c:1d:7c:3b:c4:db:
         86:db:d8:cd:db:2a:0e:b2:c6:f2:56:7f:b9:ce:44:e2:43:4c:
         7c:39:7e:29:1f:4e:38:60:ff:c2:de:ff:0a:a9:eb:fb:0b:86:
         70:1a:0a:78:d4:a1:ed:b2:5c:75:58:37:87:1a:a4:3d:e9:40:
         0b:00:63:a4
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgIUSxGyZIzjjF5+05Ge43tdkujL6o0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0RDMDE0NjY5RDM4MTE1MkFGQjk0Qjc2OTM2MjY4QkZG
NzNFN0Q1MDAeFw0yMzExMjYxMTAzNDVaFw0yNDExMjQxMTA4NDVaMDMxMTAvBgNV
BAMTKDRGOTVCREM1MEVENkQ1NDg5RDJGOEQ3RTFCQTAzMTk0OUJCQkM1QzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC38TOG58turHJ2dGxPhigQC3vN
ZtQ8rar4/Rmpim2cBhDk97DtsBjr8NuI71u7wVa1kCigVS0Ah2lJ10LCji6SNbcT
QloWEMXngSYY75VDq+IfWQQe9nO3XzFa1oI2u2kG9BjIh2KSRyg4oJGi3wOD4YQ1
y3F3y9VtvtFfU4o0dorPsLi0GbEaedjhYEbpN6ZemdXbhxPOF83N/TxNa0wy7F9F
9hfbh62jEa+xUivaT4LjjK/jMjsBErEdO6RznaylXNhniz/NbmKyTb/alVxVSBo2
SCuZfBac1k3FAb/EB7YJ/QmpXInzA91sx8X2cXrckoK1Ew9A0OpqDFntuboNAgMB
AAGjggKDMIICfzAdBgNVHQ4EFgQUT5W9xQ7W1UidL41+G6AxlJu7xcQwHwYDVR0j
BBgwFoAUzcAUZp04EVKvuUt2k2Jov/c+fVAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMtZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1
YzdkLzIvQ0RDMDE0NjY5RDM4MTE1MkFGQjk0Qjc2OTM2MjY4QkZGNzNFN0Q1MC5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84MTExNWJjNi0xMGY2LTRh
ZjMtYmEwOS04YjY4N2E1NmZiZjUvMC9DREMwMTQ2NjlEMzgxMTUyQUZCOTRCNzY5
MzYyNjhCRkY3M0U3RDUwLmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF
BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS8zMjUzZDk3My1kNWJmLTQ1NDEtYmNjMS0yNzY1NDNhMjVjN2QvMi8zMjYxMzEz
MTNhMzIzOTYzMzAzYTM5MzA2MjM5M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzQz
NzMyMzczMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB
BwEB/wQTMBEwDwQCAAIwCQMHACoRKcCQuTANBgkqhkiG9w0BAQsFAAOCAQEAIZMn
WIbWMIH0dj7Pjjhyo1DHCF+Yf5b9YQkc/uGZp7vs4unFrS730lkGe0qWwVlOB9bA
cI7KsZObxrgvK4y5i3wHz61m2PRV2AneJU8P8JQKqg4lg39u+K/e+ia0x72hAvh8
NsoV8Vuy3ChDCigpjbqm+O24OPR4uwBH2aM1pjthrdpocKp656ZHWyhShXvtObfw
poH5Cx3U6DYYwwSY8985DlRzl/OGMsBaSkNamSpcunmL9pm9BenxZJaJZdUCnB18
O8TbhtvYzdsqDrLG8lZ/uc5E4kNMfDl+KR9OOGD/wt7/Cqnr+wuGcBoKeNSh7bJc
dVg3hxqkPelACwBjpA==
-----END CERTIFICATE-----