Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/37658aec-0d40-490e-bb63-343e46c3a17a/2/326131313a323963303a393062313a3a2f34382d3438203d3e203437323732.roa
File:                     326131313a323963303a393062313a3a2f34382d3438203d3e203437323732.roa (raw, json)
Hash identifier:          SCMM3WEvVDRRSgA6Hh0qzxPYiQdhR9MNr5cREhqicfU=
Subject key identifier:   57:CE:EE:0A:47:C5:5E:18:89:9C:4B:B8:1C:81:F7:8D:2C:7E:09:21
Certificate issuer:       /CN=D398429B497D38DBEC7EF14848B74ED6DAE1E2ED
Certificate serial:       710F195594EA80C0DFA3FB3D2100CEF665126AE9
Authority key identifier: D3:98:42:9B:49:7D:38:DB:EC:7E:F1:48:48:B7:4E:D6:DA:E1:E2:ED
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/D398429B497D38DBEC7EF14848B74ED6DAE1E2ED.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/37658aec-0d40-490e-bb63-343e46c3a17a/2/326131313a323963303a393062313a3a2f34382d3438203d3e203437323732.roa
Signing time:             Sun 26 Nov 2023 10:57:28 +0000
ROA not before:           Sun 26 Nov 2023 10:52:28 +0000
ROA not after:            Sun 24 Nov 2024 10:57:28 +0000
asID:                     47272
IP address blocks:        2a11:29c0:90b1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:0f:19:55:94:ea:80:c0:df:a3:fb:3d:21:00:ce:f6:65:12:6a:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D398429B497D38DBEC7EF14848B74ED6DAE1E2ED
        Validity
            Not Before: Nov 26 10:52:28 2023 GMT
            Not After : Nov 24 10:57:28 2024 GMT
        Subject: CN=57CEEE0A47C55E18899C4BB81C81F78D2C7E0921
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:63:6b:93:7b:30:d6:6c:e9:82:6b:7d:8c:03:
                    e7:03:8a:1f:eb:fe:2b:bf:67:c2:b0:4f:b5:0b:c9:
                    e6:01:db:76:af:bd:73:65:d9:69:74:db:f2:fa:0b:
                    b7:2f:23:11:7f:fd:ed:f8:c4:8e:ca:eb:fe:52:85:
                    ac:45:5e:44:69:54:d6:1f:d3:5d:be:f7:19:2d:45:
                    8a:b6:69:6b:b7:c0:26:bc:9f:7c:1f:07:09:43:2f:
                    6e:24:8d:d4:3c:94:80:ea:7e:63:39:48:cf:d9:a6:
                    fd:1c:cc:88:d7:d2:d2:48:e6:ed:a3:e3:2d:b3:d4:
                    07:59:f5:87:77:20:8f:d0:47:4f:5c:93:69:9c:eb:
                    fc:ad:23:09:5a:8f:26:cb:74:3f:7d:04:f2:b0:e0:
                    c7:a7:fa:20:0d:06:59:42:7a:1c:7c:45:f5:75:f5:
                    be:6b:b6:12:38:e8:da:df:eb:d3:d7:39:f4:bb:60:
                    13:9c:6d:94:d5:cc:18:94:df:13:38:31:b0:40:bb:
                    5d:69:99:f5:d8:57:58:56:40:e5:c0:4f:04:df:b9:
                    88:1b:da:9d:be:34:b3:46:13:f7:22:09:81:69:4b:
                    49:ce:30:20:7e:d6:b7:1c:99:81:16:a8:f8:a2:00:
                    d1:23:2f:d6:5a:51:40:bf:e6:68:26:b5:b0:97:66:
                    e4:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:CE:EE:0A:47:C5:5E:18:89:9C:4B:B8:1C:81:F7:8D:2C:7E:09:21
            X509v3 Authority Key Identifier:
                keyid:D3:98:42:9B:49:7D:38:DB:EC:7E:F1:48:48:B7:4E:D6:DA:E1:E2:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/37658aec-0d40-490e-bb63-343e46c3a17a/2/D398429B497D38DBEC7EF14848B74ED6DAE1E2ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/D398429B497D38DBEC7EF14848B74ED6DAE1E2ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/37658aec-0d40-490e-bb63-343e46c3a17a/2/326131313a323963303a393062313a3a2f34382d3438203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:29c0:90b1::/48

    Signature Algorithm: sha256WithRSAEncryption
         bc:58:39:93:18:1a:76:fa:72:5b:b2:bb:db:a8:e8:c4:77:1a:
         6e:62:0c:9e:69:d6:66:40:39:1e:0e:d4:43:1c:fd:1e:e5:a9:
         25:c7:5a:55:66:41:27:88:2e:ee:cf:63:b9:e6:03:b1:dd:16:
         85:f3:a9:3a:0c:6a:d3:c4:72:f8:8e:21:4c:e3:0a:0c:ce:66:
         67:43:db:09:0e:d8:a1:bc:af:56:6d:5c:00:cf:78:12:b9:22:
         a9:02:79:2e:24:98:13:8a:4d:6c:11:9d:96:80:b1:af:e6:22:
         10:9f:9a:b7:2b:6f:be:7a:95:00:9d:61:23:5e:eb:79:f4:34:
         4d:4d:5a:5c:98:36:a4:62:ac:15:c5:2f:f8:a9:72:92:6e:12:
         ae:88:63:dc:ae:30:83:e0:77:6a:59:59:c0:15:9f:98:f8:f6:
         aa:60:ed:a3:49:37:ed:b4:c0:d5:f0:cc:18:b9:c5:b5:0d:ed:
         88:18:ad:a8:b3:c3:51:90:d5:53:cf:fb:9b:0c:1e:4e:93:c3:
         b3:39:1a:be:d0:5e:7e:37:20:dc:8b:14:f9:6a:ce:58:bb:92:
         fb:a6:6b:94:aa:21:0d:d9:55:3e:fc:e3:64:d6:fc:39:4f:3e:
         a7:36:10:a4:ca:9f:56:76:a0:fd:07:0b:ed:19:86:18:86:1c:
         98:0d:b6:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----