Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/eM7RoSEq3C715iKtcwBUqsiVTDM.roa
File:                     eM7RoSEq3C715iKtcwBUqsiVTDM.roa (raw, json)
Hash identifier:          U7xNVv9g2fKrI4EOjzXQcIX1ekwna/aEJqfXxfKaR90=
Subject key identifier:   78:CE:D1:A1:21:2A:DC:2E:F5:E6:22:AD:73:00:54:AA:C8:95:4C:33
Certificate issuer:       /CN=29fa7dd63f2e2d87b5f7850093c743bbfbe14e44
Certificate serial:       019600DE4953193853A02222156CEF93748B
Authority key identifier: 29:FA:7D:D6:3F:2E:2D:87:B5:F7:85:00:93:C7:43:BB:FB:E1:4E:44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/eM7RoSEq3C715iKtcwBUqsiVTDM.roa
Signing time:             Fri 04 Apr 2025 12:54:49 +0000
ROA not before:           Fri 04 Apr 2025 12:54:49 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     203061
IP address blocks:        2a14:c881::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:00:de:49:53:19:38:53:a0:22:22:15:6c:ef:93:74:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29fa7dd63f2e2d87b5f7850093c743bbfbe14e44
        Validity
            Not Before: Apr  4 12:54:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=78ced1a1212adc2ef5e622ad730054aac8954c33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:60:17:17:3c:a0:d2:39:ac:e0:85:31:2b:ea:
                    d5:b1:d3:cd:71:48:60:fa:ef:98:70:48:4f:38:b6:
                    03:f1:18:1e:ec:d5:fd:76:b0:37:64:75:0e:50:76:
                    1f:b8:0b:56:df:97:dc:06:9d:40:27:61:65:cb:1d:
                    a5:a0:1a:07:b8:ce:e0:a8:95:13:a9:56:23:23:ee:
                    f6:65:c4:7f:a7:0c:8e:a4:3e:d1:1b:f4:29:1b:7b:
                    aa:cd:b0:0b:ed:56:3e:d7:fa:45:01:fc:13:7e:2e:
                    75:17:9c:44:34:3b:bb:e4:d2:a9:96:39:9d:68:71:
                    6d:8a:9d:5f:4a:50:f9:08:6f:7b:38:2c:8b:03:43:
                    17:db:e7:2f:8d:07:fd:63:07:29:8a:ab:1d:cc:d7:
                    bf:02:1c:97:1c:1f:b5:0b:9f:87:86:ef:53:cc:8a:
                    e4:f9:f6:f0:49:72:82:b8:15:46:1f:bc:15:d4:29:
                    c4:f0:29:2e:f2:a7:a4:36:fb:44:30:63:7c:10:53:
                    45:cc:cf:0b:8f:0b:29:1d:26:a6:ef:66:05:8d:35:
                    aa:54:7c:c0:93:6d:61:89:7b:5c:e8:bc:3e:f0:f9:
                    e2:2d:f6:92:0e:b8:4d:35:b1:7c:fb:f5:8f:df:1e:
                    8a:84:14:b8:e2:02:12:83:85:9e:ed:cc:df:5d:8a:
                    74:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:CE:D1:A1:21:2A:DC:2E:F5:E6:22:AD:73:00:54:AA:C8:95:4C:33
            X509v3 Authority Key Identifier:
                keyid:29:FA:7D:D6:3F:2E:2D:87:B5:F7:85:00:93:C7:43:BB:FB:E1:4E:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/eM7RoSEq3C715iKtcwBUqsiVTDM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:c881::/33

    Signature Algorithm: sha256WithRSAEncryption
         7a:27:05:7f:23:3b:89:fa:e2:fb:c2:49:5f:88:80:d9:ef:d8:
         20:ea:dd:85:5f:c4:58:2d:12:3e:10:75:8d:86:29:ae:08:5a:
         ff:3f:5d:15:47:e5:1f:20:89:56:1a:9b:9c:83:5b:5d:16:3a:
         d8:e6:d3:b5:cf:4e:0f:fb:41:28:71:aa:65:c3:64:4e:6f:a6:
         0d:0f:ad:96:73:c4:fd:d4:02:95:99:f6:8f:16:3a:bd:63:33:
         36:6a:8a:ea:5f:77:03:dc:4e:57:8c:5e:80:1e:6c:54:97:61:
         b7:e0:59:99:d1:cc:9a:64:89:00:cd:47:92:a1:d3:05:df:7f:
         1f:f1:67:d6:85:02:92:8a:ae:5b:f8:67:fb:98:ef:60:0e:e3:
         3e:86:59:e7:cd:20:c7:52:92:47:41:ce:b8:ce:89:2c:59:ed:
         3e:3e:16:73:b0:32:72:5e:91:64:f7:cb:a0:6f:f8:0b:b8:57:
         20:42:f4:fa:e2:37:72:af:5f:f1:64:77:18:f7:71:e5:06:43:
         e4:bc:f6:d8:55:d4:b1:97:46:8c:2f:d6:e4:cb:db:98:e5:16:
         17:bf:d8:6d:c7:38:31:0c:7d:f1:24:3d:06:16:16:69:55:11:
         31:6f:2c:07:7d:c1:66:61:f0:96:ec:31:23:c5:21:8c:f1:c1:
         56:e0:d1:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----