Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/37658aec-0d40-490e-bb63-343e46c3a17a/2/326131313a323963303a393062383a3a2f34382d3438203d3e203437323732.roa
File:                     326131313a323963303a393062383a3a2f34382d3438203d3e203437323732.roa (raw, json)
Hash identifier:          PI3w9wsuMS5Tg/y3vYieyJraLDrz6aFQbAuuU+9dk8s=
Subject key identifier:   26:A4:D1:FD:6B:48:EC:D1:2B:BA:6D:4A:15:09:E4:9E:A6:22:1B:65
Certificate issuer:       /CN=D398429B497D38DBEC7EF14848B74ED6DAE1E2ED
Certificate serial:       29224EDA7C12F9195C4A25D085711CB54A023134
Authority key identifier: D3:98:42:9B:49:7D:38:DB:EC:7E:F1:48:48:B7:4E:D6:DA:E1:E2:ED
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/D398429B497D38DBEC7EF14848B74ED6DAE1E2ED.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/37658aec-0d40-490e-bb63-343e46c3a17a/2/326131313a323963303a393062383a3a2f34382d3438203d3e203437323732.roa
Signing time:             Sun 26 Nov 2023 10:57:28 +0000
ROA not before:           Sun 26 Nov 2023 10:52:28 +0000
ROA not after:            Sun 24 Nov 2024 10:57:28 +0000
asID:                     47272
IP address blocks:        2a11:29c0:90b8::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:22:4e:da:7c:12:f9:19:5c:4a:25:d0:85:71:1c:b5:4a:02:31:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D398429B497D38DBEC7EF14848B74ED6DAE1E2ED
        Validity
            Not Before: Nov 26 10:52:28 2023 GMT
            Not After : Nov 24 10:57:28 2024 GMT
        Subject: CN=26A4D1FD6B48ECD12BBA6D4A1509E49EA6221B65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:bd:6e:f9:db:bc:00:eb:09:17:9d:d1:d8:cf:
                    1d:66:28:69:58:0a:74:fc:50:e5:9d:9c:1d:09:0c:
                    94:b9:14:b8:96:2c:04:2f:fd:27:21:cf:2c:dc:d1:
                    25:dd:2c:08:e4:b7:36:c0:8c:f6:8b:3e:52:ba:4e:
                    37:41:84:fd:be:ee:74:06:de:7d:d7:73:fc:07:62:
                    7d:e1:be:bf:68:b7:99:b3:42:f3:4b:13:f6:0d:be:
                    f4:a0:b4:0d:12:be:e7:6d:a3:fd:a8:ef:37:50:31:
                    96:d0:0d:20:f6:09:2d:f4:9c:86:60:be:02:59:51:
                    5e:1d:88:77:73:59:58:0d:4c:c3:cc:7b:30:6e:e8:
                    a5:49:b4:e2:cf:48:7c:5e:0f:48:52:3c:64:58:7b:
                    96:32:79:af:c7:b6:f8:ef:4c:c6:55:4f:67:56:2f:
                    ad:97:7a:9d:57:aa:ab:24:fc:3a:8c:85:0c:3b:c5:
                    64:8c:59:b0:e0:41:53:9d:ee:71:90:e0:7f:97:da:
                    99:8f:34:12:bb:3a:86:c8:4a:9f:04:92:f1:c1:2c:
                    63:92:79:54:c6:87:90:0a:eb:9d:d0:3f:e3:76:e6:
                    e4:84:92:4c:de:ac:96:65:39:c0:f7:ba:a3:fb:9d:
                    8c:e6:d7:24:71:d3:88:b2:5a:b5:8b:84:13:59:a4:
                    a5:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:A4:D1:FD:6B:48:EC:D1:2B:BA:6D:4A:15:09:E4:9E:A6:22:1B:65
            X509v3 Authority Key Identifier:
                keyid:D3:98:42:9B:49:7D:38:DB:EC:7E:F1:48:48:B7:4E:D6:DA:E1:E2:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/37658aec-0d40-490e-bb63-343e46c3a17a/2/D398429B497D38DBEC7EF14848B74ED6DAE1E2ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/D398429B497D38DBEC7EF14848B74ED6DAE1E2ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/37658aec-0d40-490e-bb63-343e46c3a17a/2/326131313a323963303a393062383a3a2f34382d3438203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:29c0:90b8::/48

    Signature Algorithm: sha256WithRSAEncryption
         21:4d:f1:01:27:b8:e8:cd:1c:4f:68:d0:78:ae:a0:fc:c7:7c:
         ab:c8:ec:a5:6e:0a:2d:2f:52:af:55:38:6a:56:7e:ff:c5:7a:
         02:fd:3e:86:09:b9:68:bd:7d:b9:fb:e7:07:44:a2:38:76:ab:
         0e:16:34:5e:9c:8d:97:6d:12:e3:aa:e1:55:dd:cc:70:04:91:
         a1:9a:c3:cf:4f:74:1e:24:62:90:70:ac:77:0c:96:2c:ba:e0:
         41:6e:46:1d:12:fc:6d:87:01:eb:25:c3:ff:04:0e:d8:f7:12:
         74:3b:cc:99:8e:53:1a:de:ad:ec:7c:f4:f8:a0:ec:2e:a8:9d:
         9b:20:73:28:ea:63:5b:42:84:bf:c1:52:22:c2:ab:e6:d7:40:
         e7:be:54:47:31:13:5b:31:9d:fb:9d:86:99:68:29:0c:7d:a5:
         cd:87:65:fb:41:45:23:f7:4f:d1:d2:92:fc:09:90:06:c6:c8:
         b9:be:14:a4:d0:04:cd:43:cd:87:76:48:d7:01:11:09:b1:16:
         8a:20:fe:24:dc:91:99:6c:80:04:e1:6a:aa:34:dd:f0:d2:d8:
         1b:23:5d:57:07:a0:61:1d:9f:dd:f0:2e:00:17:a6:b2:31:3e:
         57:d5:69:43:10:e9:0f:af:2d:6a:e7:bb:ba:e2:1f:2e:22:75:
         f0:d3:4e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----