Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/xi4QjdpY0C7nHsVKbZwkzS6pdIM.roa
File:                     xi4QjdpY0C7nHsVKbZwkzS6pdIM.roa (raw, json)
Hash identifier:          ew6qCZZ7JIh46W6y6x1J6UcdR60pMrNfkaCAzvHwyek=
Subject key identifier:   C6:2E:10:8D:DA:58:D0:2E:E7:1E:C5:4A:6D:9C:24:CD:2E:A9:74:83
Certificate issuer:       /CN=80ffd9df456adbe3b1e661ee15626865fe1688c8
Certificate serial:       0195C93504AA34F9F23539F437622BD3F77D
Authority key identifier: 80:FF:D9:DF:45:6A:DB:E3:B1:E6:61:EE:15:62:68:65:FE:16:88:C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/xi4QjdpY0C7nHsVKbZwkzS6pdIM.roa
Signing time:             Mon 24 Mar 2025 17:30:49 +0000
ROA not before:           Mon 24 Mar 2025 17:30:49 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     61992
IP address blocks:        2a14:e900::/29 maxlen: 29
                          2a14:e900:1000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:c9:35:04:aa:34:f9:f2:35:39:f4:37:62:2b:d3:f7:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80ffd9df456adbe3b1e661ee15626865fe1688c8
        Validity
            Not Before: Mar 24 17:30:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=c62e108dda58d02ee71ec54a6d9c24cd2ea97483
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:1c:05:49:a4:72:ab:66:81:00:db:d2:08:fc:
                    35:0c:fc:ad:80:05:4a:1e:20:d8:df:0c:b2:a6:df:
                    8f:01:af:7b:3d:3a:00:17:d4:b5:41:5f:df:c5:c6:
                    dc:0a:28:5c:85:09:6a:9c:21:40:bd:48:8b:a2:c8:
                    8f:bb:16:0f:95:af:8e:c0:48:f9:37:c8:46:7f:35:
                    58:8c:f3:7d:8e:67:76:df:53:62:2d:8a:6f:4f:be:
                    ee:31:e5:53:35:c2:64:1a:13:c7:87:89:ba:f7:a6:
                    de:d3:d9:45:35:b9:2e:54:b6:44:63:36:09:77:b0:
                    70:0e:cd:30:5c:45:b1:f8:fb:fd:e3:47:9f:49:ed:
                    b5:33:e0:d2:da:54:b9:83:7d:96:31:1d:cb:9e:ad:
                    c1:90:4d:29:63:1a:fd:f1:4f:3c:09:20:72:fb:43:
                    2f:ca:13:ac:2f:e9:f2:f8:b6:80:00:06:68:1c:53:
                    11:6d:96:9e:dc:08:f0:ce:ba:f8:b8:ed:2b:8c:d8:
                    ab:5e:62:68:54:ba:37:b8:0a:16:fb:95:85:57:3d:
                    ac:15:af:e7:a9:3b:ef:21:00:9f:56:80:47:12:c7:
                    78:48:04:d7:9c:51:34:31:9d:51:e1:9b:58:a3:0f:
                    c9:f1:0c:ca:d6:10:b9:e3:f8:06:1a:98:b3:12:a3:
                    70:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:2E:10:8D:DA:58:D0:2E:E7:1E:C5:4A:6D:9C:24:CD:2E:A9:74:83
            X509v3 Authority Key Identifier:
                keyid:80:FF:D9:DF:45:6A:DB:E3:B1:E6:61:EE:15:62:68:65:FE:16:88:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/xi4QjdpY0C7nHsVKbZwkzS6pdIM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:e900::/29

    Signature Algorithm: sha256WithRSAEncryption
         28:13:2b:6f:5b:e7:ef:0a:33:56:8b:3b:aa:f3:94:b1:fe:3b:
         d3:04:55:00:66:f2:cf:64:05:16:b2:f5:2f:42:2a:06:41:a8:
         d9:07:f7:8f:76:af:0b:46:31:1a:45:16:de:aa:b1:f2:6b:68:
         05:2f:2f:c5:64:80:a3:7d:7d:18:aa:cf:b3:80:e0:1a:d1:2e:
         5a:20:44:af:85:56:c3:9d:d3:b3:39:e6:42:bd:f0:f3:f9:c0:
         62:65:45:c0:3c:4d:02:79:94:51:d6:af:5f:09:b5:cf:9c:46:
         4d:44:6d:79:5f:01:42:86:05:e1:b4:ea:6e:e7:b4:42:c1:95:
         3f:de:73:4b:05:4c:b1:0a:20:0b:35:3b:ce:ae:19:1d:e8:5e:
         d2:97:4e:a7:6d:d7:ba:93:2d:69:dc:88:ed:34:b9:8d:19:77:
         31:2e:5b:02:f9:3f:34:e3:0f:74:db:b8:6e:f8:66:c7:d0:56:
         53:aa:0d:3b:6a:ba:80:62:50:47:69:3d:ed:67:ed:06:ed:db:
         a8:57:2b:e3:5b:3d:1f:37:cd:55:01:48:95:60:d9:a3:fa:6f:
         c3:61:a0:52:43:e6:06:58:dd:5e:80:f4:b1:7a:e9:02:42:19:
         d9:a3:5c:7e:f3:04:3e:fd:1f:69:1f:5e:35:c3:1a:b8:e0:e8:
         56:ba:38:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----