Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/3xtQwm3f5fmVtLSGDDCnCiOnDa8.roa
File:                     3xtQwm3f5fmVtLSGDDCnCiOnDa8.roa (raw, json)
Hash identifier:          kXkZjMdn9TAuQLQh4GEUMOpJ3nPhyFXPNOPqxlh/e4o=
Subject key identifier:   DF:1B:50:C2:6D:DF:E5:F9:95:B4:B4:86:0C:30:A7:0A:23:A7:0D:AF
Certificate issuer:       /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial:       018CFDCBCBBB4415BCF8EC8FD8FDE73A514A
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/3xtQwm3f5fmVtLSGDDCnCiOnDa8.roa
Signing time:             Fri 12 Jan 2024 13:10:40 +0000
ROA not before:           Fri 12 Jan 2024 13:10:40 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:fd:cb:cb:bb:44:15:bc:f8:ec:8f:d8:fd:e7:3a:51:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
        Validity
            Not Before: Jan 12 13:10:40 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=df1b50c26ddfe5f995b4b4860c30a70a23a70daf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:22:5d:11:d1:52:ae:b9:c3:4c:9d:88:b2:5d:
                    c6:3c:3a:b9:fe:74:b3:0d:67:55:36:0f:cd:4f:18:
                    bf:92:c8:21:ce:f6:2a:93:c0:61:ef:56:8b:3f:ca:
                    f2:52:50:23:a6:05:a7:c6:ed:ad:98:d3:f2:e5:78:
                    fb:ca:03:d9:b8:c1:3f:2f:dd:78:07:3e:ee:68:50:
                    78:67:fa:fd:b4:12:a1:a8:fd:6e:81:08:27:27:83:
                    aa:8e:b1:31:72:1d:f3:d8:6c:32:58:d9:22:ad:5d:
                    36:b6:66:57:b1:e6:e9:9b:50:fe:f6:7b:77:15:e5:
                    15:f2:26:09:c6:ac:fe:56:d1:76:09:c7:d4:29:c7:
                    98:ef:ce:8e:d3:9c:6e:e3:80:7e:16:1f:3f:91:1a:
                    96:43:0b:c2:3c:56:3f:65:c6:80:bc:a8:93:aa:5b:
                    8f:54:83:66:1f:47:a3:04:e2:a3:ef:0a:fd:9c:0d:
                    fd:c7:b4:b8:69:c1:ea:52:6a:1d:ab:7d:53:41:d2:
                    84:b7:f8:10:a6:4f:4d:d2:93:b4:3c:27:08:10:3b:
                    ae:6f:50:db:de:91:59:92:3d:9b:fa:d3:e1:a4:6e:
                    ff:3a:5c:e6:cc:94:59:84:80:e2:8d:ff:75:88:f3:
                    c6:90:de:41:ba:1e:15:51:30:3f:97:e8:0c:e8:13:
                    31:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:1B:50:C2:6D:DF:E5:F9:95:B4:B4:86:0C:30:A7:0A:23:A7:0D:AF
            X509v3 Authority Key Identifier:
                keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/3xtQwm3f5fmVtLSGDDCnCiOnDa8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         4c:32:ef:e8:f8:ca:ca:fc:5e:20:bf:de:35:24:0d:f5:09:12:
         1d:23:8f:7c:b1:b5:11:db:82:b9:6e:4d:68:1a:24:f0:d5:01:
         d7:41:7e:cb:85:64:63:b7:f6:67:43:6d:51:8a:8d:76:1d:b9:
         d1:5c:f6:ab:51:13:ee:b4:37:c7:41:49:27:ee:ec:7c:71:d4:
         2a:f5:70:2c:bd:d3:f2:5c:26:4e:98:b2:7a:e4:c6:c8:91:81:
         85:7e:07:2e:fa:4a:3b:ed:65:66:11:87:b7:bb:6d:4a:41:9b:
         06:cb:4d:f4:91:8f:ec:37:4b:98:76:89:ed:91:05:8a:8d:6d:
         d0:88:13:b8:e8:f8:19:d3:36:e9:7f:be:03:85:45:04:c1:45:
         df:d7:73:7d:20:64:67:38:b8:d6:bd:81:93:97:ae:70:dc:f1:
         41:4e:48:6f:8e:68:69:ce:07:3f:41:bf:27:46:e3:10:7b:e9:
         20:9f:9d:a5:14:a9:ed:3c:a6:4f:51:17:20:8c:e9:80:5b:a2:
         02:df:23:73:6b:44:9a:dd:85:89:55:98:31:11:89:94:c5:49:
         7a:2c:58:1d:1d:f8:23:f5:30:f0:f7:57:ea:9b:b8:72:9d:e1:
         51:2c:ab:df:0a:ea:dc:a6:c3:d9:42:cf:72:2b:65:ca:e6:4d:
         59:12:bf:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----