Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/326130613a363034343a623030623a3a2f34382d3438203d3e203437323732.roa
File:                     326130613a363034343a623030623a3a2f34382d3438203d3e203437323732.roa (raw, json)
Hash identifier:          g8sYp+UeCUnGb6aeYO8GCGdGMyvSvZG0HH/NJcs2Y3s=
Subject key identifier:   3C:2B:45:A9:46:3C:A4:88:97:5D:11:FC:43:E8:A5:33:03:C0:C3:AA
Certificate issuer:       /CN=21CA65857C4339C6923CF5A9F8629948BF3A4B79
Certificate serial:       47E400FEAA7E0E8D2664723DBB736728A0745952
Authority key identifier: 21:CA:65:85:7C:43:39:C6:92:3C:F5:A9:F8:62:99:48:BF:3A:4B:79
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/21CA65857C4339C6923CF5A9F8629948BF3A4B79.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/326130613a363034343a623030623a3a2f34382d3438203d3e203437323732.roa
Signing time:             Sun 12 Nov 2023 01:40:40 +0000
ROA not before:           Sun 12 Nov 2023 01:35:40 +0000
ROA not after:            Sun 10 Nov 2024 01:40:40 +0000
asID:                     47272
IP address blocks:        2a0a:6044:b00b::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:e4:00:fe:aa:7e:0e:8d:26:64:72:3d:bb:73:67:28:a0:74:59:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21CA65857C4339C6923CF5A9F8629948BF3A4B79
        Validity
            Not Before: Nov 12 01:35:40 2023 GMT
            Not After : Nov 10 01:40:40 2024 GMT
        Subject: CN=3C2B45A9463CA488975D11FC43E8A53303C0C3AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c6:ce:bd:31:62:3e:a8:ba:2b:9f:ce:ba:31:
                    29:e8:5f:cd:25:18:53:7e:fc:89:a4:96:bc:90:5c:
                    4e:1e:98:14:0c:69:50:98:11:f5:c8:17:ae:ac:83:
                    23:bf:b5:92:ba:85:d8:ad:dd:10:a3:cf:55:37:12:
                    c2:5f:59:7f:1a:08:e3:e4:33:9b:b2:3e:89:75:63:
                    66:c0:22:7a:4f:9b:ce:93:2b:25:02:9d:4f:db:e0:
                    f9:27:59:55:35:77:18:d6:c3:14:7c:29:5a:75:6e:
                    85:88:31:55:39:f7:dd:64:57:b4:e4:09:b4:49:6c:
                    6c:c8:e3:ed:aa:b6:78:6d:69:aa:ba:47:29:02:8c:
                    a5:ad:3b:ff:d6:9e:0c:ec:73:3b:11:a5:47:d0:08:
                    af:49:57:71:a7:c5:99:d6:50:fc:dd:e6:96:87:61:
                    79:2b:ed:ca:fe:25:5b:e9:76:ad:cb:73:7d:ce:54:
                    a2:ef:c6:9d:c9:bb:a3:72:e0:5e:eb:46:8a:7b:d0:
                    60:69:53:07:22:0d:67:44:57:9d:08:5f:73:9d:2e:
                    ed:5c:9c:2b:15:98:9e:03:6e:37:1a:d5:2e:4f:6f:
                    43:31:23:ed:59:6a:5b:0b:5c:6b:51:88:23:ab:92:
                    2d:4e:df:cc:2c:5f:dc:96:b7:1c:bd:4d:dc:51:ef:
                    9a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:2B:45:A9:46:3C:A4:88:97:5D:11:FC:43:E8:A5:33:03:C0:C3:AA
            X509v3 Authority Key Identifier:
                keyid:21:CA:65:85:7C:43:39:C6:92:3C:F5:A9:F8:62:99:48:BF:3A:4B:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/21CA65857C4339C6923CF5A9F8629948BF3A4B79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/21CA65857C4339C6923CF5A9F8629948BF3A4B79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/326130613a363034343a623030623a3a2f34382d3438203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         37:b6:63:1b:fc:8c:d2:6b:cf:5f:9e:dd:9f:61:89:9e:11:79:
         ed:48:ad:c0:f9:6d:a9:eb:ed:85:92:d0:3e:64:b0:ee:80:1c:
         fd:52:a6:c1:de:94:40:a2:f7:2f:b4:bb:83:1e:f1:72:b0:2a:
         0d:f2:2a:38:1e:3a:4b:26:33:fe:fd:e0:99:18:b0:10:0f:08:
         e6:ea:8b:ed:91:7a:d9:88:69:00:6e:2e:05:0c:1f:79:5a:e9:
         9f:c3:b9:b4:31:7e:3e:af:5d:06:bf:e6:0b:41:c4:63:be:4c:
         15:6c:c7:ac:55:74:b6:41:97:22:ec:a4:e0:26:43:58:48:32:
         b4:56:c4:3a:9d:6d:0d:33:95:56:ec:1a:ba:f4:bc:c5:22:42:
         ba:a2:14:f5:8d:4d:a2:04:df:18:db:cd:61:a6:d9:3f:1f:68:
         7a:b7:79:ee:d3:8a:d0:dc:7b:be:5d:61:3a:0b:9a:b5:b5:4e:
         d4:1f:8d:d2:ce:78:18:dc:f0:34:af:8d:b0:14:b9:22:10:9f:
         4f:c8:ef:2b:7a:e9:b9:6e:5e:88:44:1e:df:62:37:8e:ce:49:
         51:15:86:c3:78:1c:0f:12:3d:fc:26:9d:f6:db:d6:76:64:f4:
         4b:92:18:5d:65:ea:32:87:d3:83:85:5a:76:8f:f8:bb:65:59:
         24:b3:9a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----