Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/37658aec-0d40-490e-bb63-343e46c3a17a/2/326131313a323963303a393062393a3a2f34382d3438203d3e203437323732.roa
File:                     326131313a323963303a393062393a3a2f34382d3438203d3e203437323732.roa (raw, json)
Hash identifier:          9UcknJN2cXaSrnkeAH1c2PP4ApWjMUy8g9R8Z4c2dZw=
Subject key identifier:   22:9A:F5:CA:15:87:49:FB:26:18:CE:0D:BB:67:D5:85:67:12:7A:C9
Certificate issuer:       /CN=D398429B497D38DBEC7EF14848B74ED6DAE1E2ED
Certificate serial:       0262B1F9869EC9F23CF8FF8EF9C4F089BCC0D7C4
Authority key identifier: D3:98:42:9B:49:7D:38:DB:EC:7E:F1:48:48:B7:4E:D6:DA:E1:E2:ED
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/D398429B497D38DBEC7EF14848B74ED6DAE1E2ED.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/37658aec-0d40-490e-bb63-343e46c3a17a/2/326131313a323963303a393062393a3a2f34382d3438203d3e203437323732.roa
Signing time:             Sun 26 Nov 2023 10:57:29 +0000
ROA not before:           Sun 26 Nov 2023 10:52:29 +0000
ROA not after:            Sun 24 Nov 2024 10:57:29 +0000
asID:                     47272
IP address blocks:        2a11:29c0:90b9::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:62:b1:f9:86:9e:c9:f2:3c:f8:ff:8e:f9:c4:f0:89:bc:c0:d7:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D398429B497D38DBEC7EF14848B74ED6DAE1E2ED
        Validity
            Not Before: Nov 26 10:52:29 2023 GMT
            Not After : Nov 24 10:57:29 2024 GMT
        Subject: CN=229AF5CA158749FB2618CE0DBB67D58567127AC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3f:d4:61:e1:e4:40:5a:d3:c2:ee:69:e0:ec:
                    fc:20:ca:83:3a:ad:dc:cc:aa:69:28:9e:a0:67:36:
                    e0:c6:f3:88:ed:8e:3c:34:1b:2e:30:95:bc:28:76:
                    ee:ff:c0:81:aa:40:6f:d4:40:3a:11:56:2a:11:ab:
                    9a:75:54:9f:da:e7:7e:be:9a:44:c1:cf:7e:3f:18:
                    bb:62:6a:fe:2f:96:0e:c8:3d:76:72:a7:80:a0:3d:
                    72:27:f6:17:55:3c:f3:6f:55:ac:91:ef:ec:0f:c5:
                    51:d5:14:ba:25:d3:7d:ef:95:2b:7c:e8:75:d7:37:
                    87:ee:39:f7:50:4d:cc:d1:5c:3a:47:52:18:af:64:
                    32:d2:3a:00:00:93:f2:32:b3:1c:6e:0c:b0:04:ee:
                    b4:1c:5b:c4:41:92:58:e2:8c:a1:3a:84:ea:c7:25:
                    03:8e:3a:5f:15:fc:42:ca:c1:10:1d:55:15:52:52:
                    06:03:d5:b2:3a:b3:01:65:60:11:f0:34:b1:39:aa:
                    e9:9d:e1:a3:01:a4:f9:89:4c:2c:52:6d:d5:15:88:
                    70:c4:bd:9f:ba:eb:3c:b7:f3:bd:fe:f0:bd:82:c4:
                    9e:68:d1:1d:13:0d:10:b5:fb:71:37:c9:52:0b:b8:
                    5f:4e:5c:6b:c7:c7:5d:8f:40:01:f1:29:93:c4:ff:
                    ba:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:9A:F5:CA:15:87:49:FB:26:18:CE:0D:BB:67:D5:85:67:12:7A:C9
            X509v3 Authority Key Identifier:
                keyid:D3:98:42:9B:49:7D:38:DB:EC:7E:F1:48:48:B7:4E:D6:DA:E1:E2:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/37658aec-0d40-490e-bb63-343e46c3a17a/2/D398429B497D38DBEC7EF14848B74ED6DAE1E2ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/D398429B497D38DBEC7EF14848B74ED6DAE1E2ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/37658aec-0d40-490e-bb63-343e46c3a17a/2/326131313a323963303a393062393a3a2f34382d3438203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:29c0:90b9::/48

    Signature Algorithm: sha256WithRSAEncryption
         ae:3d:34:08:f0:3e:27:55:1a:40:dc:7e:2d:7d:3d:9e:01:72:
         4b:6b:32:d8:f7:ba:71:e3:0c:70:ab:8b:4f:fc:08:44:02:e8:
         73:10:a2:44:80:67:fc:bc:31:c6:bf:5d:cf:bd:e2:4d:72:24:
         19:fc:2e:d8:b1:fc:bf:51:b3:c1:12:fe:b0:4e:8e:21:20:1a:
         7e:c3:8c:cf:44:e5:46:c1:ac:d6:8d:a0:67:b2:a8:0d:e8:17:
         cf:70:77:03:27:94:d0:4b:d6:2d:4a:c1:5b:0c:53:8d:07:fd:
         60:1e:4c:5e:66:7b:2a:89:6b:51:a5:20:6e:db:ca:7a:31:a7:
         60:a2:a6:4a:f7:72:c4:7d:fe:55:27:34:10:38:59:46:c5:15:
         a5:41:ff:cd:b6:33:7a:ed:65:00:16:cf:b7:3d:e2:6e:c1:e4:
         c8:63:fb:b8:f4:4b:0d:f9:8e:ee:99:53:35:e0:60:f2:ba:8f:
         ee:d7:3c:e4:50:71:ce:d9:87:26:da:7c:c7:9c:46:cb:28:80:
         ea:4c:57:db:b6:62:b3:7f:32:40:fb:21:4f:f7:c0:d8:50:c8:
         69:a9:97:2e:63:78:ec:73:a0:21:e2:88:01:89:f1:f2:66:ea:
         1e:e5:ee:ba:f5:71:54:3c:aa:ab:8f:4c:2b:9d:90:13:42:85:
         a5:9d:44:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----