Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/37658aec-0d40-490e-bb63-343e46c3a17a/2/326131313a323963303a393030343a3a2f34382d3438203d3e203437323732.roa
File:                     326131313a323963303a393030343a3a2f34382d3438203d3e203437323732.roa (raw, json)
Hash identifier:          9YX35znV8/EGjLcZWojItotjDf7yN4I5BfgMtCGXDI8=
Subject key identifier:   46:B8:84:16:DB:BF:18:7D:DF:44:32:A4:FF:F8:47:D1:84:8F:11:30
Certificate issuer:       /CN=D398429B497D38DBEC7EF14848B74ED6DAE1E2ED
Certificate serial:       6AF818BD4AFFD1AFBFAC7DE717AAB3761CDB7084
Authority key identifier: D3:98:42:9B:49:7D:38:DB:EC:7E:F1:48:48:B7:4E:D6:DA:E1:E2:ED
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/D398429B497D38DBEC7EF14848B74ED6DAE1E2ED.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/37658aec-0d40-490e-bb63-343e46c3a17a/2/326131313a323963303a393030343a3a2f34382d3438203d3e203437323732.roa
Signing time:             Sun 26 Nov 2023 10:57:29 +0000
ROA not before:           Sun 26 Nov 2023 10:52:29 +0000
ROA not after:            Sun 24 Nov 2024 10:57:29 +0000
asID:                     47272
IP address blocks:        2a11:29c0:9004::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:f8:18:bd:4a:ff:d1:af:bf:ac:7d:e7:17:aa:b3:76:1c:db:70:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D398429B497D38DBEC7EF14848B74ED6DAE1E2ED
        Validity
            Not Before: Nov 26 10:52:29 2023 GMT
            Not After : Nov 24 10:57:29 2024 GMT
        Subject: CN=46B88416DBBF187DDF4432A4FFF847D1848F1130
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:1d:6c:4a:ae:f9:8a:3e:ee:67:cd:a6:79:62:
                    82:4d:07:63:f9:07:be:2e:a6:24:00:70:1e:a2:b4:
                    87:17:1d:40:d3:91:46:8c:3e:ba:23:9d:21:7a:84:
                    77:56:55:f9:e1:63:94:dc:0c:a7:82:fa:97:cd:65:
                    2a:8a:55:b0:cf:32:7d:93:36:d5:56:ef:ae:5f:fd:
                    23:30:03:e5:24:d4:3d:fc:fc:34:fd:9c:3e:ed:e0:
                    6e:e0:b7:61:49:65:f7:ea:03:aa:42:26:03:b6:9b:
                    87:a4:84:f2:da:1c:ba:b3:d7:d0:9d:1c:4c:e3:f1:
                    5b:08:0a:55:8f:ce:57:9b:47:74:6c:79:a2:13:90:
                    4e:15:ec:73:7f:cc:da:4f:3d:de:e5:3b:07:1b:86:
                    ef:44:5c:54:60:02:8a:b6:ca:3a:84:78:a4:42:36:
                    5e:cd:2f:11:31:fa:25:52:73:6a:ed:02:07:c4:da:
                    4a:b7:c2:d2:a8:3f:57:0b:bd:a9:92:17:dd:80:f2:
                    78:97:0d:f0:09:11:f4:60:e8:ed:ff:8a:f7:e1:95:
                    5c:ec:af:5b:47:30:2f:ee:aa:dd:3f:23:20:ad:1b:
                    3a:aa:94:cb:29:4e:84:e4:06:0d:d4:0c:7c:31:df:
                    df:a3:c6:99:8b:8e:96:be:c3:51:d8:63:5e:b6:e3:
                    5b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:B8:84:16:DB:BF:18:7D:DF:44:32:A4:FF:F8:47:D1:84:8F:11:30
            X509v3 Authority Key Identifier:
                keyid:D3:98:42:9B:49:7D:38:DB:EC:7E:F1:48:48:B7:4E:D6:DA:E1:E2:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/37658aec-0d40-490e-bb63-343e46c3a17a/2/D398429B497D38DBEC7EF14848B74ED6DAE1E2ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/D398429B497D38DBEC7EF14848B74ED6DAE1E2ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/37658aec-0d40-490e-bb63-343e46c3a17a/2/326131313a323963303a393030343a3a2f34382d3438203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:29c0:9004::/48

