Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/37658aec-0d40-490e-bb63-343e46c3a17a/2/326131313a323963303a393030363a3a2f34382d3438203d3e203437323732.roa
File:                     326131313a323963303a393030363a3a2f34382d3438203d3e203437323732.roa (raw, json)
Hash identifier:          6oLOa2WNLj6dnhDaWl70EdTHvs7y7udiGvPDzhkhyYo=
Subject key identifier:   04:12:75:DB:AD:91:98:EC:A1:E9:11:7E:84:5C:B6:B7:E5:1A:97:F4
Certificate issuer:       /CN=D398429B497D38DBEC7EF14848B74ED6DAE1E2ED
Certificate serial:       738824AE22BA5EA095204F884374D4F892DBEF91
Authority key identifier: D3:98:42:9B:49:7D:38:DB:EC:7E:F1:48:48:B7:4E:D6:DA:E1:E2:ED
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/D398429B497D38DBEC7EF14848B74ED6DAE1E2ED.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/37658aec-0d40-490e-bb63-343e46c3a17a/2/326131313a323963303a393030363a3a2f34382d3438203d3e203437323732.roa
Signing time:             Sun 26 Nov 2023 10:57:29 +0000
ROA not before:           Sun 26 Nov 2023 10:52:29 +0000
ROA not after:            Sun 24 Nov 2024 10:57:29 +0000
asID:                     47272
IP address blocks:        2a11:29c0:9006::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:88:24:ae:22:ba:5e:a0:95:20:4f:88:43:74:d4:f8:92:db:ef:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D398429B497D38DBEC7EF14848B74ED6DAE1E2ED
        Validity
            Not Before: Nov 26 10:52:29 2023 GMT
            Not After : Nov 24 10:57:29 2024 GMT
        Subject: CN=041275DBAD9198ECA1E9117E845CB6B7E51A97F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:6e:c7:36:7d:38:73:e4:9a:42:0c:70:ff:8b:
                    e7:77:48:59:ca:b7:45:75:11:89:5f:cb:84:e3:8a:
                    66:b1:c3:2b:81:30:9d:d8:5b:53:fa:00:be:ff:67:
                    ef:c7:84:39:92:e4:dc:7d:d3:2a:c3:b7:29:09:43:
                    b6:30:13:74:6d:b1:ec:e8:cf:89:bd:9e:34:b7:e8:
                    ed:3e:76:89:40:74:e2:05:c4:f6:72:08:a8:b4:0a:
                    4d:5f:e5:5b:98:64:4f:de:c4:0a:22:20:e2:be:dc:
                    4d:0b:41:d3:25:cd:86:48:bd:fd:c4:f1:9b:81:de:
                    e0:8e:f2:c3:3e:98:8e:f8:45:80:c2:e9:79:fe:ad:
                    08:e0:c4:29:a3:f4:ba:75:f0:0b:56:56:7a:53:2a:
                    0c:ce:53:cb:0f:86:99:6c:49:41:a8:5a:8f:48:30:
                    be:a1:89:57:e7:bd:83:f7:45:bf:64:a6:63:bf:d9:
                    96:2e:a7:33:e4:59:72:41:b8:13:71:6f:2e:d9:0d:
                    7e:70:9a:52:e2:fd:c5:39:97:df:2a:fd:92:cc:c5:
                    38:94:12:8d:75:b0:24:55:66:89:1f:db:3a:60:f1:
                    76:ba:a8:f9:1e:a6:73:fc:b3:d4:94:33:7c:5d:d5:
                    d4:e7:9a:b9:36:66:f7:a4:2b:0c:4a:b4:17:75:5e:
                    36:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:12:75:DB:AD:91:98:EC:A1:E9:11:7E:84:5C:B6:B7:E5:1A:97:F4
            X509v3 Authority Key Identifier:
                keyid:D3:98:42:9B:49:7D:38:DB:EC:7E:F1:48:48:B7:4E:D6:DA:E1:E2:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/37658aec-0d40-490e-bb63-343e46c3a17a/2/D398429B497D38DBEC7EF14848B74ED6DAE1E2ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/D398429B497D38DBEC7EF14848B74ED6DAE1E2ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/37658aec-0d40-490e-bb63-343e46c3a17a/2/326131313a323963303a393030363a3a2f34382d3438203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:29c0:9006::/48

