Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/HzyW06_qFMHD7FoonuBI96cfqI0.roa
File:                     HzyW06_qFMHD7FoonuBI96cfqI0.roa (raw, json)
Hash identifier:          tww5NCEvuHGOvnxV6oYkbLx4biv3u6Go3vXrACuAJA4=
Subject key identifier:   1F:3C:96:D3:AF:EA:14:C1:C3:EC:5A:28:9E:E0:48:F7:A7:1F:A8:8D
Certificate issuer:       /CN=6ffe7b21b62183d5e3d4ae1b93ff00909282c912
Certificate serial:       01957F289105C3C6CE4B5B7CE9CA6305A4A7
Authority key identifier: 6F:FE:7B:21:B6:21:83:D5:E3:D4:AE:1B:93:FF:00:90:92:82:C9:12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b_57IbYhg9Xj1K4bk_8AkJKCyRI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/HzyW06_qFMHD7FoonuBI96cfqI0.roa
Signing time:             Mon 10 Mar 2025 08:25:19 +0000
ROA not before:           Mon 10 Mar 2025 08:25:19 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     197942
IP address blocks:        171.32.0.0/16 maxlen: 24
                          2001:67c:2384::/48 maxlen: 48
                          2a14:1480::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:7f:28:91:05:c3:c6:ce:4b:5b:7c:e9:ca:63:05:a4:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ffe7b21b62183d5e3d4ae1b93ff00909282c912
        Validity
            Not Before: Mar 10 08:25:19 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=1f3c96d3afea14c1c3ec5a289ee048f7a71fa88d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:65:a8:aa:2c:27:e5:a6:9b:f4:c0:36:2b:9f:
                    f5:ed:f6:55:8a:80:9c:37:82:0d:d2:99:8f:f0:62:
                    3c:fe:05:ae:ad:0f:c5:62:4c:f4:bc:8c:04:63:4e:
                    1f:a6:dd:53:33:60:c7:8b:61:df:eb:aa:db:6c:31:
                    df:11:3b:a3:98:b4:a3:b1:72:0c:5c:06:f9:3f:0e:
                    8c:f7:63:b4:c5:4c:2d:cb:2e:c5:0a:b7:e6:19:3d:
                    19:98:da:e4:e7:65:bc:51:f2:87:e5:ab:fa:f1:3f:
                    dc:0a:e1:84:2f:f2:9d:1f:ca:24:17:6e:0c:4b:d6:
                    ab:88:50:c3:6e:f4:d4:c9:5f:a3:7e:8b:60:43:6a:
                    f7:fb:d3:c5:c3:aa:ca:f1:a3:6d:d0:fc:27:41:59:
                    d5:55:7a:cc:73:d6:13:1a:ca:c1:c7:14:f9:97:01:
                    c5:b0:c1:60:aa:18:c1:7c:3c:fa:f9:e4:af:a3:f3:
                    4a:9a:d0:0d:f8:19:5f:cf:95:a8:22:b3:dc:4e:69:
                    b5:0f:76:b1:06:79:9b:d9:fa:1c:96:80:c1:e0:21:
                    5c:7f:b6:3d:b6:f2:3d:7d:66:dc:6e:bb:69:f0:4f:
                    e4:f5:82:78:c3:60:55:14:8a:20:d5:f0:00:fd:e5:
                    cd:d2:cc:5a:57:88:48:cc:00:96:cd:31:86:30:74:
                    b2:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:3C:96:D3:AF:EA:14:C1:C3:EC:5A:28:9E:E0:48:F7:A7:1F:A8:8D
            X509v3 Authority Key Identifier:
                keyid:6F:FE:7B:21:B6:21:83:D5:E3:D4:AE:1B:93:FF:00:90:92:82:C9:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_57IbYhg9Xj1K4bk_8AkJKCyRI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/HzyW06_qFMHD7FoonuBI96cfqI0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.32.0.0/16
                IPv6:
                  2001:67c:2384::/48
                  2a14:1480::/32

    Signature Algorithm: sha256WithRSAEncryption
         01:6a:93:55:63:f4:0f:87:33:f1:3d:48:4c:06:2d:ad:66:af:
         bd:46:02:ec:ec:50:92:71:fd:c2:2d:a0:c1:92:d9:37:65:dd:
         19:37:45:fb:44:f5:ab:fc:10:65:18:c4:1f:c2:32:01:b1:bd:
         d2:60:3e:f2:5a:9e:f2:c9:33:f5:f8:f5:02:40:c7:84:6c:1b:
         ed:71:bd:51:32:ca:63:df:ca:68:db:31:60:78:b7:e3:58:0d:
         e0:9a:cc:46:61:30:31:4c:55:35:59:dd:86:ee:46:d3:a3:9b:
         56:36:86:cf:65:a4:c2:33:2a:17:35:25:c4:60:23:ce:a6:ab:
         40:c3:c9:3b:8d:53:12:85:d8:07:2c:a3:27:9b:83:d9:6e:fd:
         3f:73:18:f6:97:ab:44:f0:05:66:cd:11:6a:f0:70:64:3b:73:
         04:0b:8e:ab:83:89:af:a4:3b:42:70:be:c4:c9:5b:ca:86:91:
         3c:dd:53:a8:35:cd:a7:60:0d:77:98:3c:9b:88:d3:d9:fa:b1:
         bc:d5:06:e6:c2:9e:2d:d9:7a:6b:61:0a:8c:4b:dd:b4:c4:59:
         78:a2:a2:0a:ba:58:e5:f3:ab:21:14:aa:51:39:c1:f2:a5:a8:
         57:92:a3:9e:18:f4:00:05:18:b0:f9:db:e2:7a:cb:e6:24:d2:
         47:45:66:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----