Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/37658aec-0d40-490e-bb63-343e46c3a17a/2/326131313a323963303a393062343a3a2f34382d3438203d3e203437323732.roa
File:                     326131313a323963303a393062343a3a2f34382d3438203d3e203437323732.roa (raw, json)
Hash identifier:          5NeONABVJuJFLq1aiy81/KGgvVofXFIn2QxZ1Xwb5hA=
Subject key identifier:   32:BE:95:2C:78:2F:E3:0F:A2:F2:60:CB:F3:2D:E8:78:99:95:A3:08
Certificate issuer:       /CN=D398429B497D38DBEC7EF14848B74ED6DAE1E2ED
Certificate serial:       4CE8C8B581A287052CAD3E4534D79856BC740A2E
Authority key identifier: D3:98:42:9B:49:7D:38:DB:EC:7E:F1:48:48:B7:4E:D6:DA:E1:E2:ED
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/D398429B497D38DBEC7EF14848B74ED6DAE1E2ED.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/37658aec-0d40-490e-bb63-343e46c3a17a/2/326131313a323963303a393062343a3a2f34382d3438203d3e203437323732.roa
Signing time:             Sun 26 Nov 2023 10:57:30 +0000
ROA not before:           Sun 26 Nov 2023 10:52:30 +0000
ROA not after:            Sun 24 Nov 2024 10:57:30 +0000
asID:                     47272
IP address blocks:        2a11:29c0:90b4::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:e8:c8:b5:81:a2:87:05:2c:ad:3e:45:34:d7:98:56:bc:74:0a:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D398429B497D38DBEC7EF14848B74ED6DAE1E2ED
        Validity
            Not Before: Nov 26 10:52:30 2023 GMT
            Not After : Nov 24 10:57:30 2024 GMT
        Subject: CN=32BE952C782FE30FA2F260CBF32DE8789995A308
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7b:f6:e5:ae:65:44:0d:1a:f9:36:30:de:ef:
                    b5:f2:a9:5c:c9:95:92:de:e8:35:26:18:d2:43:68:
                    8a:b3:c7:1d:b9:6c:51:6e:71:1e:d1:68:f6:89:ac:
                    dc:dc:bb:62:b5:ae:06:b6:59:55:d7:b7:8b:cb:42:
                    11:61:6c:70:36:31:12:44:fe:e6:ba:94:17:b0:6f:
                    cd:28:39:14:0d:11:ca:0c:1e:68:ff:d6:a0:86:ed:
                    5f:ea:03:d4:14:20:37:ad:a4:13:14:17:cd:84:12:
                    32:3b:1a:3f:76:44:ee:a2:7f:0b:0f:85:02:61:ed:
                    50:d8:98:76:88:9a:b7:99:eb:73:37:c7:b8:ca:70:
                    40:02:47:cd:bd:99:eb:72:46:a5:21:98:31:92:ed:
                    70:f0:f0:a8:79:fe:37:56:f0:5b:93:a8:4f:73:13:
                    4d:51:d2:8b:46:21:31:a1:2b:32:4a:f8:ac:a6:d4:
                    4d:4b:b8:86:40:07:9a:fb:6c:bf:37:fb:2b:18:ed:
                    a0:8e:c5:59:74:d7:5a:31:5f:4c:b2:13:94:fd:c3:
                    a6:86:c7:df:e3:9b:85:1a:4b:0b:f2:93:7d:30:3f:
                    7f:85:af:39:4b:1f:ab:be:ad:18:59:47:1c:d2:6e:
                    94:3e:1f:10:ce:53:51:ed:52:12:40:cb:ed:92:05:
                    b3:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:BE:95:2C:78:2F:E3:0F:A2:F2:60:CB:F3:2D:E8:78:99:95:A3:08
            X509v3 Authority Key Identifier:
                keyid:D3:98:42:9B:49:7D:38:DB:EC:7E:F1:48:48:B7:4E:D6:DA:E1:E2:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/37658aec-0d40-490e-bb63-343e46c3a17a/2/D398429B497D38DBEC7EF14848B74ED6DAE1E2ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/D398429B497D38DBEC7EF14848B74ED6DAE1E2ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/37658aec-0d40-490e-bb63-343e46c3a17a/2/326131313a323963303a393062343a3a2f34382d3438203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:29c0:90b4::/48

    Signature Algorithm: sha256WithRSAEncryption
         1b:3a:a8:6f:35:53:f4:e9:2f:42:b5:b0:67:d6:2e:b0:5c:c7:
         21:e9:70:d3:65:ad:65:b8:43:99:1f:aa:96:9e:a5:b9:90:8e:
         01:47:d8:2b:50:43:c1:30:3d:78:64:ee:1e:80:bc:7d:00:6d:
         92:30:cc:b6:ee:cb:0a:7e:ce:03:89:2b:77:4d:7c:f9:66:41:
         09:c1:26:68:a0:6f:7b:4f:66:9f:fc:a2:43:51:1b:21:7b:33:
         48:2d:a5:05:10:2c:01:e6:5d:03:06:7d:eb:6c:c6:b6:42:14:
         e0:e8:42:f7:b2:05:9b:bd:f1:2b:66:98:22:4b:a1:89:ca:87:
         1a:98:27:23:37:a3:3d:44:a5:6d:cd:8a:af:42:ca:e6:82:1c:
         81:48:e9:ee:ee:38:06:74:75:22:8f:42:c3:77:ef:2d:62:c0:
         38:db:97:85:12:31:6d:d7:3b:0a:ca:df:0c:ac:1d:54:fc:20:
         d9:56:3e:55:6b:bb:5c:33:56:98:e1:52:94:8a:b6:38:76:18:
         98:c7:05:f0:05:ec:1e:8f:8d:c6:92:ea:85:9e:a6:ce:c9:bc:
         ff:ee:a1:41:b0:f9:40:f0:23:a1:f3:33:7d:f5:12:7a:7d:14:
         28:77:3e:8c:df:65:18:f4:5d:80:d7:e0:51:9a:1b:1b:b7:47:
         3c:4e:bf:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----