Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/AS1OofidK61eu7Q73-UTG4c9rQM.roa
File:                     AS1OofidK61eu7Q73-UTG4c9rQM.roa (raw, json)
Hash identifier:          1STwoyE2fLjFxWH9rj1LN+BqrLGDlUahz2A2bFLz1/g=
Subject key identifier:   01:2D:4E:A1:F8:9D:2B:AD:5E:BB:B4:3B:DF:E5:13:1B:87:3D:AD:03
Certificate issuer:       /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial:       018CDEE795A7D7DC74BF8AB582B75F756815
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/AS1OofidK61eu7Q73-UTG4c9rQM.roa
Signing time:             Sat 06 Jan 2024 13:12:48 +0000
ROA not before:           Sat 06 Jan 2024 13:12:48 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:de:e7:95:a7:d7:dc:74:bf:8a:b5:82:b7:5f:75:68:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
        Validity
            Not Before: Jan  6 13:12:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=012d4ea1f89d2bad5ebbb43bdfe5131b873dad03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:1f:1b:7e:84:85:c9:f5:7d:4e:39:1c:d1:72:
                    c6:b0:b2:9c:1a:94:25:8d:cc:73:56:84:2a:fa:b4:
                    b2:9b:8b:98:a2:16:7f:05:fa:bc:b1:85:a7:c4:ce:
                    7a:9c:79:67:87:d1:36:2d:00:ee:22:bd:42:b1:7c:
                    19:bf:46:44:5f:b2:fb:6b:f9:66:21:f2:2f:5d:ea:
                    00:4c:a5:2d:45:fd:44:9e:e4:15:68:ce:8c:a3:82:
                    a1:99:02:e3:94:d8:31:98:0d:1e:ce:f6:14:ae:b3:
                    49:f3:58:71:a1:40:ae:41:08:68:b2:fb:46:7a:b0:
                    8f:73:7e:c2:6e:e9:a4:05:17:80:3b:a6:04:c3:e2:
                    09:7e:ab:80:80:bf:30:5a:22:48:d1:27:32:01:1d:
                    30:a4:48:15:ec:8d:88:be:f7:6e:71:05:41:c0:5f:
                    98:a0:ee:3d:47:ed:01:c5:44:38:8c:c5:de:9d:da:
                    77:44:fc:64:a9:bd:73:71:99:4e:53:7f:47:7f:d0:
                    8f:ac:f4:b6:b8:98:d2:b0:9d:2c:1f:09:c5:cc:b7:
                    7f:17:a7:fd:43:37:f9:15:5e:12:1d:48:34:a0:1f:
                    56:bc:3e:ab:82:46:29:2d:10:8e:82:3b:72:ed:a0:
                    26:2d:4b:f5:9d:cd:5b:39:7d:f7:72:50:d5:73:d3:
                    f0:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:2D:4E:A1:F8:9D:2B:AD:5E:BB:B4:3B:DF:E5:13:1B:87:3D:AD:03
            X509v3 Authority Key Identifier:
                keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/AS1OofidK61eu7Q73-UTG4c9rQM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         3b:e2:68:c7:61:43:84:13:6d:63:c5:36:3a:b1:1e:e5:8f:c0:
         9c:62:e9:aa:20:7c:a8:fc:ac:19:23:00:35:5f:91:f0:cb:7c:
         1e:5d:43:c4:bd:99:41:61:00:39:1b:4c:61:f5:ea:ea:e9:8c:
         6e:7c:8e:ee:78:56:54:34:2a:01:81:cb:fd:cc:ea:a1:3b:ac:
         b7:78:21:a5:39:44:c1:8c:ce:fb:f7:5c:f1:f8:1e:8d:f8:10:
         62:2f:ec:47:59:0b:83:1d:ff:86:66:a6:7c:07:3f:e4:1c:a6:
         49:ff:54:e3:c8:e5:72:88:ff:5a:25:1f:88:a7:ed:d3:c3:10:
         7d:3f:a5:a5:5c:a0:b6:94:aa:b9:94:50:02:e8:b7:7e:e3:db:
         95:92:a5:dd:17:bb:5c:30:5c:e5:c3:b5:b6:a4:2d:f1:5a:51:
         e0:1a:2a:a2:cb:ad:70:b1:d2:22:6c:21:d4:cb:5d:e7:bb:b5:
         c5:0d:0d:96:5d:5d:a9:42:3e:37:f3:a7:2f:ee:35:cf:01:29:
         68:62:b7:44:5c:d2:4b:cd:f3:4d:93:be:b6:94:bc:f9:6a:a7:
         13:fe:a8:5e:7d:60:3a:89:d8:87:d2:28:c1:b8:ce:9f:e1:63:
         f4:c5:e3:98:01:08:98:be:a8:d8:90:73:71:28:85:15:fc:39:
         86:2e:3e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----