Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/37658aec-0d40-490e-bb63-343e46c3a17a/2/326131313a323963303a393062353a3a2f34382d3438203d3e203437323732.roa
File:                     326131313a323963303a393062353a3a2f34382d3438203d3e203437323732.roa (raw, json)
Hash identifier:          6C02JVwJwCMGyYTvy+Ei/evNKicaTYaMW8JrU8xAYeM=
Subject key identifier:   9F:BB:45:35:8A:47:0F:47:F9:70:89:42:A3:72:7B:ED:0A:AD:26:45
Certificate issuer:       /CN=D398429B497D38DBEC7EF14848B74ED6DAE1E2ED
Certificate serial:       041AD422184A3CC5720BE5CB478728E58F21A4F2
Authority key identifier: D3:98:42:9B:49:7D:38:DB:EC:7E:F1:48:48:B7:4E:D6:DA:E1:E2:ED
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/D398429B497D38DBEC7EF14848B74ED6DAE1E2ED.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/37658aec-0d40-490e-bb63-343e46c3a17a/2/326131313a323963303a393062353a3a2f34382d3438203d3e203437323732.roa
Signing time:             Sun 26 Nov 2023 10:57:30 +0000
ROA not before:           Sun 26 Nov 2023 10:52:30 +0000
ROA not after:            Sun 24 Nov 2024 10:57:30 +0000
asID:                     47272
IP address blocks:        2a11:29c0:90b5::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:1a:d4:22:18:4a:3c:c5:72:0b:e5:cb:47:87:28:e5:8f:21:a4:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D398429B497D38DBEC7EF14848B74ED6DAE1E2ED
        Validity
            Not Before: Nov 26 10:52:30 2023 GMT
            Not After : Nov 24 10:57:30 2024 GMT
        Subject: CN=9FBB45358A470F47F9708942A3727BED0AAD2645
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d2:ad:83:b9:59:1a:d4:b8:48:8c:7b:52:7b:
                    f8:17:ae:4a:d5:e7:b6:c7:56:54:e6:39:01:d9:ab:
                    37:c4:a8:2e:c1:3b:b5:00:e2:0e:e8:34:4d:b5:2b:
                    8b:84:40:7a:97:c3:b8:02:5f:e8:7b:9f:2b:90:21:
                    0b:61:9b:31:0d:e7:97:e8:e3:38:89:f9:f0:ab:2d:
                    0c:e9:85:c1:79:61:3e:f5:c1:0f:34:16:c9:3a:83:
                    90:84:2a:6f:48:c3:27:9b:39:82:45:9e:12:32:8f:
                    f1:70:1c:bd:55:21:1f:e7:cc:e2:87:7e:50:1c:d0:
                    29:1c:99:e0:47:b0:f6:0e:a2:f7:b9:5b:e4:a0:53:
                    c2:05:b8:2a:5f:35:41:ec:d9:50:cd:a8:17:ab:2d:
                    81:33:2f:50:bc:54:f6:10:52:3d:7f:aa:e1:03:c6:
                    24:e1:31:cb:1a:38:12:b8:2c:27:ad:f6:10:01:21:
                    52:54:00:17:c1:be:9b:02:92:85:88:09:1b:7b:82:
                    a7:82:9b:9a:04:8c:49:ff:70:3e:fc:bc:2a:2b:2d:
                    52:e1:01:2f:76:8f:2d:1c:d7:3a:03:9f:f7:4f:fa:
                    99:f7:2e:73:81:3b:79:76:76:53:fc:ed:c5:23:af:
                    bf:a3:c1:81:b4:b0:48:b7:ce:ed:4d:c1:81:4f:3b:
                    b9:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:BB:45:35:8A:47:0F:47:F9:70:89:42:A3:72:7B:ED:0A:AD:26:45
            X509v3 Authority Key Identifier:
                keyid:D3:98:42:9B:49:7D:38:DB:EC:7E:F1:48:48:B7:4E:D6:DA:E1:E2:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/37658aec-0d40-490e-bb63-343e46c3a17a/2/D398429B497D38DBEC7EF14848B74ED6DAE1E2ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/D398429B497D38DBEC7EF14848B74ED6DAE1E2ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/37658aec-0d40-490e-bb63-343e46c3a17a/2/326131313a323963303a393062353a3a2f34382d3438203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:29c0:90b5::/48

    Signature Algorithm: sha256WithRSAEncryption
         58:0d:ed:cb:4f:b1:46:86:ce:aa:02:b9:d6:1d:4a:0e:3c:03:
         2a:7c:5a:e4:ab:4b:b6:f5:bb:6a:33:1e:9b:80:9d:41:36:45:
         ff:29:1c:6e:57:01:4f:20:1d:0f:bc:9a:4e:68:38:b7:b5:5d:
         2b:89:fb:22:bb:de:68:be:b8:a5:3b:cf:19:39:4b:65:8c:df:
         c0:b2:7d:58:97:5a:b9:8f:ec:1d:c7:68:be:b6:9c:d8:29:d2:
         53:46:ad:4b:21:34:90:fe:09:fe:22:be:33:32:ba:f0:6e:51:
         21:d2:4f:06:e4:fb:a2:e5:13:cb:d9:5c:51:a3:66:c0:0b:27:
         25:91:d1:95:51:fd:b1:7f:bc:4c:76:1e:97:ba:97:6a:13:a4:
         93:6c:c6:ae:3d:37:a5:d8:10:72:c0:74:b6:6f:d1:19:b7:19:
         54:d3:a7:3b:fd:14:bc:35:c8:27:8a:4d:e2:76:f3:86:07:eb:
         e8:89:36:73:c7:7f:b1:e8:ba:6e:88:aa:d2:96:65:7d:f3:3b:
         b1:c5:76:70:e9:c4:1d:67:23:d6:09:af:9f:9e:fb:cd:71:68:
         57:39:c6:a7:0f:b7:fa:9b:60:85:80:8a:28:78:39:bf:54:a4:
         40:e9:2c:48:f4:db:5e:91:23:d9:45:b6:2f:0d:88:8c:71:f0:
         57:09:40:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----