Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/2/326131313a323963303a396666663a3a2f34382d3438203d3e20323136393239.roa
File:                     326131313a323963303a396666663a3a2f34382d3438203d3e20323136393239.roa (raw, json)
Hash identifier:          PXlUoD6S1fv4Pp3m0DS04uBx/3iq9bVdK8Ukm3R4DZM=
Subject key identifier:   96:34:82:D6:30:F6:89:87:EB:99:CD:EC:A6:F3:6C:B2:4E:2C:D7:9D
Certificate issuer:       /CN=04803608395707A6C4A762643198A52C49DF6017
Certificate serial:       6BA5B5993E5C7333AEA7AA5AC28D31F154B84125
Authority key identifier: 04:80:36:08:39:57:07:A6:C4:A7:62:64:31:98:A5:2C:49:DF:60:17
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/04803608395707A6C4A762643198A52C49DF6017.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/2/326131313a323963303a396666663a3a2f34382d3438203d3e20323136393239.roa
Signing time:             Sun 24 Sep 2023 22:41:36 +0000
ROA not before:           Sun 24 Sep 2023 22:36:36 +0000
ROA not after:            Sun 22 Sep 2024 22:41:36 +0000
asID:                     216929
IP address blocks:        2a11:29c0:9fff::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:a5:b5:99:3e:5c:73:33:ae:a7:aa:5a:c2:8d:31:f1:54:b8:41:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04803608395707A6C4A762643198A52C49DF6017
        Validity
            Not Before: Sep 24 22:36:36 2023 GMT
            Not After : Sep 22 22:41:36 2024 GMT
        Subject: CN=963482D630F68987EB99CDECA6F36CB24E2CD79D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:33:b4:9a:6c:68:80:e8:17:c5:a9:70:5b:6e:
                    33:84:48:d2:8b:42:50:b3:40:7c:75:3c:d3:9a:88:
                    e1:d4:fb:d7:fc:0a:39:7c:8c:92:5b:7c:e0:ad:08:
                    c2:24:b4:fd:24:3b:79:6b:f5:8f:e1:e2:c9:ba:76:
                    b5:6f:b1:1c:25:04:ab:17:2f:2c:ef:5b:71:87:1e:
                    8c:08:0e:78:99:91:bb:44:3f:5c:81:75:ff:8e:45:
                    f3:f1:22:b4:4f:1b:1e:fc:d1:e1:c3:23:32:1b:6f:
                    bb:e4:bf:9a:0a:80:92:fb:8c:ba:c9:c6:88:9c:64:
                    8a:be:0b:9f:4b:0e:d0:3e:85:eb:12:94:4b:6c:76:
                    66:2c:e2:2f:02:26:38:3d:eb:fe:63:a0:c5:17:4a:
                    45:3e:c0:4d:8a:b4:21:29:1c:cc:fb:11:a7:15:f5:
                    73:51:5a:9f:c2:62:38:c0:07:8e:ba:df:30:4a:82:
                    f9:d8:7b:e3:d2:93:6b:3f:75:5d:f2:b5:0a:d4:31:
                    47:49:66:3e:27:42:f6:26:d6:e0:1d:f8:1f:65:79:
                    ac:7f:82:de:be:74:e8:90:e7:33:99:2e:d6:cd:59:
                    ce:7a:29:d9:ba:68:00:01:12:67:31:13:97:98:ae:
                    7a:a8:5f:28:88:8a:a9:31:80:61:11:09:c4:0b:bd:
                    d1:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:34:82:D6:30:F6:89:87:EB:99:CD:EC:A6:F3:6C:B2:4E:2C:D7:9D
            X509v3 Authority Key Identifier:
                keyid:04:80:36:08:39:57:07:A6:C4:A7:62:64:31:98:A5:2C:49:DF:60:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/2/04803608395707A6C4A762643198A52C49DF6017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/04803608395707A6C4A762643198A52C49DF6017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/2/326131313a323963303a396666663a3a2f34382d3438203d3e20323136393239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:29c0:9fff::/48

    Signature Algorithm: sha256WithRSAEncryption
         17:61:06:a1:0c:1b:83:01:95:8f:9e:17:5a:29:9e:a0:94:e8:
         d2:a3:cf:f8:db:5f:e5:32:03:d8:05:33:d5:d4:bb:d0:9c:08:
         a2:07:e9:a4:a8:1f:a6:bf:dc:6b:17:34:71:a6:fb:1f:b9:54:
         93:ee:3d:9b:9c:23:d8:59:c8:49:38:b1:a4:31:72:f9:e9:38:
         29:95:1e:ff:50:91:66:bb:aa:f9:1a:52:9a:dc:74:24:f4:e6:
         69:b4:dd:39:c2:03:30:47:b0:cd:3a:de:5e:fc:0a:49:03:d1:
         f8:ea:c3:84:a2:95:8e:68:74:4e:f6:11:45:78:64:f8:b0:17:
         61:1b:76:d9:eb:d5:d2:dd:45:51:3b:f4:d4:49:40:02:ec:fa:
         3e:52:a5:04:5c:a5:dd:e6:d8:dc:38:2a:47:f0:df:51:db:23:
         c7:78:5c:54:48:9f:a4:9b:78:3b:06:e3:25:9d:97:08:48:42:
         b1:a2:7d:83:d1:29:f1:64:32:70:63:ea:1a:27:1e:ae:49:95:
         96:31:71:4f:5f:3c:14:9c:00:25:75:6c:f3:0a:3c:30:47:eb:
         b0:fc:4e:70:ad:c4:0e:97:29:e3:fc:be:b6:9a:cd:cb:c3:d1:
         fd:51:0e:59:af:6f:01:a6:b1:fa:fb:60:bd:98:86:9a:a2:ce:
         c4:91:bc:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----