Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/9732bb-f590-4194-85be-d069f17602b6/1/nRKqQSWKM2KOG7DGDlJo7FvwlGg.roa
File:                     nRKqQSWKM2KOG7DGDlJo7FvwlGg.roa (raw, json)
Hash identifier:          G5UWZxYAvoCWsXhSSwnd86ky6SZpPBzCIKBhsZP0lcM=
Subject key identifier:   9D:12:AA:41:25:8A:33:62:8E:1B:B0:C6:0E:52:68:EC:5B:F0:94:68
Certificate issuer:       /CN=e099ee07822ef2ace9c356f7b42caeaff25c9692
Certificate serial:       019423697F218E0563A07B96E886530AD272
Authority key identifier: E0:99:EE:07:82:2E:F2:AC:E9:C3:56:F7:B4:2C:AE:AF:F2:5C:96:92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4JnuB4Iu8qzpw1b3tCyur_JclpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/9732bb-f590-4194-85be-d069f17602b6/1/nRKqQSWKM2KOG7DGDlJo7FvwlGg.roa
Signing time:             Wed 01 Jan 2025 19:48:23 +0000
ROA not before:           Wed 01 Jan 2025 19:48:23 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     199679
IP address blocks:        2a14:6980:20::/44 maxlen: 44
                          2a14:6980:20::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:69:7f:21:8e:05:63:a0:7b:96:e8:86:53:0a:d2:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e099ee07822ef2ace9c356f7b42caeaff25c9692
        Validity
            Not Before: Jan  1 19:48:23 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=9d12aa41258a33628e1bb0c60e5268ec5bf09468
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:df:9f:c1:f0:9d:d9:d9:f3:d1:95:0b:de:1e:
                    08:09:1d:b5:68:91:0b:05:d8:b4:2f:af:0b:6c:25:
                    1e:bb:b5:0e:93:6c:0b:6e:21:c8:21:5d:8c:c2:b6:
                    71:29:f5:69:a4:48:c6:bd:4a:02:b8:e7:aa:e8:34:
                    a6:b0:8a:8f:78:c6:d2:46:b8:2d:df:36:5d:81:73:
                    60:3e:9c:3d:83:47:6c:6a:80:f5:3c:4d:d7:c5:ef:
                    c5:e4:f9:bb:dc:6d:98:16:2c:ca:8d:78:e3:56:97:
                    c0:03:f0:59:50:e4:d1:09:e3:5f:f3:0c:f9:80:89:
                    f6:a4:62:20:b4:28:30:b5:29:26:36:dd:c8:7b:d0:
                    79:4a:0c:a4:3d:9f:96:c2:44:d2:3b:fc:6c:b7:21:
                    47:76:b8:70:f2:06:10:9a:00:2e:3b:bc:6e:b4:55:
                    c0:b5:51:f1:6a:0b:7c:8b:c5:e7:97:6f:eb:a8:b4:
                    37:c8:89:3e:7d:f5:81:f0:87:6c:3e:64:88:79:1d:
                    22:dc:3c:3b:30:cf:ab:fe:10:51:ad:65:a8:57:47:
                    da:6d:24:ce:5b:9a:49:af:ac:8e:5a:0c:dd:79:c4:
                    c4:21:1f:a3:e0:86:ca:48:6a:03:a7:9b:92:51:75:
                    7f:56:c3:7e:4f:62:07:dd:d1:54:0b:77:b3:cd:da:
                    3d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:12:AA:41:25:8A:33:62:8E:1B:B0:C6:0E:52:68:EC:5B:F0:94:68
            X509v3 Authority Key Identifier:
                keyid:E0:99:EE:07:82:2E:F2:AC:E9:C3:56:F7:B4:2C:AE:AF:F2:5C:96:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4JnuB4Iu8qzpw1b3tCyur_JclpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/9732bb-f590-4194-85be-d069f17602b6/1/nRKqQSWKM2KOG7DGDlJo7FvwlGg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/9732bb-f590-4194-85be-d069f17602b6/1/4JnuB4Iu8qzpw1b3tCyur_JclpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:6980:20::/44

    Signature Algorithm: sha256WithRSAEncryption
         1f:34:5e:a6:3d:80:a4:95:3d:ae:88:30:9e:2e:47:62:31:5c:
         c1:7d:78:d4:40:a4:f9:07:c9:36:ae:81:27:b4:e0:4c:18:1c:
         7e:ec:43:ac:2c:fd:55:98:fa:70:1d:08:12:1f:fc:ac:52:97:
         60:e3:83:fc:01:4d:b8:66:cc:c1:35:fd:9e:bf:22:a6:e3:0d:
         8d:61:9e:68:fa:12:3e:8e:68:3a:51:74:0a:f1:a7:96:27:77:
         0e:88:b4:13:c1:8c:b5:d3:b3:c9:3f:08:12:d6:09:a7:d9:85:
         24:fd:86:dc:7f:1e:b6:9d:88:d5:d8:0b:19:51:f7:a4:32:18:
         25:e5:f1:0c:40:d2:b9:f8:9b:89:17:d4:ff:4f:80:a1:15:23:
         a8:e9:87:70:8f:bb:ae:71:08:c7:59:e9:20:e5:37:59:5b:0b:
         51:6a:5f:98:16:bb:4d:e5:05:91:0c:50:4e:e7:ce:0f:85:d2:
         9d:09:88:22:6d:c3:37:4d:ff:9d:e5:c2:66:55:a6:a9:37:a5:
         83:87:31:99:b0:18:d3:07:fc:5c:7b:cf:5e:0f:f5:b4:94:f8:
         f3:bd:61:a6:fa:ef:4b:74:c9:1a:28:39:00:1a:8a:ff:fe:8d:
         4a:b5:a2:99:91:47:a9:b2:28:10:4e:d7:74:5b:4e:4b:85:58:
         4d:10:1c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----