Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/37658aec-0d40-490e-bb63-343e46c3a17a/2/326131313a323963303a393062323a3a2f34382d3438203d3e203437323732.roa
File:                     326131313a323963303a393062323a3a2f34382d3438203d3e203437323732.roa (raw, json)
Hash identifier:          woHke+LpOMHOv0a4HRSlrUZ1XrUY5z6XkJQ0TnPQG7g=
Subject key identifier:   73:13:D8:90:39:CA:CA:2D:75:86:EE:C2:67:FA:D1:27:A3:3A:6A:FB
Certificate issuer:       /CN=D398429B497D38DBEC7EF14848B74ED6DAE1E2ED
Certificate serial:       1600C4263D0E8F034419457EB26F572A539D3D15
Authority key identifier: D3:98:42:9B:49:7D:38:DB:EC:7E:F1:48:48:B7:4E:D6:DA:E1:E2:ED
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/D398429B497D38DBEC7EF14848B74ED6DAE1E2ED.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/37658aec-0d40-490e-bb63-343e46c3a17a/2/326131313a323963303a393062323a3a2f34382d3438203d3e203437323732.roa
Signing time:             Sun 26 Nov 2023 10:57:30 +0000
ROA not before:           Sun 26 Nov 2023 10:52:30 +0000
ROA not after:            Sun 24 Nov 2024 10:57:30 +0000
asID:                     47272
IP address blocks:        2a11:29c0:90b2::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:00:c4:26:3d:0e:8f:03:44:19:45:7e:b2:6f:57:2a:53:9d:3d:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D398429B497D38DBEC7EF14848B74ED6DAE1E2ED
        Validity
            Not Before: Nov 26 10:52:30 2023 GMT
            Not After : Nov 24 10:57:30 2024 GMT
        Subject: CN=7313D89039CACA2D7586EEC267FAD127A33A6AFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:cc:0d:b6:86:00:59:a4:b9:ab:30:3d:52:f7:
                    76:af:f9:fa:97:db:cf:e3:14:de:50:41:49:49:67:
                    f8:8b:2b:ef:b5:53:5f:ee:0e:23:75:49:ee:bc:ce:
                    5b:1f:b0:fa:6f:48:97:24:ab:e0:e0:08:2a:c5:8e:
                    2e:41:25:4d:57:f5:a8:56:c4:b5:79:0a:fc:80:9f:
                    90:ad:94:e9:26:e5:cc:97:7b:39:f1:2f:e5:5c:fc:
                    2a:c9:94:26:26:e5:34:57:a5:51:b2:1f:62:cd:f3:
                    85:3c:45:40:aa:46:4a:98:86:b6:92:4f:38:09:cc:
                    f5:29:9b:b1:00:52:2f:b6:74:a9:f7:b7:74:2c:ac:
                    7d:d3:a2:89:d0:e3:33:4e:cd:9e:bc:23:65:3e:86:
                    91:31:d3:eb:19:9f:1e:6c:ec:ec:4f:1e:36:d0:7e:
                    a0:1a:3e:51:ef:af:66:a1:8c:d3:e3:8f:75:6a:e8:
                    b4:55:2e:c0:84:c2:24:e0:04:dc:9f:80:23:51:e4:
                    58:fc:5a:f6:6c:16:a9:2f:7f:96:62:ab:0d:9d:15:
                    7a:03:ed:08:70:96:40:ec:b9:13:e3:37:60:4a:b8:
                    8c:5f:72:59:08:05:a7:f4:42:cc:5c:57:aa:01:f8:
                    e9:c1:b0:5a:14:7f:c8:4e:60:31:69:0f:b8:78:49:
                    8a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:13:D8:90:39:CA:CA:2D:75:86:EE:C2:67:FA:D1:27:A3:3A:6A:FB
            X509v3 Authority Key Identifier:
                keyid:D3:98:42:9B:49:7D:38:DB:EC:7E:F1:48:48:B7:4E:D6:DA:E1:E2:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/37658aec-0d40-490e-bb63-343e46c3a17a/2/D398429B497D38DBEC7EF14848B74ED6DAE1E2ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/D398429B497D38DBEC7EF14848B74ED6DAE1E2ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/37658aec-0d40-490e-bb63-343e46c3a17a/2/326131313a323963303a393062323a3a2f34382d3438203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:29c0:90b2::/48

    Signature Algorithm: sha256WithRSAEncryption
         4c:ee:6b:94:d4:8c:6b:32:72:11:14:04:ab:02:e4:65:a3:72:
         1f:8c:aa:35:25:fc:01:07:a8:70:f7:69:85:4f:d5:9a:da:92:
         b3:94:20:ff:1b:d6:10:93:6a:73:66:c1:81:75:ae:38:b2:1b:
         9f:bb:4d:16:a8:e2:b5:c0:dc:e8:56:67:c6:e7:e5:e4:d3:55:
         07:39:40:15:f8:0b:fb:ba:dc:f1:87:4e:4f:48:5a:e5:f1:a5:
         63:9b:24:f5:f1:1a:99:38:16:80:7b:51:df:a9:87:ae:87:20:
         4f:d9:e3:5a:12:bf:61:bf:5a:64:b6:86:aa:8f:05:d3:1f:4e:
         d4:dc:1c:28:36:16:38:74:cf:27:83:5f:c4:fa:99:80:ba:22:
         a8:96:fd:63:92:58:3a:8f:8d:e1:08:1c:63:16:09:34:fa:d0:
         ae:15:fc:2f:c3:df:20:8b:02:e2:ca:86:9e:15:c1:6e:3f:e5:
         62:a6:8a:7f:c8:c1:17:3d:f5:1e:2e:11:3d:fc:c2:59:f4:95:
         22:e0:d1:a3:a2:9b:ec:8e:19:f0:02:d8:db:79:0f:4f:1b:a2:
         59:c4:1b:a8:e1:3a:66:b3:30:9a:fe:b2:b1:0f:3c:b2:9a:48:
         69:46:64:be:43:a9:ac:03:44:be:80:4b:9f:58:35:7c:7d:aa:
         49:a2:10:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----