    Signature Algorithm: sha256WithRSAEncryption
         65:76:c2:fd:ec:b0:47:28:a4:a0:68:db:ae:36:e6:d4:fb:47:
         93:11:fd:85:5b:57:84:87:6f:57:fa:04:cf:95:9f:34:6c:bd:
         bd:77:f1:7e:1c:bd:06:5e:00:d6:78:42:de:73:5a:40:58:d6:
         e4:be:2e:48:82:36:db:db:47:b1:29:36:6e:a7:8a:71:64:42:
         7f:e2:1b:2b:fd:d8:e3:ee:d2:e8:e7:a5:03:3e:07:e5:ee:3d:
         b2:c6:ab:99:09:64:f1:a2:ed:e3:de:09:eb:74:07:00:50:0e:
         6a:0d:5d:a8:4e:9c:7e:f2:5a:35:ef:90:b9:81:c1:36:77:57:
         3a:2d:7d:26:b6:5b:3a:86:c3:0c:4e:bc:32:f9:8b:66:85:31:
         cf:b5:54:be:3f:0f:d9:54:f6:55:96:55:19:7c:cd:07:bb:db:
         ed:a4:5f:14:5a:b8:e2:0b:44:16:32:c4:cb:72:3b:d3:41:05:
         ff:e6:f1:9a:4f:b3:80:9e:2c:b0:fc:ed:95:af:5f:a3:ce:fe:
         76:95:04:e1:94:02:bf:9b:23:d3:b5:11:47:59:aa:61:76:b3:
         be:ca:03:cc:5f:c1:24:87:6c:da:3d:8c:ca:ec:ad:de:cd:b4:
         85:92:88:0a:04:eb:71:5a:af:b3:9c:12:96:39:c7:c0:65:f5:
         51:d8:74:d7
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgIUavgYvUr/0a+/rH3nF6qzdhzbcIQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM5ODQyOUI0OTdEMzhEQkVDN0VGMTQ4NDhCNzRFRDZE
QUUxRTJFRDAeFw0yMzExMjYxMDUyMjlaFw0yNDExMjQxMDU3MjlaMDMxMTAvBgNV
BAMTKDQ2Qjg4NDE2REJCRjE4N0RERjQ0MzJBNEZGRjg0N0QxODQ4RjExMzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkHWxKrvmKPu5nzaZ5YoJNB2P5
B74upiQAcB6itIcXHUDTkUaMProjnSF6hHdWVfnhY5TcDKeC+pfNZSqKVbDPMn2T
NtVW765f/SMwA+Uk1D38/DT9nD7t4G7gt2FJZffqA6pCJgO2m4ekhPLaHLqz19Cd
HEzj8VsIClWPzlebR3RseaITkE4V7HN/zNpPPd7lOwcbhu9EXFRgAoq2yjqEeKRC
Nl7NLxEx+iVSc2rtAgfE2kq3wtKoP1cLvamSF92A8niXDfAJEfRg6O3/ivfhlVzs
r1tHMC/uqt0/IyCtGzqqlMspToTkBg3UDHwx39+jxpmLjpa+w1HYY16241srAgMB
AAGjggKDMIICfzAdBgNVHQ4EFgQURriEFtu/GH3fRDKk//hH0YSPETAwHwYDVR0j
BBgwFoAU05hCm0l9ONvsfvFISLdO1trh4u0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzc2NThhZWMtMGQ0MC00OTBlLWJiNjMtMzQzZTQ2YzNh
MTdhLzIvRDM5ODQyOUI0OTdEMzhEQkVDN0VGMTQ4NDhCNzRFRDZEQUUxRTJFRC5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84MTExNWJjNi0xMGY2LTRh
ZjMtYmEwOS04YjY4N2E1NmZiZjUvMC9EMzk4NDI5QjQ5N0QzOERCRUM3RUYxNDg0
OEI3NEVENkRBRTFFMkVELmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF
BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS8zNzY1OGFlYy0wZDQwLTQ5MGUtYmI2My0zNDNlNDZjM2ExN2EvMi8zMjYxMzEz
MTNhMzIzOTYzMzAzYTM5MzAzMDM0M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzQz
NzMyMzczMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB
BwEB/wQTMBEwDwQCAAIwCQMHACoRKcCQBDANBgkqhkiG9w0BAQsFAAOCAQEAZXbC
/eywRyikoGjbrjbm1PtHkxH9hVtXhIdvV/oEz5WfNGy9vXfxfhy9Bl4A1nhC3nNa
QFjW5L4uSII229tHsSk2bqeKcWRCf+IbK/3Y4+7S6OelAz4H5e49ssarmQlk8aLt
494J63QHAFAOag1dqE6cfvJaNe+QuYHBNndXOi19JrZbOobDDE68MvmLZoUxz7VU
vj8P2VT2VZZVGXzNB7vb7aRfFFq44gtEFjLEy3I700EF/+bxmk+zgJ4ssPztla9f
o87+dpUE4ZQCv5sj07URR1mqYXazvsoDzF/BJIds2j2Myuyt3s20hZKICgTrcVqv
s5wSljnHwGX1Udh01w==
-----END CERTIFICATE-----