Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/2/326131313a323963303a393062323a3a2f34382d3438203d3e203437323732.roa
File:                     326131313a323963303a393062323a3a2f34382d3438203d3e203437323732.roa (raw, json)
Hash identifier:          ms+86uCAR4hgxT1YErqKjefFBTj7iFoRs5DhFn/tvQM=
Subject key identifier:   58:E8:AE:F8:ED:8E:01:A6:18:4B:6A:8D:A1:8E:2F:DC:77:F0:AA:2F
Certificate issuer:       /CN=04803608395707A6C4A762643198A52C49DF6017
Certificate serial:       73B1FA828C47B1CE556E9BD92B57E36D65EACF71
Authority key identifier: 04:80:36:08:39:57:07:A6:C4:A7:62:64:31:98:A5:2C:49:DF:60:17
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/04803608395707A6C4A762643198A52C49DF6017.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/2/326131313a323963303a393062323a3a2f34382d3438203d3e203437323732.roa
Signing time:             Sun 15 Oct 2023 18:10:33 +0000
ROA not before:           Sun 15 Oct 2023 18:05:33 +0000
ROA not after:            Sun 13 Oct 2024 18:10:33 +0000
asID:                     47272
IP address blocks:        2a11:29c0:90b2::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:b1:fa:82:8c:47:b1:ce:55:6e:9b:d9:2b:57:e3:6d:65:ea:cf:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04803608395707A6C4A762643198A52C49DF6017
        Validity
            Not Before: Oct 15 18:05:33 2023 GMT
            Not After : Oct 13 18:10:33 2024 GMT
        Subject: CN=58E8AEF8ED8E01A6184B6A8DA18E2FDC77F0AA2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e4:5c:0f:8b:a3:cc:4f:8d:6b:2b:1a:13:e9:
                    30:c8:d6:9d:b9:6c:ad:a5:de:d3:f8:2d:50:36:42:
                    e8:81:1b:43:64:c9:d8:da:6d:88:18:7c:e1:c8:50:
                    7c:19:45:d9:60:4d:19:5c:7c:e7:68:59:c6:9c:3e:
                    b0:db:76:1f:9b:f0:bc:39:3d:82:e7:fc:c3:42:3f:
                    ff:49:36:ef:39:58:4e:b1:52:13:b8:08:67:9b:76:
                    12:3a:4f:84:d5:43:3f:ef:e8:3b:c4:69:0c:d7:2d:
                    37:f1:65:c0:e6:f7:d3:b4:88:24:ba:07:59:b8:0b:
                    4f:54:02:79:1d:55:f1:71:89:46:80:bb:40:b2:ae:
                    8d:d8:9f:7c:bf:b1:88:89:2b:70:4a:40:c9:7c:28:
                    05:af:fd:38:7e:b6:a8:26:e3:dc:a2:4c:83:4d:7d:
                    ea:56:09:54:1e:e6:09:e1:24:3c:f4:08:00:cb:73:
                    fc:3f:0d:c7:8f:3d:7a:3e:b5:ff:9c:a6:4a:39:c3:
                    8e:f3:0b:56:8b:96:95:10:1f:53:3f:04:7d:e2:31:
                    f6:7d:ca:20:8c:7e:94:96:ac:e6:c0:ab:2c:ea:dc:
                    31:32:3e:ae:81:51:2a:6d:c8:4d:2d:2b:9c:37:73:
                    d5:b4:3b:2a:3e:5a:f1:6d:ae:73:2c:96:93:c5:58:
                    33:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:E8:AE:F8:ED:8E:01:A6:18:4B:6A:8D:A1:8E:2F:DC:77:F0:AA:2F
            X509v3 Authority Key Identifier:
                keyid:04:80:36:08:39:57:07:A6:C4:A7:62:64:31:98:A5:2C:49:DF:60:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/2/04803608395707A6C4A762643198A52C49DF6017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/04803608395707A6C4A762643198A52C49DF6017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/2/326131313a323963303a393062323a3a2f34382d3438203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:29c0:90b2::/48

    Signature Algorithm: sha256WithRSAEncryption
         18:ef:de:8d:e8:ed:07:30:6a:7b:94:33:ad:72:56:34:22:f0:
         b3:96:45:39:62:a0:7c:ef:63:9d:c9:fc:11:ac:f1:9d:d8:8f:
         60:24:ac:b1:d2:10:e9:18:de:30:31:80:6c:15:07:7e:1f:7e:
         f5:19:1d:85:67:b5:30:0b:b8:09:6f:27:3d:b8:2a:e0:b5:d9:
         fc:f8:a7:2c:13:d1:a2:ad:aa:59:9a:20:e0:e2:51:18:1a:65:
         27:ca:bf:ed:e2:2b:26:bf:d4:68:3e:e9:55:39:27:8a:ec:4f:
         41:ca:1a:86:cd:ef:f2:86:b1:87:2d:36:ff:36:f2:ce:03:99:
         c4:ef:56:d1:a0:01:8d:21:9d:8b:ab:f0:4f:58:fa:38:c9:d0:
         3f:8a:ac:6d:33:46:65:60:08:29:e7:ff:d4:ce:dd:07:28:86:
         f4:a0:da:6d:ef:5e:77:69:7c:c7:ef:63:85:d9:00:05:42:36:
         da:84:ec:13:94:6c:c1:64:b2:4d:fb:e4:1c:ba:f6:b9:3e:82:
         28:16:fb:1b:61:7c:43:77:c5:4e:fe:3b:05:27:35:72:72:7e:
         34:25:1f:6d:33:ae:f6:57:78:c1:78:38:b7:c5:13:df:95:e3:
         97:fe:6b:22:ce:57:4e:87:4d:14:0f:6f:72:42:b6:86:3c:a6:
         87:5d:9d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----