Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/2/326131313a323963303a393031303a3a2f34382d3438203d3e203437323732.roa
File:                     326131313a323963303a393031303a3a2f34382d3438203d3e203437323732.roa (raw, json)
Hash identifier:          y7pxB18j8heo4HxTtBrcHNUkNYBd2yTMnMS0z9LKEms=
Subject key identifier:   2C:9B:B6:46:8C:04:9D:1A:C9:AF:4B:89:DC:F7:27:96:EF:71:84:03
Certificate issuer:       /CN=04803608395707A6C4A762643198A52C49DF6017
Certificate serial:       488640F01A582D8B9B33FCA751A9FAE670CBA7C1
Authority key identifier: 04:80:36:08:39:57:07:A6:C4:A7:62:64:31:98:A5:2C:49:DF:60:17
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/04803608395707A6C4A762643198A52C49DF6017.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/2/326131313a323963303a393031303a3a2f34382d3438203d3e203437323732.roa
Signing time:             Sat 23 Sep 2023 19:22:18 +0000
ROA not before:           Sat 23 Sep 2023 19:17:18 +0000
ROA not after:            Sat 21 Sep 2024 19:22:18 +0000
asID:                     47272
IP address blocks:        2a11:29c0:9010::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:86:40:f0:1a:58:2d:8b:9b:33:fc:a7:51:a9:fa:e6:70:cb:a7:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04803608395707A6C4A762643198A52C49DF6017
        Validity
            Not Before: Sep 23 19:17:18 2023 GMT
            Not After : Sep 21 19:22:18 2024 GMT
        Subject: CN=2C9BB6468C049D1AC9AF4B89DCF72796EF718403
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:9f:5b:ba:6f:a6:fe:02:d2:04:63:e7:fc:47:
                    59:7e:24:e5:b0:b6:17:bd:6b:e0:e6:90:58:0b:74:
                    4d:ec:0e:8c:41:1c:cb:b6:02:97:e8:81:03:d5:ef:
                    29:4e:06:2d:cb:62:c0:44:47:b1:b5:2e:60:b6:41:
                    0f:d1:d9:59:70:b5:79:18:f3:e8:36:e5:48:47:0d:
                    bc:aa:d2:37:90:87:ab:e1:d7:e1:fa:2b:cd:9a:7d:
                    7d:8c:d2:5a:48:11:c1:35:0c:1d:6f:cc:57:b4:cc:
                    0e:87:e7:00:87:8b:6d:fc:58:58:a9:cb:64:64:11:
                    21:8c:c8:32:3b:a2:83:98:b9:d8:ca:ca:9f:0f:13:
                    e2:48:ef:d1:6c:67:5d:8b:6a:ba:fc:83:eb:a6:6c:
                    48:b9:50:7f:64:4c:3e:00:02:e9:9d:b1:39:b6:2a:
                    c3:5a:78:69:cc:a0:99:d4:f1:a2:65:63:34:b3:74:
                    ef:80:1e:fd:c9:61:b7:7f:87:e7:f8:b9:20:eb:d2:
                    05:17:d4:7d:1c:7c:b6:b0:3f:53:7d:8f:45:bb:d4:
                    01:d3:96:f5:cb:89:f7:ab:25:00:18:2e:26:29:58:
                    1b:cb:71:7a:df:c6:2c:af:6a:1d:9f:e3:6a:05:6e:
                    94:0b:63:f0:3a:e9:db:e8:06:17:01:82:b9:b5:03:
                    13:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:9B:B6:46:8C:04:9D:1A:C9:AF:4B:89:DC:F7:27:96:EF:71:84:03
            X509v3 Authority Key Identifier:
                keyid:04:80:36:08:39:57:07:A6:C4:A7:62:64:31:98:A5:2C:49:DF:60:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/2/04803608395707A6C4A762643198A52C49DF6017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/04803608395707A6C4A762643198A52C49DF6017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/2/326131313a323963303a393031303a3a2f34382d3438203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:29c0:9010::/48

    Signature Algorithm: sha256WithRSAEncryption
         5f:13:6b:f5:42:af:6a:0c:9d:30:8a:97:5b:03:89:9a:6a:e6:
         ef:32:d8:41:13:52:f1:b4:26:23:3d:0a:13:d0:39:96:60:77:
         af:a8:f3:85:2d:75:d8:b5:44:ff:01:58:b0:ac:8b:07:0f:78:
         99:7e:26:7e:d5:02:2f:d6:78:21:12:f9:c1:80:ef:51:36:fa:
         40:e4:18:64:d4:03:30:77:fb:c9:65:f3:5c:97:f8:11:c6:ed:
         0d:35:66:7e:b6:c1:99:02:ab:8c:92:27:46:36:c9:27:34:8c:
         6f:d2:09:5b:f6:46:2e:6c:07:89:fa:97:b8:b4:ae:63:4a:43:
         c6:84:74:f8:42:19:b2:65:31:68:d0:d7:f4:a4:5d:e9:43:c8:
         43:a2:d3:30:c6:46:f3:3c:2b:70:c7:b3:72:53:34:fb:e0:ae:
         f0:d5:f7:da:71:e9:ce:24:9f:5a:0f:ba:83:90:25:55:5f:d9:
         98:d2:30:73:f8:d9:3d:01:d3:80:10:c0:3f:07:77:12:7c:bd:
         d8:8b:d2:fc:79:b0:d8:f3:54:6d:ac:52:d5:34:16:cb:aa:8c:
         26:67:a2:18:07:a2:18:40:f8:6b:a4:f7:97:72:5f:89:31:19:
         25:02:d1:4f:6b:9d:53:2d:0e:54:88:42:a3:3f:50:50:d0:bd:
         47:d5:19:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----