Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/2/326131313a323963303a393030323a3a2f34382d3438203d3e203437323732.roa
File:                     326131313a323963303a393030323a3a2f34382d3438203d3e203437323732.roa (raw, json)
Hash identifier:          mGaYvPG2ntYkVn/IzedrKsyhafwONUzA0jYpmqRHhXs=
Subject key identifier:   95:8F:01:7D:29:6D:00:E0:B8:E2:BA:21:AF:1A:06:B0:32:4F:DE:07
Certificate issuer:       /CN=04803608395707A6C4A762643198A52C49DF6017
Certificate serial:       128FFA33FE6D76AC81952CA707D2AE6173270356
Authority key identifier: 04:80:36:08:39:57:07:A6:C4:A7:62:64:31:98:A5:2C:49:DF:60:17
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/04803608395707A6C4A762643198A52C49DF6017.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/2/326131313a323963303a393030323a3a2f34382d3438203d3e203437323732.roa
Signing time:             Sun 15 Oct 2023 19:41:22 +0000
ROA not before:           Sun 15 Oct 2023 19:36:22 +0000
ROA not after:            Sun 13 Oct 2024 19:41:22 +0000
asID:                     47272
IP address blocks:        2a11:29c0:9002::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:8f:fa:33:fe:6d:76:ac:81:95:2c:a7:07:d2:ae:61:73:27:03:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04803608395707A6C4A762643198A52C49DF6017
        Validity
            Not Before: Oct 15 19:36:22 2023 GMT
            Not After : Oct 13 19:41:22 2024 GMT
        Subject: CN=958F017D296D00E0B8E2BA21AF1A06B0324FDE07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:60:04:d1:d1:c8:14:d3:04:a9:b6:40:b6:ab:
                    b6:8b:d0:9f:e8:d2:db:7c:7e:31:f3:c9:70:3d:dd:
                    f3:25:0a:8b:9b:81:54:20:a2:b5:4c:43:03:54:41:
                    9f:5f:60:6a:9e:20:e2:f7:9f:c6:c0:7f:a6:a5:92:
                    f1:fe:ef:c2:88:cb:76:05:65:b1:15:db:9e:3b:e5:
                    aa:6b:6b:7c:36:71:ef:09:8f:24:f7:4d:9b:e4:e1:
                    ed:44:d2:85:d2:c6:d7:07:e7:05:e9:10:65:c5:31:
                    40:f2:35:68:9d:f0:cb:62:7d:92:ff:15:b3:9c:35:
                    21:6a:a4:32:c3:0c:32:6b:f4:1f:62:e7:d6:02:66:
                    8d:a6:6f:4a:37:e6:aa:3e:48:39:94:a7:47:19:71:
                    af:9b:68:38:d7:46:b6:a2:eb:9c:a6:81:b0:b7:22:
                    c7:4f:85:2f:fa:37:f5:98:2d:e7:ed:d6:a4:77:b6:
                    9c:58:52:fe:65:3e:1a:9e:74:44:95:20:f3:84:c3:
                    c7:b1:05:77:ce:5d:08:7e:32:36:d7:44:1e:b0:52:
                    b4:5e:93:b0:dd:94:56:03:d4:2a:d3:7a:b1:5b:0d:
                    8b:46:67:f6:59:a1:a7:d3:78:6a:aa:f4:62:40:04:
                    b2:db:38:78:4e:40:b4:84:56:38:8c:97:db:2f:6d:
                    e5:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:8F:01:7D:29:6D:00:E0:B8:E2:BA:21:AF:1A:06:B0:32:4F:DE:07
            X509v3 Authority Key Identifier:
                keyid:04:80:36:08:39:57:07:A6:C4:A7:62:64:31:98:A5:2C:49:DF:60:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/2/04803608395707A6C4A762643198A52C49DF6017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/04803608395707A6C4A762643198A52C49DF6017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/2/326131313a323963303a393030323a3a2f34382d3438203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:29c0:9002::/48

