Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/us6ukJjPwguMUHmhc8SpjnjeHOE.roa
File:                     us6ukJjPwguMUHmhc8SpjnjeHOE.roa (raw, json)
Hash identifier:          RuHDwxtF2zmik+S8Nhu0t8NrGvwHVQJraNmp1nORf/c=
Subject key identifier:   BA:CE:AE:90:98:CF:C2:0B:8C:50:79:A1:73:C4:A9:8E:78:DE:1C:E1
Certificate issuer:       /CN=29fa7dd63f2e2d87b5f7850093c743bbfbe14e44
Certificate serial:       019600E10844D5CC0100CC4A0B8E9A75F883
Authority key identifier: 29:FA:7D:D6:3F:2E:2D:87:B5:F7:85:00:93:C7:43:BB:FB:E1:4E:44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/us6ukJjPwguMUHmhc8SpjnjeHOE.roa
Signing time:             Fri 04 Apr 2025 12:57:49 +0000
ROA not before:           Fri 04 Apr 2025 12:57:49 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     202044
IP address blocks:        2a14:c886:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:00:e1:08:44:d5:cc:01:00:cc:4a:0b:8e:9a:75:f8:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29fa7dd63f2e2d87b5f7850093c743bbfbe14e44
        Validity
            Not Before: Apr  4 12:57:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=baceae9098cfc20b8c5079a173c4a98e78de1ce1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:e9:0c:ae:76:a3:3c:ac:d5:86:10:45:73:30:
                    dc:b3:74:dc:c1:8b:8c:4c:f1:52:c4:3f:50:c7:09:
                    c9:c7:13:52:a6:cf:5f:2a:8e:4d:e2:c9:2f:da:79:
                    4f:69:92:a3:9a:84:50:36:f8:1a:2c:90:37:50:f0:
                    95:89:61:bc:e5:32:a9:84:57:f7:a6:51:72:f6:cd:
                    32:2e:94:52:10:76:04:78:78:09:95:1d:a2:fd:bd:
                    c7:0c:a3:4e:5a:cc:a0:9b:31:07:31:7b:35:18:b5:
                    92:cb:db:23:12:d7:5e:0b:90:ab:90:bf:0d:4b:b0:
                    bb:17:7a:91:f0:7e:3b:c8:1a:08:bf:b9:e9:bf:70:
                    6b:d8:14:3f:2c:fc:e9:c9:02:5b:6d:21:9f:da:47:
                    bb:82:87:2c:87:9f:05:df:d7:a7:15:a3:65:b1:39:
                    63:79:d0:13:ca:62:f8:35:2c:45:62:e2:0c:9c:fa:
                    f0:17:de:8d:84:4c:ec:83:47:57:4d:55:e3:c2:a9:
                    54:8c:cb:85:01:13:09:3e:c6:bc:33:08:49:33:40:
                    53:89:cf:80:63:ed:ea:99:f5:34:ec:be:ca:0c:86:
                    9f:22:32:14:6e:dd:6d:3f:26:03:b9:68:54:35:0a:
                    51:ce:57:2e:c4:5f:60:0b:88:91:36:96:b4:24:c3:
                    42:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:CE:AE:90:98:CF:C2:0B:8C:50:79:A1:73:C4:A9:8E:78:DE:1C:E1
            X509v3 Authority Key Identifier:
                keyid:29:FA:7D:D6:3F:2E:2D:87:B5:F7:85:00:93:C7:43:BB:FB:E1:4E:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/us6ukJjPwguMUHmhc8SpjnjeHOE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:c886:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         25:bc:a7:cb:ee:10:e8:44:b5:10:b2:ae:7f:2f:d6:78:28:09:
         55:14:f8:00:a3:fa:3d:81:00:e8:a8:d4:11:b4:9b:99:5c:f9:
         7b:61:7f:82:b5:59:2d:7d:a0:71:ad:e9:dc:23:5f:e4:36:45:
         57:9d:05:f5:b7:8e:59:5f:b0:96:44:8e:b6:a2:61:99:5a:c5:
         b1:97:35:1a:40:ba:15:71:c5:48:d2:33:78:1a:8f:d5:10:ab:
         be:d9:d4:7c:30:b1:16:f8:48:8c:17:67:05:74:d5:11:6c:cf:
         7c:b0:45:28:b9:67:8d:fb:20:0b:82:2f:a6:24:11:9f:a1:db:
         1b:66:7d:80:ba:72:81:cf:8d:49:62:7f:e9:03:05:9f:5f:b5:
         ab:7b:a8:60:e6:a5:ca:52:96:34:7a:00:41:5f:2d:6d:e0:ff:
         72:71:87:68:ce:81:4a:44:df:a6:01:78:d5:32:6f:32:8c:a4:
         01:5b:7c:9c:81:74:ba:f1:06:c3:2d:e7:ff:57:f0:4f:1b:25:
         2d:65:a4:9e:4f:e8:68:84:4d:c0:b6:a0:4c:27:4b:a4:ed:0f:
         7e:7f:bf:36:80:e6:66:58:db:f3:45:52:35:05:5b:5a:e9:a0:
         c0:df:7d:b5:1c:e5:a8:89:51:f2:9c:52:66:0c:d3:35:ba:57:
         3a:ac:7f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----