    Signature Algorithm: sha256WithRSAEncryption
         06:3a:a6:18:bb:d1:a0:3c:76:0d:61:72:21:b2:e2:e0:f2:4a:
         0a:bb:70:23:f5:ea:b8:fd:e5:c4:98:6f:21:58:cc:72:df:c5:
         02:53:82:85:a9:5d:82:1e:97:b7:c0:ff:5e:df:93:88:cc:b9:
         1f:6e:bf:a7:6b:c1:85:d7:2d:74:76:e4:51:ac:db:a6:96:13:
         21:21:0e:92:d0:bb:4a:d6:92:87:b0:06:d9:0f:8b:df:71:af:
         b8:06:f4:f1:3a:91:d4:6b:25:40:21:35:2b:7e:52:15:52:04:
         43:3c:5d:9a:88:1d:54:09:c6:d9:b3:b2:61:68:f4:98:b9:86:
         e5:f5:bc:30:5d:5a:d3:81:a3:46:7a:1b:59:4e:c3:cd:59:45:
         47:79:b3:4d:71:5e:7d:05:13:08:f1:c9:21:8a:50:75:9a:2f:
         d2:c2:2d:66:13:c9:3b:d5:ba:cc:d1:4a:6b:08:a9:e2:6f:47:
         76:a4:fe:fb:76:37:af:3a:a6:2c:74:30:eb:76:16:b5:b7:f9:
         3f:67:a5:b5:e9:af:29:01:05:05:2d:99:95:0d:f7:24:1d:eb:
         a9:13:35:57:72:7a:74:e1:34:81:39:4d:78:c4:a7:93:05:dd:
         d1:bc:12:72:e6:24:88:e7:6f:b0:19:33:31:4a:e3:6d:23:41:
         28:b0:c2:e3
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgIUc4gkriK6XqCVIE+IQ3TU+JLb75EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM5ODQyOUI0OTdEMzhEQkVDN0VGMTQ4NDhCNzRFRDZE
QUUxRTJFRDAeFw0yMzExMjYxMDUyMjlaFw0yNDExMjQxMDU3MjlaMDMxMTAvBgNV
BAMTKDA0MTI3NURCQUQ5MTk4RUNBMUU5MTE3RTg0NUNCNkI3RTUxQTk3RjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbbsc2fThz5JpCDHD/i+d3SFnK
t0V1EYlfy4TjimaxwyuBMJ3YW1P6AL7/Z+/HhDmS5Nx90yrDtykJQ7YwE3Rtsezo
z4m9njS36O0+dolAdOIFxPZyCKi0Ck1f5VuYZE/exAoiIOK+3E0LQdMlzYZIvf3E
8ZuB3uCO8sM+mI74RYDC6Xn+rQjgxCmj9Lp18AtWVnpTKgzOU8sPhplsSUGoWo9I
ML6hiVfnvYP3Rb9kpmO/2ZYupzPkWXJBuBNxby7ZDX5wmlLi/cU5l98q/ZLMxTiU
Eo11sCRVZokf2zpg8Xa6qPkepnP8s9SUM3xd1dTnmrk2ZvekKwxKtBd1XjaNAgMB
AAGjggKDMIICfzAdBgNVHQ4EFgQUBBJ1262RmOyh6RF+hFy2t+Ual/QwHwYDVR0j
BBgwFoAU05hCm0l9ONvsfvFISLdO1trh4u0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzc2NThhZWMtMGQ0MC00OTBlLWJiNjMtMzQzZTQ2YzNh
MTdhLzIvRDM5ODQyOUI0OTdEMzhEQkVDN0VGMTQ4NDhCNzRFRDZEQUUxRTJFRC5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84MTExNWJjNi0xMGY2LTRh
ZjMtYmEwOS04YjY4N2E1NmZiZjUvMC9EMzk4NDI5QjQ5N0QzOERCRUM3RUYxNDg0
OEI3NEVENkRBRTFFMkVELmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF
BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS8zNzY1OGFlYy0wZDQwLTQ5MGUtYmI2My0zNDNlNDZjM2ExN2EvMi8zMjYxMzEz
MTNhMzIzOTYzMzAzYTM5MzAzMDM2M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzQz
NzMyMzczMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB
BwEB/wQTMBEwDwQCAAIwCQMHACoRKcCQBjANBgkqhkiG9w0BAQsFAAOCAQEABjqm
GLvRoDx2DWFyIbLi4PJKCrtwI/XquP3lxJhvIVjMct/FAlOChaldgh6Xt8D/Xt+T
iMy5H26/p2vBhdctdHbkUazbppYTISEOktC7StaSh7AG2Q+L33GvuAb08TqR1Gsl
QCE1K35SFVIEQzxdmogdVAnG2bOyYWj0mLmG5fW8MF1a04GjRnobWU7DzVlFR3mz
TXFefQUTCPHJIYpQdZov0sItZhPJO9W6zNFKawip4m9HdqT++3Y3rzqmLHQw63YW
tbf5P2eltemvKQEFBS2ZlQ33JB3rqRM1V3J6dOE0gTlNeMSnkwXd0bwScuYkiOdv
sBkzMUrjbSNBKLDC4w==
-----END CERTIFICATE-----