    Signature Algorithm: sha256WithRSAEncryption
         04:40:71:57:9e:9a:66:c6:61:70:d7:74:76:b2:b9:1f:5a:c4:
         8d:87:2c:c1:93:b9:0f:f6:ad:74:87:70:95:38:da:e8:7e:86:
         54:cb:23:8e:11:40:aa:53:54:0d:7f:b8:ce:e9:f3:9b:17:9c:
         f0:9c:30:0c:ba:28:77:4f:6b:3a:e8:7f:d6:27:55:ff:dc:65:
         c1:19:45:89:3c:4b:ad:b6:93:b8:ec:e0:60:7d:03:f5:9c:68:
         72:97:63:6f:ec:6c:71:24:9b:be:82:2a:dc:75:50:08:8d:fd:
         e7:57:49:e9:38:9e:f2:76:08:bc:44:e2:34:28:3b:5e:ee:90:
         8a:4e:79:c4:04:06:a1:98:a0:f4:2f:08:6a:3e:7e:d8:69:2a:
         1d:66:46:6a:51:2d:1e:06:97:8d:c1:99:34:b9:cf:3f:1f:d1:
         91:d2:39:86:a2:25:70:52:92:f6:9d:62:76:24:cb:e4:a0:16:
         4e:28:93:11:6c:9f:d1:de:16:72:58:81:5a:52:29:ab:0b:cb:
         55:4d:c4:17:d2:b2:51:61:14:aa:29:15:75:53:9c:68:ac:8f:
         9f:52:5c:ff:a2:a3:8b:8b:d5:a9:0f:a4:41:af:29:be:1c:bc:
         d1:9e:45:c5:6e:c5:42:d3:31:41:8a:07:1c:5a:2c:1d:1e:a3:
         4d:53:4a:42
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgIUEo/6M/5tdqyBlSynB9KuYXMnA1YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ4MDM2MDgzOTU3MDdBNkM0QTc2MjY0MzE5OEE1MkM0
OURGNjAxNzAeFw0yMzEwMTUxOTM2MjJaFw0yNDEwMTMxOTQxMjJaMDMxMTAvBgNV
BAMTKDk1OEYwMTdEMjk2RDAwRTBCOEUyQkEyMUFGMUEwNkIwMzI0RkRFMDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTYATR0cgU0wSptkC2q7aL0J/o
0tt8fjHzyXA93fMlCoubgVQgorVMQwNUQZ9fYGqeIOL3n8bAf6alkvH+78KIy3YF
ZbEV25475apra3w2ce8JjyT3TZvk4e1E0oXSxtcH5wXpEGXFMUDyNWid8MtifZL/
FbOcNSFqpDLDDDJr9B9i59YCZo2mb0o35qo+SDmUp0cZca+baDjXRrai65ymgbC3
IsdPhS/6N/WYLeft1qR3tpxYUv5lPhqedESVIPOEw8exBXfOXQh+MjbXRB6wUrRe
k7DdlFYD1CrTerFbDYtGZ/ZZoafTeGqq9GJABLLbOHhOQLSEVjiMl9svbeWNAgMB
AAGjggKDMIICfzAdBgNVHQ4EFgQUlY8BfSltAOC44rohrxoGsDJP3gcwHwYDVR0j
BBgwFoAUBIA2CDlXB6bEp2JkMZilLEnfYBcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYmM5MGY0ZjYtZjJjNC00ODgyLTkxY2YtOWI4ZjBiMzhk
N2RhLzIvMDQ4MDM2MDgzOTU3MDdBNkM0QTc2MjY0MzE5OEE1MkM0OURGNjAxNy5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84MTExNWJjNi0xMGY2LTRh
ZjMtYmEwOS04YjY4N2E1NmZiZjUvMC8wNDgwMzYwODM5NTcwN0E2QzRBNzYyNjQz
MTk4QTUyQzQ5REY2MDE3LmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF
BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9iYzkwZjRmNi1mMmM0LTQ4ODItOTFjZi05YjhmMGIzOGQ3ZGEvMi8zMjYxMzEz
MTNhMzIzOTYzMzAzYTM5MzAzMDMyM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzQz
NzMyMzczMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB
BwEB/wQTMBEwDwQCAAIwCQMHACoRKcCQAjANBgkqhkiG9w0BAQsFAAOCAQEABEBx
V56aZsZhcNd0drK5H1rEjYcswZO5D/atdIdwlTja6H6GVMsjjhFAqlNUDX+4zunz
mxec8JwwDLood09rOuh/1idV/9xlwRlFiTxLrbaTuOzgYH0D9Zxocpdjb+xscSSb
voIq3HVQCI3951dJ6Tie8nYIvETiNCg7Xu6Qik55xAQGoZig9C8Iaj5+2GkqHWZG
alEtHgaXjcGZNLnPPx/RkdI5hqIlcFKS9p1idiTL5KAWTiiTEWyf0d4WcliBWlIp
qwvLVU3EF9KyUWEUqikVdVOcaKyPn1Jc/6Kji4vVqQ+kQa8pvhy80Z5FxW7FQtMx
QYoHHFosHR6jTVNKQg==
-----END CERTIFICATE-----