Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/37658aec-0d40-490e-bb63-343e46c3a17a/2/326131313a323963303a393030373a3a2f34382d3438203d3e203437323732.roa
File:                     326131313a323963303a393030373a3a2f34382d3438203d3e203437323732.roa (raw, json)
Hash identifier:          jl7cpdOGcvFCj6JhcI927Ra6Pj+S0QFpbE4kefnktgQ=
Subject key identifier:   9B:C5:EA:D0:6E:27:C0:9C:33:DB:0F:50:28:A2:10:9A:3E:C1:BD:EE
Certificate issuer:       /CN=D398429B497D38DBEC7EF14848B74ED6DAE1E2ED
Certificate serial:       09475A73E396F1218B008888E193DDD93D057614
Authority key identifier: D3:98:42:9B:49:7D:38:DB:EC:7E:F1:48:48:B7:4E:D6:DA:E1:E2:ED
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/D398429B497D38DBEC7EF14848B74ED6DAE1E2ED.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/37658aec-0d40-490e-bb63-343e46c3a17a/2/326131313a323963303a393030373a3a2f34382d3438203d3e203437323732.roa
Signing time:             Sun 26 Nov 2023 10:57:29 +0000
ROA not before:           Sun 26 Nov 2023 10:52:29 +0000
ROA not after:            Sun 24 Nov 2024 10:57:29 +0000
asID:                     47272
IP address blocks:        2a11:29c0:9007::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:47:5a:73:e3:96:f1:21:8b:00:88:88:e1:93:dd:d9:3d:05:76:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D398429B497D38DBEC7EF14848B74ED6DAE1E2ED
        Validity
            Not Before: Nov 26 10:52:29 2023 GMT
            Not After : Nov 24 10:57:29 2024 GMT
        Subject: CN=9BC5EAD06E27C09C33DB0F5028A2109A3EC1BDEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:96:14:3b:af:47:08:27:f2:f9:20:fc:48:8c:
                    0e:67:8d:57:84:f8:51:b2:81:77:3e:7f:67:30:f4:
                    cc:6d:e6:7a:4a:e9:87:38:ac:65:33:c1:25:50:34:
                    a6:a0:7b:d0:62:03:ac:9f:fc:f7:45:eb:e7:e0:9e:
                    71:ae:08:44:e3:ce:f9:84:0f:c0:b5:55:eb:de:54:
                    b3:3e:93:c0:32:8d:ea:d3:1e:fd:e2:31:d3:71:3c:
                    aa:8d:63:e5:68:b0:d1:58:0c:65:c3:f6:2c:82:db:
                    f1:bf:c2:2b:f8:c0:ee:52:6a:b9:06:1c:91:5d:2d:
                    27:62:74:1e:8e:97:6f:86:f7:c1:26:7d:b8:03:0a:
                    ce:dc:63:ae:0b:fa:0b:28:ce:4c:e6:78:ea:d7:c4:
                    f3:e8:95:7f:f0:67:37:0e:b3:3c:cd:90:1d:77:01:
                    49:8e:a5:eb:95:e6:2a:45:c9:26:39:a0:07:51:15:
                    a8:ef:69:26:c9:69:cc:38:a5:36:07:16:97:a5:60:
                    a3:ea:75:67:90:8f:b2:0d:25:a9:a1:dd:a7:09:82:
                    8c:e3:2b:01:6e:29:20:07:c5:4f:fb:4c:81:00:5f:
                    c2:54:90:1e:50:4e:2d:37:af:65:11:d2:f0:9b:e1:
                    fb:1b:ec:45:59:d4:f7:73:2f:43:1c:d0:13:11:5d:
                    ce:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:C5:EA:D0:6E:27:C0:9C:33:DB:0F:50:28:A2:10:9A:3E:C1:BD:EE
            X509v3 Authority Key Identifier:
                keyid:D3:98:42:9B:49:7D:38:DB:EC:7E:F1:48:48:B7:4E:D6:DA:E1:E2:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/37658aec-0d40-490e-bb63-343e46c3a17a/2/D398429B497D38DBEC7EF14848B74ED6DAE1E2ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/D398429B497D38DBEC7EF14848B74ED6DAE1E2ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/37658aec-0d40-490e-bb63-343e46c3a17a/2/326131313a323963303a393030373a3a2f34382d3438203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:29c0:9007::/48

    Signature Algorithm: sha256WithRSAEncryption
         5e:96:84:90:58:de:1c:77:32:66:d8:22:2c:32:e7:62:04:d9:
         57:bb:6d:47:2d:a6:3c:3d:88:56:fb:90:0d:3c:45:ef:e6:da:
         b6:33:5b:f8:ca:3e:7a:d8:1a:b6:ef:4c:4b:fc:ae:24:66:79:
         69:5f:75:0e:35:0c:73:86:58:f2:22:f2:e0:62:4e:43:f9:a5:
         15:10:dc:ba:88:6d:5f:54:c4:99:0b:97:eb:d6:e0:f3:67:88:
         15:1c:03:55:89:b5:54:e0:b8:28:20:a4:2a:7a:07:d6:0d:f7:
         11:b7:69:b2:a8:13:0c:9c:90:4d:63:91:bb:f7:09:9e:9b:a1:
         6b:11:ab:68:de:17:4a:aa:26:33:ad:99:a1:5b:e9:30:1d:b6:
         4c:9e:3c:58:15:b4:00:f9:28:b4:d6:b5:72:c9:ff:4c:9d:84:
         bd:2a:64:0c:13:76:d9:2b:4d:20:f3:4c:d0:26:f7:14:88:24:
         0a:25:29:5f:4a:3a:5c:1c:2d:58:73:d3:f9:bd:23:6a:11:d8:
         06:af:27:8c:ec:f3:f9:25:f7:b7:64:2c:cd:40:7d:a9:d6:88:
         55:e9:05:fe:8a:93:a8:3e:d9:52:f9:e1:03:9c:65:33:9d:c3:
         b8:92:3e:66:83:81:6e:49:b4:33:c9:5b:ab:6c:07:cf:c8:2c:
         06:5b:97:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----