Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/7HfOX3VXYMpd2AIPBc7-S-uMs_8.roa
File:                     7HfOX3VXYMpd2AIPBc7-S-uMs_8.roa (raw, json)
Hash identifier:          k5M6cr3ux0zaC3HrK4AQu/eEDnL7gIrijJy4BZ0Nw4M=
Subject key identifier:   EC:77:CE:5F:75:57:60:CA:5D:D8:02:0F:05:CE:FE:4B:EB:8C:B3:FF
Certificate issuer:       /CN=29fa7dd63f2e2d87b5f7850093c743bbfbe14e44
Certificate serial:       019600E056701FD979377020BC94E524E1C1
Authority key identifier: 29:FA:7D:D6:3F:2E:2D:87:B5:F7:85:00:93:C7:43:BB:FB:E1:4E:44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/7HfOX3VXYMpd2AIPBc7-S-uMs_8.roa
Signing time:             Fri 04 Apr 2025 12:57:04 +0000
ROA not before:           Fri 04 Apr 2025 12:57:04 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     133944
IP address blocks:        2a14:c884:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:00:e0:56:70:1f:d9:79:37:70:20:bc:94:e5:24:e1:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29fa7dd63f2e2d87b5f7850093c743bbfbe14e44
        Validity
            Not Before: Apr  4 12:57:04 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=ec77ce5f755760ca5dd8020f05cefe4beb8cb3ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f3:bd:05:85:12:b3:78:c3:cc:38:f2:18:10:
                    2a:63:6d:54:26:e2:35:21:78:69:b6:ae:41:21:e3:
                    1e:48:4c:b9:da:1b:dd:a1:90:35:f2:36:84:c1:0b:
                    41:9d:2d:a0:20:37:2c:dc:c4:c8:e4:b5:3f:90:1c:
                    2c:13:fc:3c:41:47:e9:9a:e4:6b:d0:1a:cd:3f:36:
                    65:05:36:9a:9c:ae:3d:f8:8a:c2:72:3e:68:33:e3:
                    ca:d3:d1:f8:0f:be:20:2b:c0:05:7d:48:30:8a:06:
                    d8:ee:db:4e:7d:14:b7:1a:12:64:6c:3f:81:8f:99:
                    16:6c:62:45:85:ee:fc:31:1c:f2:91:6e:8c:5c:56:
                    0b:64:cc:98:d4:9c:4d:96:e7:76:ab:a2:51:fa:ce:
                    7a:24:b1:ef:62:92:35:26:a4:ca:54:37:27:6a:ab:
                    bd:87:52:f5:15:3d:40:11:e0:3b:ad:05:19:c3:35:
                    c6:fb:23:9b:82:9b:2d:ab:f1:91:f9:ec:a7:1a:41:
                    5a:8a:11:97:71:e1:c4:49:3f:92:3d:a1:0b:26:6b:
                    3d:07:ee:f3:dc:74:59:7a:39:fa:bb:c6:a5:6c:ce:
                    5e:82:02:e1:f8:8e:87:86:7c:3d:b0:e6:86:86:e6:
                    e4:33:df:99:c3:4e:9c:1d:43:39:bf:23:68:47:ef:
                    f1:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:77:CE:5F:75:57:60:CA:5D:D8:02:0F:05:CE:FE:4B:EB:8C:B3:FF
            X509v3 Authority Key Identifier:
                keyid:29:FA:7D:D6:3F:2E:2D:87:B5:F7:85:00:93:C7:43:BB:FB:E1:4E:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/7HfOX3VXYMpd2AIPBc7-S-uMs_8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:c884:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         a2:ef:ab:2d:44:71:56:eb:8c:65:91:04:2f:8a:91:14:dd:5a:
