Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/2/326131313a323963303a393062303a3a2f34382d3438203d3e203437323732.roa
File:                     326131313a323963303a393062303a3a2f34382d3438203d3e203437323732.roa (raw, json)
Hash identifier:          otYJFz94Qb2i/Ot3iKYdjjbAgOxX/Ad6YmgQyu0YNgU=
Subject key identifier:   00:83:16:21:B8:69:DE:20:3E:AB:88:8F:25:F0:62:87:14:7F:13:E0
Certificate issuer:       /CN=04803608395707A6C4A762643198A52C49DF6017
Certificate serial:       3C995D944C17B731BF37107ACE24B9FC00378651
Authority key identifier: 04:80:36:08:39:57:07:A6:C4:A7:62:64:31:98:A5:2C:49:DF:60:17
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/04803608395707A6C4A762643198A52C49DF6017.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/2/326131313a323963303a393062303a3a2f34382d3438203d3e203437323732.roa
Signing time:             Sun 15 Oct 2023 18:07:34 +0000
ROA not before:           Sun 15 Oct 2023 18:02:34 +0000
ROA not after:            Sun 13 Oct 2024 18:07:34 +0000
asID:                     47272
IP address blocks:        2a11:29c0:90b0::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:99:5d:94:4c:17:b7:31:bf:37:10:7a:ce:24:b9:fc:00:37:86:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04803608395707A6C4A762643198A52C49DF6017
        Validity
            Not Before: Oct 15 18:02:34 2023 GMT
            Not After : Oct 13 18:07:34 2024 GMT
        Subject: CN=00831621B869DE203EAB888F25F06287147F13E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:85:d9:f4:ea:b7:ee:5d:75:19:d6:d2:6f:01:
                    af:48:04:76:ca:90:ee:96:f4:b7:d5:80:a3:8b:f9:
                    c9:e8:68:cb:fe:07:8a:a7:d9:af:f8:ae:84:c4:e6:
                    2e:92:90:47:42:27:d7:a1:46:af:c9:04:68:bf:36:
                    10:46:62:a4:18:c4:98:0d:78:fd:9a:2f:f4:27:a6:
                    b6:e4:ec:32:d6:2d:17:eb:82:71:ed:ef:b3:24:89:
                    d0:44:b2:e2:2f:7a:0a:bd:9d:50:59:77:0a:42:a9:
                    f6:27:f2:c2:5e:b5:37:f1:7f:be:78:ed:df:1b:c6:
                    5b:e3:0d:42:d1:26:2f:b8:81:41:a4:0c:dc:01:9c:
                    a7:5c:f9:89:54:18:e3:2c:9d:1b:17:fb:2e:19:61:
                    d2:11:53:0b:5f:21:c2:c6:6e:f1:27:53:7d:ac:a2:
                    87:84:7c:9b:98:d7:67:a4:7b:e7:7f:cd:41:cf:5b:
                    70:e4:ad:d7:4a:6a:a8:e4:52:3c:5d:b5:88:77:6b:
                    91:d5:3d:3c:27:28:a9:e5:2e:23:bd:b5:da:a8:57:
                    d2:9e:94:a0:94:6b:24:13:fa:b7:86:5d:ca:d1:a4:
                    81:a9:f3:5e:4d:df:93:a1:5c:f9:57:00:77:2c:35:
                    f8:e8:63:cb:11:ce:d6:d0:68:d5:36:5a:0d:ed:68:
                    3c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:83:16:21:B8:69:DE:20:3E:AB:88:8F:25:F0:62:87:14:7F:13:E0
            X509v3 Authority Key Identifier:
                keyid:04:80:36:08:39:57:07:A6:C4:A7:62:64:31:98:A5:2C:49:DF:60:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/2/04803608395707A6C4A762643198A52C49DF6017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/04803608395707A6C4A762643198A52C49DF6017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/2/326131313a323963303a393062303a3a2f34382d3438203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:29c0:90b0::/48

    Signature Algorithm: sha256WithRSAEncryption
         55:7b:4d:fe:97:38:1f:e9:fb:17:6d:5d:f5:73:6d:8c:12:25:
         68:3d:61:e0:ba:20:27:58:6e:35:be:97:20:54:76:b0:61:a3:
         92:ed:97:fd:ae:aa:c0:de:1d:44:8c:c3:26:45:4d:8f:4f:c2:
         98:09:7f:0e:80:cb:e8:16:4b:27:b1:6c:81:e0:7f:4d:16:9f:
         58:5a:cd:0b:29:6b:17:7f:62:27:69:10:81:b4:56:43:c4:e7:
         89:27:71:3b:44:fc:d7:99:21:11:0c:63:c3:c0:b8:f0:bd:e7:
         3c:46:26:38:57:b2:75:c6:d6:78:02:1a:3d:17:3b:d4:25:43:
         3a:70:40:d1:3e:73:c0:8c:cc:31:b8:86:cd:3f:af:17:40:97:
         67:ae:29:26:a8:c6:d4:c1:50:23:3e:7b:72:28:d9:bf:fa:47:
         14:76:74:c3:97:87:4c:15:37:f6:f8:82:79:a5:21:ba:55:bc:
         a2:ab:65:fb:8d:65:45:da:e9:fd:ab:31:4a:d0:e6:a7:97:33:
         91:2c:24:0e:c8:91:05:87:04:b8:10:58:13:d4:72:1e:48:2b:
         fc:f9:f2:ea:74:b3:f2:b1:8c:c4:04:2c:0f:cd:0b:4c:69:48:
         35:81:69:3b:ee:7e:6c:f6:45:db:52:9a:db:71:f9:83:cc:40:
         9f:8d:f3:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----