Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/37658aec-0d40-490e-bb63-343e46c3a17a/2/326131313a323963303a393030303a3a2f34382d3438203d3e203437323732.roa
File:                     326131313a323963303a393030303a3a2f34382d3438203d3e203437323732.roa (raw, json)
Hash identifier:          lPxOCf9jXGFrDDOamlQvTRfGCLDcWQZni7PSPu1tKvc=
Subject key identifier:   97:3C:58:9D:82:0A:50:47:7F:99:5F:18:EE:83:90:E9:A8:47:BA:B4
Certificate issuer:       /CN=D398429B497D38DBEC7EF14848B74ED6DAE1E2ED
Certificate serial:       4AAADC32BB17FE5EACAA73CF1FF08C8BFF8DC07A
Authority key identifier: D3:98:42:9B:49:7D:38:DB:EC:7E:F1:48:48:B7:4E:D6:DA:E1:E2:ED
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/D398429B497D38DBEC7EF14848B74ED6DAE1E2ED.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/37658aec-0d40-490e-bb63-343e46c3a17a/2/326131313a323963303a393030303a3a2f34382d3438203d3e203437323732.roa
Signing time:             Sun 26 Nov 2023 10:57:30 +0000
ROA not before:           Sun 26 Nov 2023 10:52:30 +0000
ROA not after:            Sun 24 Nov 2024 10:57:30 +0000
asID:                     47272
IP address blocks:        2a11:29c0:9000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:aa:dc:32:bb:17:fe:5e:ac:aa:73:cf:1f:f0:8c:8b:ff:8d:c0:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D398429B497D38DBEC7EF14848B74ED6DAE1E2ED
        Validity
            Not Before: Nov 26 10:52:30 2023 GMT
            Not After : Nov 24 10:57:30 2024 GMT
        Subject: CN=973C589D820A50477F995F18EE8390E9A847BAB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:38:bf:a0:df:15:d4:83:dc:f4:4e:46:20:7e:
                    1c:f0:92:61:c1:7d:f2:d7:9a:41:c7:23:0c:2d:9f:
                    18:04:98:81:3f:61:19:c8:eb:00:fc:4c:bf:e5:64:
                    88:43:58:ce:43:70:16:6f:5c:fa:ce:4a:74:03:7a:
                    e6:b4:f9:98:01:a9:46:25:52:fe:67:5c:80:24:1e:
                    2d:9d:96:f5:3c:93:80:91:9e:c3:25:21:aa:78:68:
                    a4:d9:16:50:6b:06:6e:d9:34:bb:8d:5f:c2:56:5d:
                    38:a6:bf:69:fc:8d:c7:ec:1c:03:04:ae:c8:89:74:
                    d2:82:b1:19:29:d5:ec:b3:6f:33:31:42:c9:9e:b4:
                    9a:04:20:5c:c8:e7:36:6e:1c:4f:10:9f:c9:a7:f0:
                    f1:97:65:a3:a0:4c:03:9d:7e:9b:d1:68:ce:3f:b7:
                    f0:c4:60:9b:85:3a:75:96:08:0d:ca:c9:74:cf:b4:
                    16:b2:6a:09:5f:fc:52:f5:10:a7:b1:48:1c:bb:89:
                    c1:f7:bb:8a:3a:90:b4:cd:71:de:52:7b:35:d7:10:
                    e5:51:a9:57:06:31:b2:01:e5:90:95:fa:7a:62:52:
                    4f:29:e7:bb:6a:bf:b3:f0:19:a2:d6:6f:d2:78:b5:
                    aa:80:38:22:83:e5:0b:b3:98:83:15:22:91:cb:45:
                    c9:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:3C:58:9D:82:0A:50:47:7F:99:5F:18:EE:83:90:E9:A8:47:BA:B4
            X509v3 Authority Key Identifier:
                keyid:D3:98:42:9B:49:7D:38:DB:EC:7E:F1:48:48:B7:4E:D6:DA:E1:E2:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/37658aec-0d40-490e-bb63-343e46c3a17a/2/D398429B497D38DBEC7EF14848B74ED6DAE1E2ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/D398429B497D38DBEC7EF14848B74ED6DAE1E2ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/37658aec-0d40-490e-bb63-343e46c3a17a/2/326131313a323963303a393030303a3a2f34382d3438203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:29c0:9000::/48

    Signature Algorithm: sha256WithRSAEncryption
         bd:f1:50:8e:62:de:58:67:c8:d0:2d:7a:5c:c0:c0:d1:65:3b:
         17:12:fe:85:ce:36:15:a0:e9:8a:e5:06:20:48:00:ab:fa:ab:
         17:e8:94:0e:09:15:72:3d:8f:2e:ee:63:55:af:30:c2:4b:b8:
         f6:c3:ef:88:0b:82:c8:54:99:4f:30:ca:d4:82:ab:fc:48:03:
         c8:74:e8:d7:83:bc:89:f8:23:22:dd:c8:32:91:f6:04:05:1f:
         19:b6:b0:96:b3:84:67:b4:c8:07:5c:32:28:3c:de:be:82:6a:
         c7:c0:be:46:a9:8b:b5:26:0b:11:af:dd:9d:fe:26:0a:80:e6:
         ae:d1:07:b8:72:bb:5f:04:f3:96:81:65:6f:72:3d:8d:e2:8e:
         c8:41:ff:11:b0:2b:7a:84:a7:3d:65:a9:d9:04:14:f8:db:f7:
         3d:8c:66:9a:2f:4b:6a:c2:67:5f:3f:ab:10:89:82:b6:a2:d0:
         20:df:a0:72:b6:d8:86:59:34:c6:62:dd:31:a2:ce:4e:c9:9b:
         e0:f1:17:99:23:5e:b4:30:d5:74:7f:c8:d2:b4:58:17:a7:42:
         04:a3:31:23:c9:f8:fc:01:e8:90:05:83:38:8e:17:06:57:7f:
         b9:2e:36:12:67:b3:2a:d4:1f:39:86:e9:34:61:46:f1:fc:be:
         44:1d:9b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----