Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/37658aec-0d40-490e-bb63-343e46c3a17a/2/326131313a323963303a393030323a3a2f34382d3438203d3e203437323732.roa
File:                     326131313a323963303a393030323a3a2f34382d3438203d3e203437323732.roa (raw, json)
Hash identifier:          iTzyYmadtlbNOMCfQLZ5MzEZQHCpKPy1d56jLZB1jSM=
Subject key identifier:   0C:D5:B2:87:F6:E4:A2:A3:58:50:86:8D:83:6D:42:4F:59:74:7E:B0
Certificate issuer:       /CN=D398429B497D38DBEC7EF14848B74ED6DAE1E2ED
Certificate serial:       4A282FA0D8AAD142C2A9C7CD3031D613B8B90DA5
Authority key identifier: D3:98:42:9B:49:7D:38:DB:EC:7E:F1:48:48:B7:4E:D6:DA:E1:E2:ED
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/D398429B497D38DBEC7EF14848B74ED6DAE1E2ED.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/37658aec-0d40-490e-bb63-343e46c3a17a/2/326131313a323963303a393030323a3a2f34382d3438203d3e203437323732.roa
Signing time:             Sun 26 Nov 2023 10:57:30 +0000
ROA not before:           Sun 26 Nov 2023 10:52:30 +0000
ROA not after:            Sun 24 Nov 2024 10:57:30 +0000
asID:                     47272
IP address blocks:        2a11:29c0:9002::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:28:2f:a0:d8:aa:d1:42:c2:a9:c7:cd:30:31:d6:13:b8:b9:0d:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D398429B497D38DBEC7EF14848B74ED6DAE1E2ED
        Validity
            Not Before: Nov 26 10:52:30 2023 GMT
            Not After : Nov 24 10:57:30 2024 GMT
        Subject: CN=0CD5B287F6E4A2A35850868D836D424F59747EB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5b:df:81:b1:95:8a:55:fe:9e:86:29:08:70:
                    34:e6:da:bb:74:56:1a:b4:80:cc:53:29:a4:a0:29:
                    fb:7d:cf:20:f5:9f:9b:b1:3c:e9:5b:fe:a6:c9:7a:
                    2e:79:cb:3c:9a:17:42:2a:fa:17:e0:2d:44:65:f2:
                    1a:3f:02:e6:5f:ae:92:46:7c:90:3f:7c:46:32:f2:
                    a1:17:9d:de:94:50:f2:c9:de:99:7e:26:bd:24:05:
                    57:f8:80:36:df:30:53:ac:5d:0b:2c:35:57:c4:ab:
                    39:ee:cf:e5:2b:ba:1f:e9:c2:54:64:2a:c2:e8:81:
                    09:d6:2d:10:d3:2e:6f:dd:eb:9b:de:cb:a2:92:81:
                    4c:38:bd:48:09:7b:c0:32:07:36:43:2f:7c:92:00:
                    6d:23:2f:19:d6:b3:48:b9:27:83:d6:28:a8:b7:98:
                    5c:2d:e9:5a:84:f6:15:f5:88:f8:88:21:d5:52:a2:
                    ac:ac:64:83:ac:04:89:43:fc:31:6f:08:c9:14:8c:
                    a8:e9:09:b3:3b:a0:1b:ca:df:36:e6:b0:70:91:c0:
                    c8:4a:78:b3:2b:74:7a:04:df:8f:ad:60:81:c8:fc:
                    1a:fe:ae:61:4d:fb:65:da:7c:1f:21:b3:b3:cb:16:
                    a2:09:d3:f3:d3:2b:9a:40:cd:43:b4:48:5d:65:7b:
                    ba:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:D5:B2:87:F6:E4:A2:A3:58:50:86:8D:83:6D:42:4F:59:74:7E:B0
            X509v3 Authority Key Identifier:
                keyid:D3:98:42:9B:49:7D:38:DB:EC:7E:F1:48:48:B7:4E:D6:DA:E1:E2:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/37658aec-0d40-490e-bb63-343e46c3a17a/2/D398429B497D38DBEC7EF14848B74ED6DAE1E2ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/D398429B497D38DBEC7EF14848B74ED6DAE1E2ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/37658aec-0d40-490e-bb63-343e46c3a17a/2/326131313a323963303a393030323a3a2f34382d3438203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:29c0:9002::/48

    Signature Algorithm: sha256WithRSAEncryption
         3e:9c:c9:b9:26:b3:2a:1a:9e:62:b3:f5:6c:57:7f:54:9a:f3:
         56:d2:53:82:df:81:3e:9a:bc:b5:09:ec:94:1b:2f:e9:90:77:
         75:39:ec:1c:f5:67:57:eb:6c:2f:d5:c8:4e:56:54:38:08:ed:
         01:2b:c2:3a:28:b1:cb:b3:aa:e1:18:a1:f1:d7:73:d4:d8:ca:
         be:08:f3:13:42:4f:bc:98:27:d4:9c:08:22:0f:44:33:dd:6d:
         01:49:a7:32:ef:54:3b:b7:f5:14:b2:9a:4c:46:82:0e:2a:d8:
         56:01:e3:9e:42:a5:1b:7f:6c:57:65:75:cc:a7:5b:f0:eb:64:
         75:1b:26:99:9e:63:6a:ac:9a:bd:01:a3:ee:01:8b:8e:0c:cd:
         8a:86:88:a7:47:6d:4c:c3:af:91:0b:a4:e7:b1:d0:2f:bf:11:
         9b:de:2a:c1:53:a6:77:52:40:23:85:49:7b:a5:58:71:56:87:
         bd:28:1f:4d:d5:1b:9c:eb:46:8a:80:c9:b5:d5:20:2c:81:48:
         52:8a:e5:c4:df:24:80:68:84:98:86:89:46:8e:9c:a4:ac:ab:
         02:b3:1f:6a:45:e7:cd:6e:7a:26:f8:76:c6:c8:68:ad:bc:91:
         a1:54:77:7c:1b:79:5f:ab:5b:18:28:13:26:83:9c:1b:b3:ac:
         fa:8c:b2:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----