Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/4sGE4jQ7P7IX0sY8gXpmW2-rbn8.roa
File:                     4sGE4jQ7P7IX0sY8gXpmW2-rbn8.roa (raw, json)
Hash identifier:          OUvU2IlLk70vNeLwPID1OBECu2T6lDll7WkKvJC8n+g=
Subject key identifier:   E2:C1:84:E2:34:3B:3F:B2:17:D2:C6:3C:81:7A:66:5B:6F:AB:6E:7F
Certificate issuer:       /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial:       018D0CD8842E6ADD4BB4B7ED99B3D9F2A7CD
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/4sGE4jQ7P7IX0sY8gXpmW2-rbn8.roa
Signing time:             Mon 15 Jan 2024 11:18:52 +0000
ROA not before:           Mon 15 Jan 2024 11:18:52 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:0c:d8:84:2e:6a:dd:4b:b4:b7:ed:99:b3:d9:f2:a7:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
        Validity
            Not Before: Jan 15 11:18:52 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=e2c184e2343b3fb217d2c63c817a665b6fab6e7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:33:32:e4:b6:56:84:f0:ba:a3:f7:db:1d:38:
                    13:ae:26:05:29:02:e0:d3:b9:91:d7:80:5e:f7:b0:
                    86:d4:1d:92:f6:ad:98:9e:1a:ac:2f:bc:61:5e:ad:
                    2a:b3:3c:d7:ba:dd:fb:95:84:e3:27:47:9c:33:10:
                    05:ed:e2:20:0c:3e:35:be:a2:c6:5e:c1:16:bf:a4:
                    c4:b7:a6:7c:f5:3e:73:a4:c1:03:3e:ff:8a:9f:c7:
                    ca:14:61:5c:83:89:e5:2e:7c:34:f4:8a:47:57:54:
                    18:eb:e5:3d:18:fe:cc:72:47:ec:5d:41:a8:68:1d:
                    9b:b6:83:16:b4:7e:68:c4:5f:55:6a:d3:cd:8d:91:
                    6d:cb:fb:e8:80:9e:c0:8f:d4:41:5d:8d:c2:44:ef:
                    7d:6c:a1:48:36:c5:68:32:7f:f0:76:1c:06:d0:8b:
                    d6:0c:64:a3:45:3f:03:41:ef:fa:d9:85:91:7d:d7:
                    8b:89:37:df:5d:81:22:18:bc:a6:64:3b:a9:6b:1e:
                    1a:1c:0f:ad:83:a2:c8:99:cd:f8:74:ef:b5:0e:3b:
                    8e:08:56:65:d2:22:aa:2b:82:15:5c:cc:39:43:26:
                    3d:85:27:2d:91:82:3e:7b:33:4d:e8:80:8c:74:a2:
                    76:2e:ec:5f:18:30:15:09:20:35:96:67:9d:00:33:
                    e8:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:C1:84:E2:34:3B:3F:B2:17:D2:C6:3C:81:7A:66:5B:6F:AB:6E:7F
            X509v3 Authority Key Identifier:
                keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/4sGE4jQ7P7IX0sY8gXpmW2-rbn8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         92:e0:a3:f4:31:99:74:64:bc:a8:4c:ae:3e:b3:6c:1d:fe:fd:
         96:9d:05:5f:87:45:22:6d:9c:bc:02:56:9a:79:b3:71:3c:c6:
         f4:28:2a:15:11:f4:3f:94:7c:1d:b3:8e:08:8e:6f:52:f8:0b:
         6e:28:fd:69:db:95:a8:0f:0e:41:09:6e:c6:b6:6f:97:4b:6b:
         13:26:07:69:a8:04:e0:49:f2:00:36:2f:98:a9:16:39:13:48:
         64:77:8b:b6:da:a4:61:e3:bc:ca:82:97:6a:54:81:47:3a:39:
         88:74:39:20:66:93:cb:31:af:72:40:9b:8c:d7:24:6b:44:e6:
         36:57:70:2c:f0:5e:24:4b:ec:d9:3b:1f:b9:ed:7b:e1:fa:bf:
         5b:b6:5b:71:90:44:2f:97:d7:44:e7:a3:7f:66:0d:7d:ca:7e:
         b3:2c:8d:a6:34:d0:0f:ec:15:4f:56:e9:9e:ad:d2:45:34:c5:
         68:8c:9b:73:8f:eb:39:23:59:f5:4c:af:2a:73:48:ab:60:94:
         7a:18:af:35:8c:e2:55:e9:16:52:af:78:0e:6a:09:e1:a3:a2:
         57:6b:d8:75:04:1e:14:f9:cc:dc:97:3a:12:e3:52:85:54:77:
         46:52:90:97:e7:53:64:58:92:1a:dd:c7:50:2a:3b:51:30:70:
         bd:66:fc:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----