Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/2/326131313a323963303a393030303a3a2f34342d3434203d3e203437323732.roa
File:                     326131313a323963303a393030303a3a2f34342d3434203d3e203437323732.roa (raw, json)
Hash identifier:          dP5qAZ5c2bX7NcdTLLgZ56SDRmHKypxw7xvXP0nD+Gw=
Subject key identifier:   49:26:D2:8B:7B:F2:C5:E4:F5:E6:24:DC:AA:81:84:CE:C8:1E:A7:84
Certificate issuer:       /CN=04803608395707A6C4A762643198A52C49DF6017
Certificate serial:       29BD94A1CF3D3C969D02B6F2146D9B4C7013E6E7
Authority key identifier: 04:80:36:08:39:57:07:A6:C4:A7:62:64:31:98:A5:2C:49:DF:60:17
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/04803608395707A6C4A762643198A52C49DF6017.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/2/326131313a323963303a393030303a3a2f34342d3434203d3e203437323732.roa
Signing time:             Sat 23 Sep 2023 19:23:06 +0000
ROA not before:           Sat 23 Sep 2023 19:18:06 +0000
ROA not after:            Sat 21 Sep 2024 19:23:06 +0000
asID:                     47272
IP address blocks:        2a11:29c0:9000::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:bd:94:a1:cf:3d:3c:96:9d:02:b6:f2:14:6d:9b:4c:70:13:e6:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04803608395707A6C4A762643198A52C49DF6017
        Validity
            Not Before: Sep 23 19:18:06 2023 GMT
            Not After : Sep 21 19:23:06 2024 GMT
        Subject: CN=4926D28B7BF2C5E4F5E624DCAA8184CEC81EA784
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:46:51:d4:95:f3:5c:c3:79:68:9b:fe:97:bf:
                    59:b6:98:87:ed:02:b5:61:49:81:1a:43:76:4a:86:
                    23:57:bc:67:0b:b5:42:ce:5e:03:2a:be:41:1a:8e:
                    00:5d:c2:5d:cc:b9:2e:8f:2b:e2:57:67:7c:c1:63:
                    d7:79:82:0b:28:d8:e3:2f:07:3d:70:e6:95:98:b4:
                    73:f3:5a:83:21:45:4b:7e:4c:42:80:5f:43:32:8b:
                    85:95:d8:2d:d0:1f:55:70:a2:86:9b:46:1e:3d:b3:
                    5e:9a:ad:98:b8:c0:54:4d:16:2c:7a:ff:7e:d1:64:
                    94:8f:2a:21:f3:c6:d8:51:00:68:60:6c:6a:8a:4c:
                    ed:34:6f:ac:b4:0a:be:a1:8a:c0:c2:76:cf:ee:18:
                    04:ea:2c:f4:d5:bc:5f:a7:11:42:f0:1f:70:2a:36:
                    d1:7e:ec:f3:3f:ce:db:ae:c0:21:53:89:6b:19:59:
                    36:7f:d4:80:e9:a2:29:c0:9a:e5:8e:ac:a4:bc:c6:
                    28:3e:06:05:52:4c:3f:7f:30:2d:67:4e:f7:1b:c4:
                    92:e9:e6:f4:d3:59:eb:94:4d:5d:1d:72:3e:68:80:
                    f6:06:5a:9e:97:82:84:0a:03:3b:b3:b0:41:7b:38:
                    6b:37:ee:b3:30:6a:87:63:9c:10:c0:cb:10:98:89:
                    98:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:26:D2:8B:7B:F2:C5:E4:F5:E6:24:DC:AA:81:84:CE:C8:1E:A7:84
            X509v3 Authority Key Identifier:
                keyid:04:80:36:08:39:57:07:A6:C4:A7:62:64:31:98:A5:2C:49:DF:60:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/2/04803608395707A6C4A762643198A52C49DF6017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/04803608395707A6C4A762643198A52C49DF6017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/2/326131313a323963303a393030303a3a2f34342d3434203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:29c0:9000::/44

    Signature Algorithm: sha256WithRSAEncryption
         0d:f2:dd:a6:2d:42:5d:e9:5a:24:a7:c4:9f:bb:ae:83:db:b1:
         e2:c8:67:e5:9b:cc:91:d0:ab:60:9b:db:ec:0f:61:b4:ac:3a:
         c6:ce:bf:71:38:ae:4e:bf:e4:cc:6d:51:03:4b:47:84:9f:e1:
         3d:cf:e8:e9:ad:5a:7c:b0:4a:86:70:ff:f5:7a:1f:bd:36:67:
         5f:b7:9e:87:a7:9d:79:54:dc:88:c9:83:0a:f2:04:b6:be:89:
         7d:f1:2c:e2:d9:be:87:54:c6:9b:bd:75:b9:1e:2d:fc:cf:b8:
         9a:c1:33:b1:38:3f:ab:df:73:11:4e:73:0b:73:92:d6:54:e2:
         c0:9c:18:e5:a8:f9:42:fc:26:e5:98:c6:c7:9b:8e:08:f4:30:
         14:fd:04:c8:cb:f8:8b:9a:d7:66:1f:a2:d1:61:8b:dc:0b:92:
         02:ec:50:6b:c8:06:85:9d:aa:bb:03:3c:d6:2f:3d:39:ee:e4:
         ec:ad:2b:c1:4b:7b:b1:4f:a9:4c:a7:ab:c0:e9:2d:c2:e4:2c:
         7e:dc:e2:0c:2f:68:13:c0:af:b4:6b:36:57:45:74:7d:18:97:
         f2:c3:a4:15:04:32:ea:c9:7d:52:47:07:3e:02:32:d0:1c:f9:
         85:38:9b:c7:d0:72:6f:92:65:87:3f:d9:33:ef:e0:22:f4:e0:
         f1:bb:ef:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----