Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/0pVA4JZ8XDNAJCs7n_3KgyCYlz4.roa
File:                     0pVA4JZ8XDNAJCs7n_3KgyCYlz4.roa (raw, json)
Hash identifier:          qReuwpyUzGjEPM0fTHlDsKFu4mOkXPutOr965kICC2o=
Subject key identifier:   D2:95:40:E0:96:7C:5C:33:40:24:2B:3B:9F:FD:CA:83:20:98:97:3E
Certificate issuer:       /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial:       018DB95CC96EFC4C7CB05FB1B360D625E7CE
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/0pVA4JZ8XDNAJCs7n_3KgyCYlz4.roa
Signing time:             Sat 17 Feb 2024 23:18:02 +0000
ROA not before:           Sat 17 Feb 2024 23:18:02 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:b9:5c:c9:6e:fc:4c:7c:b0:5f:b1:b3:60:d6:25:e7:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
        Validity
            Not Before: Feb 17 23:18:02 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=d29540e0967c5c3340242b3b9ffdca832098973e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7a:e5:84:46:e7:f8:a3:eb:ae:8c:10:95:80:
                    f3:3f:aa:96:51:71:ae:e4:aa:c1:b7:e3:90:95:9e:
                    b9:61:58:a3:b6:72:02:5d:5a:19:0c:34:dd:3e:80:
                    08:e5:60:37:f4:9d:8d:b8:2a:1d:e6:36:07:97:4b:
                    7f:70:f2:83:3b:af:e0:7b:32:61:78:a9:be:70:60:
                    b7:de:5d:83:8e:40:cd:90:b8:c8:60:23:ab:e6:2e:
                    f2:a5:a8:80:97:c0:df:ae:4c:3d:65:95:2f:7f:2f:
                    b2:2c:6c:15:5b:a8:ee:9f:ae:76:d9:fe:65:e1:7d:
                    ac:55:eb:d7:95:a1:1b:ca:1b:cf:ea:20:74:ce:97:
                    a3:d2:4c:a9:f7:df:c5:a2:ba:2d:38:bd:85:10:82:
                    95:dd:2c:5a:ea:56:52:d8:ea:8d:e7:bc:62:60:0e:
                    f9:f7:42:e1:4c:68:d1:29:2d:eb:7e:33:d2:5a:90:
                    f3:e6:88:fb:b3:1d:63:08:8c:cb:56:96:df:02:ee:
                    e5:85:5a:46:3d:9f:eb:8b:2b:f2:70:01:52:9d:d6:
                    a5:a7:b7:96:9f:b9:45:eb:43:73:bf:df:ae:0a:b1:
                    0b:3b:31:96:68:b8:46:ec:e5:ec:3b:0d:45:3d:14:
                    bd:5d:c5:24:8d:14:dc:5d:00:2b:5f:81:3f:cb:5e:
                    10:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:95:40:E0:96:7C:5C:33:40:24:2B:3B:9F:FD:CA:83:20:98:97:3E
            X509v3 Authority Key Identifier:
                keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/0pVA4JZ8XDNAJCs7n_3KgyCYlz4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         a0:3e:f0:6c:2c:12:0f:03:65:65:39:c2:d2:ff:60:75:f4:dc:
         1b:5d:4c:70:a4:02:4e:43:22:fd:63:54:0b:a5:35:64:67:37:
         de:f1:81:75:67:de:f9:5a:60:4c:5a:8d:2a:5d:98:53:a6:a0:
         06:d4:96:53:86:4a:c6:33:89:f1:40:54:86:1f:e2:4b:2f:fb:
         1b:0e:a5:85:05:28:86:6e:66:df:de:a6:b3:5a:f2:a5:d0:ba:
         9e:b8:22:2e:10:fc:04:cc:c9:c8:fc:d5:bb:cd:73:32:1e:6e:
         f0:20:4e:b2:a1:14:2a:92:37:8a:34:2b:41:f3:8b:60:a1:c0:
         7b:e5:5b:fe:24:60:bf:3e:f0:3b:d5:f3:7c:ef:29:21:2b:29:
         99:4a:12:28:c1:ad:bd:7d:6d:ac:46:97:13:e6:1e:43:b5:eb:
         39:de:ab:3f:5e:37:20:94:81:e7:a8:2b:eb:09:fd:db:91:3b:
         db:38:7a:4f:00:0b:65:a5:95:0b:1c:bb:29:8e:1f:f5:29:04:
         f4:a2:62:07:74:17:97:55:5b:b3:3e:9e:2d:75:22:b9:d3:eb:
         21:38:e6:3c:b0:d5:54:2a:eb:83:d4:df:fa:4a:99:e4:8f:97:
         04:61:f0:59:f5:33:ff:76:4f:f7:e1:0a:73:bb:71:43:ba:85:
         5b:1d:6f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----