Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ECE6aaXnZTULpc8Wrd5uMlZyRMc.roa
File:                     ECE6aaXnZTULpc8Wrd5uMlZyRMc.roa (raw, json)
Hash identifier:          5e26v2NbeXkUpZ6GzDJ047N4Jci4LPGcHPTmYp4SQ0E=
Subject key identifier:   10:21:3A:69:A5:E7:65:35:0B:A5:CF:16:AD:DE:6E:32:56:72:44:C7
Certificate issuer:       /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial:       018CB01FB983B5A1EE019AF1881021F54095
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ECE6aaXnZTULpc8Wrd5uMlZyRMc.roa
Signing time:             Thu 28 Dec 2023 11:11:58 +0000
ROA not before:           Thu 28 Dec 2023 11:11:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:b0:1f:b9:83:b5:a1:ee:01:9a:f1:88:10:21:f5:40:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
        Validity
            Not Before: Dec 28 11:11:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=10213a69a5e765350ba5cf16adde6e32567244c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:b3:b2:e6:ca:ef:53:15:08:6e:bf:9c:09:ed:
                    72:1b:88:ea:ac:11:95:d9:3a:a9:91:94:cb:2a:c7:
                    71:61:d2:e8:f0:d8:25:7b:d6:ca:5f:a8:94:77:c1:
                    52:bf:f9:74:32:cb:47:5f:13:7c:f0:e7:6c:d7:06:
                    a8:72:d2:4d:8e:f1:21:f8:05:79:8e:5e:ce:55:4e:
                    ed:f3:c0:38:af:ad:c5:23:cc:76:34:9d:49:91:65:
                    4b:da:f5:29:ce:78:b5:47:5c:21:e4:37:a2:96:cd:
                    f5:09:6b:bc:96:72:31:9e:39:85:bd:19:a3:23:f1:
                    c8:f2:f1:48:89:40:c7:1c:a8:1f:3c:b9:61:95:e1:
                    a6:4a:85:de:2f:82:13:b3:f1:16:ef:14:68:cc:33:
                    63:0d:f8:e6:25:3b:06:d5:9e:f3:35:63:28:b3:0b:
                    6c:9c:09:4e:5a:2a:14:60:bd:db:57:59:88:b8:7a:
                    fe:c7:f6:3a:e9:72:18:0f:3a:de:e3:d9:2a:9d:35:
                    e4:ae:ec:12:64:f3:92:5b:ec:47:a3:fb:d1:46:74:
                    38:16:64:ea:f7:16:da:4b:5a:e7:60:34:3b:7b:f7:
                    4e:4e:66:c8:e9:1a:4e:c3:9d:28:18:d4:48:e8:06:
                    43:61:8c:15:21:58:f9:31:c0:01:2b:da:2a:b5:94:
                    bb:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:21:3A:69:A5:E7:65:35:0B:A5:CF:16:AD:DE:6E:32:56:72:44:C7
            X509v3 Authority Key Identifier:
                keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ECE6aaXnZTULpc8Wrd5uMlZyRMc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         81:fe:92:0f:73:f5:dd:b9:5a:15:76:8a:27:db:48:3c:69:3d:
         54:3f:ba:fc:0e:1b:a2:48:1f:fc:2a:62:02:36:ce:6e:88:3f:
         ef:4c:6b:d6:c1:65:6b:ae:9c:8a:a1:05:9e:76:be:1d:e7:4c:
         8f:42:03:49:b4:d5:16:ec:86:9e:1e:ce:e3:d9:fa:89:25:a6:
         7e:ec:68:db:17:e8:77:63:26:cc:9c:5e:fb:da:24:c3:d0:65:
         2f:09:b8:ad:fd:de:c9:12:f5:33:f4:39:02:b0:97:54:83:f6:
         87:42:eb:d1:1c:f6:c9:a7:07:26:92:9c:27:b0:8e:3f:2a:82:
         25:8a:33:a3:04:11:85:46:2b:d7:aa:bb:b7:fe:ef:33:b9:98:
         d7:08:ec:9e:7f:1e:72:1a:85:d2:f5:4b:c2:d2:4f:ee:95:9c:
         d4:6e:06:da:92:c2:0e:c5:79:59:66:b6:12:b3:cf:1c:d9:17:
         f6:15:81:d3:9f:8d:24:f7:95:03:1e:92:24:51:4a:39:13:19:
         ab:c0:a4:4a:ba:00:30:ed:f6:b9:b9:33:a4:31:fa:4f:48:0b:
         0f:17:41:3e:d9:60:a2:fb:c9:a6:cc:1b:3c:22:c9:4e:6e:8a:
         a0:2d:56:56:78:b2:1b:4d:9e:b4:14:e8:39:9b:7c:01:8e:7a:
         0e:8a:de:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----