         2b:02:8f:6d:59:be:c8:4d:1d:03:dd:28:b8:68:71:ba:7e:8d:
         a9:e2:83:44:2d:71:a7:b2:be:05:47:6e:9e:ec:6b:f9:e6:0b:
         bd:e8:f6:7b:a3:ed:4d:60:b3:57:77:de:8d:94:3c:2c:5f:cc:
         ac:84:f1:46:7f:39:84:a8:87:db:7e:da:bb:7c:d0:2a:17:26:
         af:a3:dd:bf:ad:5d:b1:6e:9c:b1:f8:db:04:2a:4a:3c:f8:6e:
         e3:30:02:63:bd:25:1d:6d:5c:f3:08:3a:ea:3d:d0:b7:2f:96:
         9a:9c:8b:bc:1e:b4:a3:9d:7b:6e:2a:62:4e:8b:87:e6:77:36:
         7f:23:8d:c5:c1:70:04:c2:f2:42:bb:c6:89:63:ad:0c:3c:37:
         dc:fa:20:52:3f:27:02:b7:88:77:b7:62:b2:52:4c:d9:97:4f:
         57:e5:33:18:28:f4:b3:0c:55:40:76:d6:4f:28:f4:22:3d:a6:
         0d:fb:a0:1b:ae:a8:ee:c0:33:b7:65:71:92:d4:e4:8b:ce:35:
         87:9c:f4:71:b1:a5:6c:69:74:af:13:73:58:bb:bc:72:5b:c0:
         86:4f:ae:52:49:4e:d2:83:07:26:f5:56:6c:5e:ba:9d:6c:07:
         50:df:39:4d
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZYA4FZwH9l5N3AgvJTlJOHBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ZmE3ZGQ2M2YyZTJkODdiNWY3ODUwMDkzYzc0M2JiZmJl
MTRlNDQwHhcNMjUwNDA0MTI1NzA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYzc3Y2U1Zjc1NTc2MGNhNWRkODAyMGYwNWNlZmU0YmViOGNiM2ZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofO9BYUSs3jDzDjyGBAqY21UJuI1
IXhptq5BIeMeSEy52hvdoZA18jaEwQtBnS2gIDcs3MTI5LU/kBwsE/w8QUfpmuRr
0BrNPzZlBTaanK49+IrCcj5oM+PK09H4D74gK8AFfUgwigbY7ttOfRS3GhJkbD+B
j5kWbGJFhe78MRzykW6MXFYLZMyY1JxNlud2q6JR+s56JLHvYpI1JqTKVDcnaqu9
h1L1FT1AEeA7rQUZwzXG+yObgpstq/GR+eynGkFaihGXceHEST+SPaELJms9B+7z
3HRZejn6u8albM5eggLh+I6Hhnw9sOaGhubkM9+Zw06cHUM5vyNoR+/xVQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFOx3zl91V2DKXdgCDwXO/kvrjLP/MB8GA1UdIwQY
MBaAFCn6fdY/Li2HtfeFAJPHQ7v74U5EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2ZwOTFqOHVMWWUxOTRVQWs4ZER1X3ZoVGtRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8yYzBjYmYtMTFmNy00YjZkLWI4OGUt
NzlmN2I2ZWE3YzE0LzEvN0hmT1gzVlhZTXBkMkFJUEJjNy1TLXVNc184LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy8yYzBjYmYtMTFmNy00YjZkLWI4OGUtNzlmN2I2ZWE3YzE0
LzEvS2ZwOTFqOHVMWWUxOTRVQWs4ZER1X3ZoVGtRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYHKhTIhIAw
DQYJKoZIhvcNAQELBQADggEBAKLvqy1EcVbrjGWRBC+KkRTdWisCj21ZvshNHQPd
KLhocbp+janig0QtcaeyvgVHbp7sa/nmC73o9nuj7U1gs1d33o2UPCxfzKyE8UZ/
OYSoh9t+2rt80CoXJq+j3b+tXbFunLH42wQqSjz4buMwAmO9JR1tXPMIOuo90Lcv
lpqci7wetKOde24qYk6Lh+Z3Nn8jjcXBcATC8kK7xoljrQw8N9z6IFI/JwK3iHe3
YrJSTNmXT1flMxgo9LMMVUB21k8o9CI9pg37oBuuqO7AM7dlcZLU5IvONYec9HGx
pWxpdK8Tc1i7vHJbwIZPrlJJTtKDByb1Vmxeup1sB1DfOU0=
-----END CERTIFICATE-----