Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/2/326131313a323963303a393061303a3a2f34342d3438203d3e203437323732.roa
File:                     326131313a323963303a393061303a3a2f34342d3438203d3e203437323732.roa (raw, json)
Hash identifier:          /8VKm0Xku38AdLZ1VGdDs/a4qvM1htTU3CX46+W5foA=
Subject key identifier:   46:F0:D9:A7:DC:3D:CE:81:CE:3D:0E:60:93:F6:DC:E3:BC:4F:18:E6
Certificate issuer:       /CN=04803608395707A6C4A762643198A52C49DF6017
Certificate serial:       0439BD266D66EA5657D1BC72E2DC67BD0CA987EC
Authority key identifier: 04:80:36:08:39:57:07:A6:C4:A7:62:64:31:98:A5:2C:49:DF:60:17
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/04803608395707A6C4A762643198A52C49DF6017.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/2/326131313a323963303a393061303a3a2f34342d3438203d3e203437323732.roa
Signing time:             Sun 15 Oct 2023 19:42:08 +0000
ROA not before:           Sun 15 Oct 2023 19:37:08 +0000
ROA not after:            Sun 13 Oct 2024 19:42:08 +0000
asID:                     47272
IP address blocks:        2a11:29c0:90a0::/44 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:39:bd:26:6d:66:ea:56:57:d1:bc:72:e2:dc:67:bd:0c:a9:87:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04803608395707A6C4A762643198A52C49DF6017
        Validity
            Not Before: Oct 15 19:37:08 2023 GMT
            Not After : Oct 13 19:42:08 2024 GMT
        Subject: CN=46F0D9A7DC3DCE81CE3D0E6093F6DCE3BC4F18E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:81:08:bd:e5:82:fb:4f:6f:32:e9:fe:66:16:
                    fc:67:c5:dd:cc:e1:e2:30:90:48:d4:77:39:3c:8a:
                    2f:5a:ad:c7:83:9b:52:e9:59:03:bb:00:70:6f:d4:
                    4d:a1:80:d5:68:61:4d:4f:43:0d:00:97:b8:34:b4:
                    72:30:19:06:03:41:fa:42:e9:9d:41:60:9f:54:9a:
                    a0:b6:54:77:ff:8e:88:9b:e7:c0:25:cc:97:d1:f1:
                    fb:bf:c7:7f:9a:35:81:d3:f3:be:ef:7f:0e:b7:44:
                    ce:ae:5b:e7:63:c5:65:c8:cf:85:7b:c4:1f:19:5d:
                    a5:9f:11:0b:83:86:37:88:e4:6c:39:ae:12:1e:1d:
                    a2:da:ae:85:7d:6e:ff:f2:ca:1c:9d:8c:91:07:3a:
                    4c:56:9d:1b:2b:11:87:7c:ea:13:3b:b3:a8:b4:08:
                    93:af:0f:2a:eb:33:6b:00:96:cc:47:1f:a3:f0:79:
                    a4:0b:df:37:c9:dd:24:21:8c:07:9c:29:20:d9:87:
                    d0:f3:44:41:9d:5e:e2:06:0d:01:11:2a:93:d8:54:
                    18:79:39:db:ff:05:18:58:8c:8a:98:41:de:ec:1e:
                    7a:50:10:e2:41:e6:8a:e5:72:6b:b8:65:4a:36:cd:
                    ca:dd:ac:59:42:47:0f:9f:c0:40:ea:f4:2f:5a:ad:
                    e6:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:F0:D9:A7:DC:3D:CE:81:CE:3D:0E:60:93:F6:DC:E3:BC:4F:18:E6
            X509v3 Authority Key Identifier:
                keyid:04:80:36:08:39:57:07:A6:C4:A7:62:64:31:98:A5:2C:49:DF:60:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/2/04803608395707A6C4A762643198A52C49DF6017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/04803608395707A6C4A762643198A52C49DF6017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/2/326131313a323963303a393061303a3a2f34342d3438203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:29c0:90a0::/44

    Signature Algorithm: sha256WithRSAEncryption
         1a:44:3b:b1:89:9f:6b:17:23:f3:b5:ee:d1:9d:51:45:89:1a:
         ea:81:8c:66:45:f6:e6:35:e3:13:f0:c9:34:19:4b:1d:fe:0c:
         02:6f:e5:e7:49:6a:20:af:09:92:33:7d:6a:6c:03:b9:2b:f4:
         49:86:af:95:4a:1a:bc:7b:1a:db:7b:31:83:9f:98:8a:a2:1c:
         85:61:5f:34:f7:b5:38:75:5e:45:c6:18:44:e1:38:df:bb:f8:
         14:21:b8:99:2e:14:6f:14:f4:37:3d:4c:6b:83:2c:34:9c:25:
         dd:95:d9:0a:ec:f5:f9:77:3d:21:02:e9:6b:49:25:97:8d:67:
         b3:5b:e0:7d:b4:24:06:22:e1:e4:99:9b:5e:66:90:9f:43:f1:
         f2:c8:67:32:29:36:96:b7:4c:3a:f5:52:bb:15:31:64:ea:ff:
         2e:cf:16:4b:cf:d9:82:e1:b4:7e:96:b3:76:ca:83:7c:0b:ac:
         b6:68:ae:e7:fe:d2:13:aa:84:00:dd:ab:6a:91:f0:69:6f:26:
         41:31:24:5c:78:a5:61:f6:0e:37:a0:86:f3:71:91:e7:53:68:
         71:e2:98:8c:3d:86:ba:71:11:ec:31:75:b8:a2:77:5c:d0:73:
         46:15:f5:08:d3:22:b6:48:47:49:18:c2:7c:27:cb:09:17:48:
         83:bd:b5:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----