Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/6XRNH3_8wBYQnbcJYwEwmzuBXy0.roa
File:                     6XRNH3_8wBYQnbcJYwEwmzuBXy0.roa (raw, json)
Hash identifier:          FxeR2PZokidWuApKpgo2TuAql4MqMrM69Sx5+Z0ePUA=
Subject key identifier:   E9:74:4D:1F:7F:FC:C0:16:10:9D:B7:09:63:01:30:9B:3B:81:5F:2D
Certificate issuer:       /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial:       018EB8B0BC6EEED25AECE35820BD76704AE5
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/6XRNH3_8wBYQnbcJYwEwmzuBXy0.roa
Signing time:             Sun 07 Apr 2024 13:12:54 +0000
ROA not before:           Sun 07 Apr 2024 13:12:54 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:b8:b0:bc:6e:ee:d2:5a:ec:e3:58:20:bd:76:70:4a:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
        Validity
            Not Before: Apr  7 13:12:54 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=e9744d1f7ffcc016109db7096301309b3b815f2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:93:ac:f3:aa:1b:cc:67:91:f1:69:de:62:aa:
                    c1:2f:fb:d2:f0:20:f2:29:14:2c:b3:6e:b4:86:2f:
                    b9:ed:db:a4:c2:2c:96:04:25:8e:b1:de:39:0d:ea:
                    6c:27:bf:d7:bf:ba:4b:be:7a:42:18:17:cc:2b:63:
                    4b:c6:59:51:ca:c1:ba:9e:00:5b:e6:f3:d8:c2:36:
                    a8:56:bc:cb:83:34:16:54:b5:f0:49:d6:fe:18:db:
                    81:e7:de:79:92:12:f3:fd:ac:03:c9:c7:95:fe:04:
                    0f:a0:87:87:07:9d:4f:a5:cc:dc:b4:41:ba:24:6f:
                    44:37:c3:e1:ab:18:63:e0:c1:22:36:e9:ab:3c:86:
                    8e:ef:79:ea:2c:f0:1f:88:43:6b:21:c2:f3:c7:6f:
                    36:9c:91:d8:48:b2:64:72:4b:c6:16:22:e9:25:04:
                    10:4c:4a:c7:89:7e:1b:ae:4f:08:c5:0f:0f:75:92:
                    d3:67:f0:6e:87:1b:24:47:8e:3e:32:a4:3e:4f:2e:
                    6e:45:67:87:e5:bf:41:dc:2f:49:94:32:36:a9:53:
                    e2:66:28:df:cf:55:23:25:69:6f:17:9c:67:5e:ce:
                    4f:3c:14:c5:85:7d:fa:12:57:17:dd:d8:b0:8f:e8:
                    f0:0c:25:c2:73:cc:55:7c:77:4c:59:b9:62:e4:3a:
                    30:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:74:4D:1F:7F:FC:C0:16:10:9D:B7:09:63:01:30:9B:3B:81:5F:2D
            X509v3 Authority Key Identifier:
                keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/6XRNH3_8wBYQnbcJYwEwmzuBXy0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         63:9e:05:7b:1a:69:c2:64:3d:8c:47:fa:44:be:7c:6f:76:44:
         e5:62:ed:9a:df:98:b9:2d:8e:0a:3f:f9:7a:2b:9b:77:18:f9:
         16:65:0a:49:3a:4f:39:92:62:4c:53:12:43:94:bb:0e:b0:1b:
         cf:bc:ef:2d:31:f8:17:20:03:83:3c:8c:5b:70:ed:e7:d8:82:
         1e:42:f6:93:fe:de:48:e5:4a:f8:8a:47:b5:8d:af:0e:21:1f:
         f8:dc:99:54:c8:07:cd:5a:a1:62:83:69:61:cb:52:50:75:f5:
         f9:d7:fa:15:d0:a2:18:d0:4c:60:6d:94:b8:91:b1:5c:fc:de:
         b9:fb:99:e0:5e:71:09:bc:ee:87:65:10:b5:bd:2b:bb:df:6c:
         d9:eb:25:e7:45:ca:e7:25:80:2f:d9:a2:bf:fe:c6:39:82:27:
         d2:47:41:b1:7d:c9:10:b1:50:e8:8e:67:dd:8b:3a:77:97:21:
         d3:46:a0:95:6c:67:bb:f8:19:40:8f:9b:c1:81:da:41:ec:b9:
         88:04:51:bd:f8:ed:ca:53:5c:74:71:d9:18:21:b7:f4:76:a9:
         79:69:b2:a1:14:c1:4b:0a:2e:ad:d4:25:a0:eb:63:28:1f:0b:
         1b:21:07:a9:ab:86:6a:f5:bd:88:94:e8:6d:2d:ec:3f:e2:83:
         aa:f1:94:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----