Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d64c757d-3c63-4a0a-b0d9-41e0dec3e929/0/326130613a363034343a3130303a3a2f34302d3438203d3e203437323732.roa
File:                     326130613a363034343a3130303a3a2f34302d3438203d3e203437323732.roa (raw, json)
Hash identifier:          tejg+WVNMEtDXNYB6gSpR2ShKr6BjbqYH7ExqIWqib0=
Subject key identifier:   DE:B1:74:0A:D3:A6:43:1A:89:0A:58:A6:42:AA:30:E9:96:C5:2D:D5
Certificate issuer:       /CN=635FB9C39A2FB0FB01F8F4130C8A3FFFB7E6F546
Certificate serial:       79192DA9CFE5CAB6B8E4D64E9DF7DC45292973C3
Authority key identifier: 63:5F:B9:C3:9A:2F:B0:FB:01:F8:F4:13:0C:8A:3F:FF:B7:E6:F5:46
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/635FB9C39A2FB0FB01F8F4130C8A3FFFB7E6F546.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d64c757d-3c63-4a0a-b0d9-41e0dec3e929/0/326130613a363034343a3130303a3a2f34302d3438203d3e203437323732.roa
Signing time:             Sat 25 Nov 2023 07:52:17 +0000
ROA not before:           Sat 25 Nov 2023 07:47:17 +0000
ROA not after:            Sat 23 Nov 2024 07:52:17 +0000
asID:                     47272
IP address blocks:        2a0a:6044:100::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:19:2d:a9:cf:e5:ca:b6:b8:e4:d6:4e:9d:f7:dc:45:29:29:73:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=635FB9C39A2FB0FB01F8F4130C8A3FFFB7E6F546
        Validity
            Not Before: Nov 25 07:47:17 2023 GMT
            Not After : Nov 23 07:52:17 2024 GMT
        Subject: CN=DEB1740AD3A6431A890A58A642AA30E996C52DD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:30:74:52:b3:8e:23:6d:15:ea:ac:2e:81:af:
                    c6:3a:3d:cb:e7:f7:1a:26:1a:1f:dd:fe:4e:2f:bf:
                    43:1c:ad:ad:c0:f6:7e:56:ca:7a:3e:4d:08:ec:f2:
                    bb:79:ea:55:d8:21:ba:e5:a3:f6:bd:c8:62:2e:9c:
                    e5:35:83:db:fb:1d:93:1b:1b:6e:22:02:a6:28:c0:
                    47:f0:26:0e:b9:df:4a:df:cf:1d:84:bf:a0:a3:a1:
                    5e:89:a0:bc:07:2d:de:8b:d3:1e:42:c4:f4:31:da:
                    96:d9:35:ed:8d:12:13:c5:f1:bd:06:51:64:27:9e:
                    7d:74:e6:0d:c8:f7:0a:bc:99:36:31:71:fa:cb:4f:
                    6b:57:27:cd:24:1d:88:5d:3b:43:16:d9:8b:b9:33:
                    d8:e1:0e:86:8c:b4:6a:29:72:51:ac:57:f2:1b:43:
                    38:6d:eb:78:4d:82:2f:6c:de:90:41:02:57:f0:0f:
                    37:3b:2c:18:36:33:7c:10:e0:09:20:98:29:15:c8:
                    cc:7f:08:93:31:9d:d0:db:8d:77:7d:8e:d4:6c:e4:
                    96:f3:3c:38:59:68:4d:f5:d2:1f:2a:dc:fe:70:de:
                    34:f2:78:00:95:ba:e1:75:25:47:05:03:76:2f:e5:
                    83:1d:bc:59:a0:11:eb:0f:80:94:20:bb:73:99:fd:
                    10:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:B1:74:0A:D3:A6:43:1A:89:0A:58:A6:42:AA:30:E9:96:C5:2D:D5
            X509v3 Authority Key Identifier:
                keyid:63:5F:B9:C3:9A:2F:B0:FB:01:F8:F4:13:0C:8A:3F:FF:B7:E6:F5:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d64c757d-3c63-4a0a-b0d9-41e0dec3e929/0/635FB9C39A2FB0FB01F8F4130C8A3FFFB7E6F546.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/635FB9C39A2FB0FB01F8F4130C8A3FFFB7E6F546.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d64c757d-3c63-4a0a-b0d9-41e0dec3e929/0/326130613a363034343a3130303a3a2f34302d3438203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         89:93:e4:a4:66:7e:57:9d:b7:2a:0d:27:06:3a:f1:ca:54:77:
         e6:7b:23:dc:9d:c4:6b:59:2f:20:bd:6d:65:8c:fc:39:00:75:
         7c:5c:eb:fd:d9:2e:f2:4a:3d:7d:36:6d:1e:c4:0a:bb:c1:91:
         8e:90:8f:35:79:4f:62:c2:68:79:19:cc:75:fd:39:66:35:2e:
         63:7c:b4:29:a5:25:a6:36:a6:e6:b2:5b:42:5b:c5:e3:79:9a:
         01:53:f4:16:31:df:66:6a:6b:fa:cd:67:fb:fd:12:ee:d9:49:
         fe:1b:7e:ad:a0:5f:4b:25:5e:d9:d5:02:dd:7e:1c:e2:3f:a0:
         74:e8:e4:73:62:fc:79:31:d6:81:dc:c6:2d:8c:7b:55:5e:49:
         a1:7a:f2:99:1b:de:2a:9a:a3:89:ec:19:ec:32:02:4d:e0:04:
         7e:2e:42:80:ee:7e:37:39:28:96:58:37:66:95:f4:66:4e:ce:
         5e:6f:69:41:eb:04:3d:39:b9:18:85:7a:ba:75:67:6b:48:8c:
         0a:b5:fc:cb:3c:ff:3f:06:db:17:a9:94:f6:f9:e6:c1:9b:d9:
         f5:71:c4:b4:65:0b:55:7f:0e:41:f2:d0:6d:0a:4f:f1:e7:ad:
         74:5b:18:95:6f:54:77:88:bb:f0:b3:d8:65:f7:a2:99:41:fd:
         d7:90:52:4f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----