Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/37658aec-0d40-490e-bb63-343e46c3a17a/2/326131313a323963303a396430303a3a2f34302d3430203d3e203537313130.roa
File:                     326131313a323963303a396430303a3a2f34302d3430203d3e203537313130.roa (raw, json)
Hash identifier:          X5wwqoSWWfvkQwTqEj+mxjunFQPHw8Q84FckUkWTalE=
Subject key identifier:   7D:46:B9:7F:F8:C5:5A:3C:4A:7C:65:3C:CD:03:00:79:B9:09:01:8F
Certificate issuer:       /CN=D398429B497D38DBEC7EF14848B74ED6DAE1E2ED
Certificate serial:       5196BB7530EB8B109D7475ABA05CA71B265E1796
Authority key identifier: D3:98:42:9B:49:7D:38:DB:EC:7E:F1:48:48:B7:4E:D6:DA:E1:E2:ED
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/D398429B497D38DBEC7EF14848B74ED6DAE1E2ED.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/37658aec-0d40-490e-bb63-343e46c3a17a/2/326131313a323963303a396430303a3a2f34302d3430203d3e203537313130.roa
Signing time:             Sun 26 Nov 2023 10:57:30 +0000
ROA not before:           Sun 26 Nov 2023 10:52:30 +0000
ROA not after:            Sun 24 Nov 2024 10:57:30 +0000
asID:                     57110
IP address blocks:        2a11:29c0:9d00::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:96:bb:75:30:eb:8b:10:9d:74:75:ab:a0:5c:a7:1b:26:5e:17:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D398429B497D38DBEC7EF14848B74ED6DAE1E2ED
        Validity
            Not Before: Nov 26 10:52:30 2023 GMT
            Not After : Nov 24 10:57:30 2024 GMT
        Subject: CN=7D46B97FF8C55A3C4A7C653CCD030079B909018F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:11:73:a3:f1:8d:ef:da:c3:4d:3f:98:07:d2:
                    ba:31:75:66:5c:69:9d:a5:04:79:9e:76:fc:b1:0a:
                    b8:46:59:d4:fd:78:1e:aa:58:fa:d6:3b:3b:e8:fb:
                    2f:8d:3b:f5:63:69:06:1b:70:71:4b:c2:8f:07:31:
                    bb:03:02:d2:39:0e:da:3e:35:48:52:c0:31:52:01:
                    7d:bf:75:80:b6:a1:ad:89:df:7e:e8:3d:2e:10:3e:
                    e1:c7:1f:9d:b6:9c:c6:00:0a:05:30:db:e2:87:3f:
                    9e:a0:5e:6b:36:8f:ee:d6:85:4c:e1:4a:40:64:93:
                    6c:f0:83:9d:70:f4:be:2b:e1:67:91:25:72:e8:37:
                    bb:ed:12:07:dc:c9:07:05:00:46:cd:94:bc:18:de:
                    ce:e6:b9:b7:01:e2:d7:04:f7:fb:e5:f3:e6:65:3e:
                    06:c3:d1:39:b3:44:89:89:57:f2:f5:57:1b:8b:b4:
                    d1:f8:5c:70:69:8d:34:2f:3a:6b:87:3d:61:03:62:
                    e0:25:db:96:16:20:12:04:74:c5:ee:8b:e7:34:3a:
                    01:72:2f:25:4e:43:06:24:2c:9a:34:2c:64:72:53:
                    80:59:14:fd:00:65:37:16:4f:cf:47:4a:9c:38:f9:
                    05:98:ab:0d:92:5f:a8:e8:1b:fc:44:d7:8f:b6:e1:
                    ff:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:46:B9:7F:F8:C5:5A:3C:4A:7C:65:3C:CD:03:00:79:B9:09:01:8F
            X509v3 Authority Key Identifier:
                keyid:D3:98:42:9B:49:7D:38:DB:EC:7E:F1:48:48:B7:4E:D6:DA:E1:E2:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/37658aec-0d40-490e-bb63-343e46c3a17a/2/D398429B497D38DBEC7EF14848B74ED6DAE1E2ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/D398429B497D38DBEC7EF14848B74ED6DAE1E2ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/37658aec-0d40-490e-bb63-343e46c3a17a/2/326131313a323963303a396430303a3a2f34302d3430203d3e203537313130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:29c0:9d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         74:a3:ef:40:27:b9:1a:67:63:c8:57:ef:ef:58:09:94:2f:bf:
         72:57:6e:a7:4a:d3:8e:cc:e8:2c:ce:de:3e:ba:d1:8f:2e:18:
         62:fd:dc:03:64:81:bc:e7:0b:5b:10:c1:66:ad:f4:e9:ae:6b:
         a3:85:3a:65:29:2b:1e:81:63:ad:d5:c8:62:48:7b:14:e5:df:
         1a:8d:9c:81:64:b2:d8:f5:ad:06:f6:de:5b:e3:1c:cb:64:ce:
         a7:b7:e7:4e:7a:f9:e5:36:b8:7f:d2:9b:a2:77:34:ac:5e:8b:
         3d:38:15:68:78:c7:a8:d0:d6:e8:03:60:78:c7:b8:9e:f8:3b:
         74:68:c0:62:8c:fb:d5:ab:48:ee:87:15:af:27:19:e7:61:9a:
         13:aa:c1:ec:b4:6b:c8:6d:d5:e1:60:b1:70:77:3a:9c:70:0e:
         a1:53:cc:29:9b:e6:a6:6e:e4:f8:1a:9e:83:04:2b:7e:6d:0d:
         16:86:63:58:61:6f:01:bd:6b:90:0f:8e:ee:4a:5b:16:9b:1f:
         7f:26:15:db:1d:c0:f5:a5:2b:57:ba:91:e0:8b:ce:9e:9c:93:
         e7:0c:31:68:04:79:61:9d:3f:fb:4d:78:3d:d5:43:71:dc:fb:
         bc:04:33:67:17:f9:2b:4b:db:0c:c4:b8:8f:27:15:3f:b5:7c:
         07:e8:e4:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----