Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/2/326131313a323963303a393030303a3a2f34382d3438203d3e203437323732.roa
File:                     326131313a323963303a393030303a3a2f34382d3438203d3e203437323732.roa (raw, json)
Hash identifier:          G5gpmCZ6aFBl4g0lrHiPi/Sqpy0dJ4npakZkbmzi1g4=
Subject key identifier:   9E:9D:92:72:8D:70:A2:91:1C:B0:43:E4:9D:AB:4B:46:5F:F6:3E:C3
Certificate issuer:       /CN=04803608395707A6C4A762643198A52C49DF6017
Certificate serial:       33F8DD26A1C54C8CAAA723CAB4F6AC566FEA690A
Authority key identifier: 04:80:36:08:39:57:07:A6:C4:A7:62:64:31:98:A5:2C:49:DF:60:17
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/04803608395707A6C4A762643198A52C49DF6017.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/2/326131313a323963303a393030303a3a2f34382d3438203d3e203437323732.roa
Signing time:             Sun 15 Oct 2023 19:40:48 +0000
ROA not before:           Sun 15 Oct 2023 19:35:48 +0000
ROA not after:            Sun 13 Oct 2024 19:40:48 +0000
asID:                     47272
IP address blocks:        2a11:29c0:9000::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:f8:dd:26:a1:c5:4c:8c:aa:a7:23:ca:b4:f6:ac:56:6f:ea:69:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04803608395707A6C4A762643198A52C49DF6017
        Validity
            Not Before: Oct 15 19:35:48 2023 GMT
            Not After : Oct 13 19:40:48 2024 GMT
        Subject: CN=9E9D92728D70A2911CB043E49DAB4B465FF63EC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:78:24:f6:c3:55:db:f3:60:b9:ec:b7:a5:06:
                    6f:32:2d:c4:7b:c6:5c:47:b6:b5:bf:53:84:3e:00:
                    ce:6e:35:92:a0:ae:bd:8e:96:58:bd:aa:29:d9:6e:
                    c9:94:b2:06:53:a9:9c:47:43:e6:57:37:d7:da:56:
                    82:6d:a8:36:4d:49:10:a4:9b:83:ef:ce:55:6b:14:
                    7d:8b:6a:06:4b:44:34:e3:46:d9:97:ea:c7:c3:52:
                    25:7e:c8:f3:14:89:b8:2f:ef:10:a0:3d:55:04:5f:
                    84:3b:87:41:2f:28:70:87:b9:10:af:19:4f:6c:18:
                    06:cc:c1:7f:c8:ec:5c:75:c6:0f:41:86:0a:82:4e:
                    75:e5:66:0c:e3:25:a9:1b:29:b5:e9:5e:b6:92:cd:
                    15:30:16:7a:4f:be:9d:d2:74:68:17:9b:50:25:37:
                    bd:3c:5a:33:62:80:cd:d5:08:0c:03:e6:97:f1:aa:
                    42:98:82:d9:84:96:ba:78:44:97:57:aa:04:61:88:
                    d7:eb:41:22:fd:b1:44:10:a0:52:41:f8:8f:34:ed:
                    9a:da:7b:ce:79:69:fc:c1:52:61:28:0c:58:bd:c2:
                    65:c2:5e:3d:74:fb:0f:d1:5e:c1:b7:c3:f6:3f:85:
                    41:0c:d1:0f:c5:f6:b6:f6:f4:85:76:23:73:57:c6:
                    38:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:9D:92:72:8D:70:A2:91:1C:B0:43:E4:9D:AB:4B:46:5F:F6:3E:C3
            X509v3 Authority Key Identifier:
                keyid:04:80:36:08:39:57:07:A6:C4:A7:62:64:31:98:A5:2C:49:DF:60:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/2/04803608395707A6C4A762643198A52C49DF6017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/04803608395707A6C4A762643198A52C49DF6017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/2/326131313a323963303a393030303a3a2f34382d3438203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:29c0:9000::/48

    Signature Algorithm: sha256WithRSAEncryption
         13:cd:1e:44:78:5c:0f:69:85:3e:c3:7b:0e:44:5d:34:e7:e9:
         6e:c7:d8:8b:48:ba:33:1d:96:7d:e3:a0:e5:cb:4a:71:aa:51:
         ac:54:9a:f2:1c:e5:79:30:fa:b7:0f:11:ee:11:d6:18:86:b4:
         d7:5b:b6:7b:06:14:98:4d:4a:c4:e1:82:3a:a5:7d:59:b0:02:
         85:5e:30:b9:5f:a0:18:df:fd:7c:42:1c:3d:2a:75:76:25:b2:
         3a:27:d4:4c:82:43:63:bd:b6:80:b7:c1:51:b8:9f:92:e0:ee:
         4e:2c:70:6b:7e:a7:24:4d:9a:48:21:0e:fe:cd:37:2e:b7:62:
         9d:63:26:0e:59:8c:f7:c0:40:37:fc:f2:ca:d5:e8:ca:4c:91:
         5f:b6:df:60:47:b0:38:59:08:ce:16:68:45:f8:c4:2c:87:5a:
         bc:cd:cb:c9:e3:ef:b3:79:2c:c5:01:d6:8f:fc:80:60:08:d0:
         6c:fa:a0:9b:91:52:b2:ec:22:04:9f:3f:17:bd:0c:3b:da:fc:
         d6:fd:15:10:17:15:c7:65:ac:4b:d9:78:e6:37:a0:6c:0b:2a:
         85:71:05:5d:89:60:32:3b:fb:3a:3b:4c:07:3a:4e:7e:4d:5a:
         09:ab:2f:d4:e1:ad:f2:98:24:c2:0f:bd:c6:bc:d0:eb:b3:5c:
         f8:18:d1:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----