Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/2/326131313a323963303a393062333a3a2f34382d3438203d3e203437323732.roa
File:                     326131313a323963303a393062333a3a2f34382d3438203d3e203437323732.roa (raw, json)
Hash identifier:          B1/zXqeM6Toy6JZxcsGAtkH8hP3Ph1k9e1pNJE7k9hk=
Subject key identifier:   51:F6:97:6E:D6:36:38:DE:8E:53:95:1C:8B:69:7B:0D:E0:CB:DF:CF
Certificate issuer:       /CN=04803608395707A6C4A762643198A52C49DF6017
Certificate serial:       6DE5ACC51B3AA1F11BA6E79D4629CDFFC3EB2483
Authority key identifier: 04:80:36:08:39:57:07:A6:C4:A7:62:64:31:98:A5:2C:49:DF:60:17
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/04803608395707A6C4A762643198A52C49DF6017.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/2/326131313a323963303a393062333a3a2f34382d3438203d3e203437323732.roa
Signing time:             Sun 15 Oct 2023 19:48:47 +0000
ROA not before:           Sun 15 Oct 2023 19:43:47 +0000
ROA not after:            Sun 13 Oct 2024 19:48:47 +0000
asID:                     47272
IP address blocks:        2a11:29c0:90b3::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:e5:ac:c5:1b:3a:a1:f1:1b:a6:e7:9d:46:29:cd:ff:c3:eb:24:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04803608395707A6C4A762643198A52C49DF6017
        Validity
            Not Before: Oct 15 19:43:47 2023 GMT
            Not After : Oct 13 19:48:47 2024 GMT
        Subject: CN=51F6976ED63638DE8E53951C8B697B0DE0CBDFCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c1:8d:4e:5f:3e:5f:b8:f1:3f:a5:22:b3:87:
                    fe:00:f0:aa:69:46:5e:d0:67:93:7b:bf:93:32:e0:
                    a8:f5:34:88:10:ca:d7:a9:00:c2:ef:7e:57:a9:71:
                    e0:63:de:fb:75:48:11:0e:fc:7c:69:19:9a:43:34:
                    47:07:b3:8f:15:2a:af:41:9a:2f:aa:90:32:17:ab:
                    11:77:69:f5:8d:b5:d8:1c:59:10:a7:17:af:ee:39:
                    02:15:dd:4a:95:95:15:9c:fc:85:12:a1:02:37:1f:
                    89:7b:51:fa:12:dd:f9:0e:9c:63:37:3e:11:2f:37:
                    74:8f:0a:2f:ec:68:1b:9a:f3:be:39:0e:85:9b:f5:
                    a6:54:1e:61:5a:eb:14:ae:8b:cf:85:78:1a:b9:85:
                    0f:83:02:74:c5:97:3c:d6:20:d3:d3:0a:1f:35:a8:
                    49:fa:3c:29:fa:42:13:80:8a:17:5a:14:52:70:84:
                    9a:e3:f8:79:6d:5b:e4:3e:83:d5:68:cd:e8:13:d1:
                    b3:aa:10:5e:6c:48:63:19:5d:40:ee:1c:89:c5:6f:
                    20:79:78:a3:dd:8f:35:6a:02:35:c2:60:a8:b0:85:
                    c0:45:78:88:61:26:67:44:fa:96:ba:60:7d:13:97:
                    e6:4a:4f:98:e3:45:32:cb:85:d3:36:42:25:7e:e8:
                    01:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:F6:97:6E:D6:36:38:DE:8E:53:95:1C:8B:69:7B:0D:E0:CB:DF:CF
            X509v3 Authority Key Identifier:
                keyid:04:80:36:08:39:57:07:A6:C4:A7:62:64:31:98:A5:2C:49:DF:60:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/2/04803608395707A6C4A762643198A52C49DF6017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/04803608395707A6C4A762643198A52C49DF6017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/2/326131313a323963303a393062333a3a2f34382d3438203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:29c0:90b3::/48

    Signature Algorithm: sha256WithRSAEncryption
         a3:17:dd:83:7d:bd:d0:3d:29:db:38:e5:1b:9e:68:ae:20:c0:
         62:f7:d7:b5:f8:78:87:21:12:88:a8:38:57:a5:10:1f:d6:72:
         c8:15:8e:3e:93:73:81:26:74:a8:ca:1f:b4:03:70:9d:c8:a8:
         d0:22:38:80:14:38:84:b6:e0:30:1c:70:a4:08:a9:99:55:59:
         6c:b0:7d:2f:95:6f:f2:c0:ba:29:5a:5f:87:b4:1e:3d:18:a4:
         2c:b9:4c:a3:8d:5f:e0:28:11:6b:a7:ac:02:22:63:ab:1f:32:
         5a:ac:d0:51:be:5b:bf:4d:6a:ed:55:ec:e6:a3:5d:d3:b3:97:
         9e:ba:c8:69:3c:bb:98:dc:02:4d:9e:05:b5:d9:da:2b:40:f6:
         1b:1e:28:4e:db:1c:98:e4:b0:7c:05:1c:78:28:8d:89:76:fb:
         f9:5c:0b:15:4e:88:68:8c:f8:57:07:18:50:82:ac:ab:da:a0:
         e6:66:42:b0:37:05:35:f0:27:4a:00:db:a3:23:8c:fb:76:be:
         86:5b:48:83:2f:f7:35:2e:d7:26:ff:b4:0f:af:01:f1:f7:5f:
         40:f1:98:f2:3b:57:3f:10:7c:44:07:aa:d6:2e:ef:30:e7:ed:
         20:f2:b3:3e:c6:c6:1b:e1:60:29:3b:53:f2:31:26:75:cb:b6:
         0f:e4:28:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----