Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/EN8_iAAOv1veT0h22f23LQnu3aU.roa
File:                     EN8_iAAOv1veT0h22f23LQnu3aU.roa (raw, json)
Hash identifier:          FfkYekNgW5ruFPIcILLTtKUOj3EYRD8H8jzEvA4DqfE=
Subject key identifier:   10:DF:3F:88:00:0E:BF:5B:DE:4F:48:76:D9:FD:B7:2D:09:EE:DD:A5
Certificate issuer:       /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial:       018E34B9A3DD532D5D209021CEE568424645
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/EN8_iAAOv1veT0h22f23LQnu3aU.roa
Signing time:             Tue 12 Mar 2024 22:12:45 +0000
ROA not before:           Tue 12 Mar 2024 22:12:45 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
                          2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:34:b9:a3:dd:53:2d:5d:20:90:21:ce:e5:68:42:46:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
        Validity
            Not Before: Mar 12 22:12:45 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=10df3f88000ebf5bde4f4876d9fdb72d09eedda5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f2:bf:97:37:76:46:01:eb:4c:60:a3:42:0c:
                    fa:dd:a7:de:6d:33:d1:d9:50:7f:1f:46:00:dc:4d:
                    5e:d7:ee:06:8f:09:24:6d:9b:94:9e:7e:77:4d:05:
                    e3:de:38:e5:c2:bc:43:39:38:75:1b:0a:57:dc:26:
                    6a:c3:fe:6f:90:ce:47:a4:0b:bd:01:79:b4:c2:f7:
                    d1:ac:8b:56:d7:12:71:ff:a4:25:4a:5f:b3:34:a6:
                    38:db:26:b6:99:1d:09:9e:7b:94:3d:8a:b0:c7:cd:
                    72:3f:92:af:13:07:41:f9:8b:dc:ec:e5:69:46:74:
                    c1:d6:6d:d2:ba:be:98:1e:25:31:81:f2:78:2a:04:
                    13:8f:7b:79:4c:49:a8:21:51:9e:dc:1e:68:85:ae:
                    46:d1:a3:55:8b:d4:50:26:f4:a8:4c:71:cb:5b:67:
                    42:9d:e3:a5:a4:9f:eb:2f:e1:b9:92:e7:18:57:c9:
                    71:d1:e6:d4:4a:77:35:2f:59:ff:fc:0f:66:a1:94:
                    ad:f6:48:1d:a6:6c:a7:b5:b4:68:93:6b:a3:bd:c2:
                    a3:c2:b5:d2:65:d8:b7:19:7e:e0:07:84:7a:97:10:
                    ee:9c:5c:17:bd:fb:5b:8b:16:37:eb:26:3f:51:69:
                    49:66:1f:3a:cb:90:f8:62:33:fc:cd:28:d4:ff:13:
                    ec:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:DF:3F:88:00:0E:BF:5B:DE:4F:48:76:D9:FD:B7:2D:09:EE:DD:A5
            X509v3 Authority Key Identifier:
                keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/EN8_iAAOv1veT0h22f23LQnu3aU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         61:4c:07:9a:0e:bb:4f:01:6d:1c:b4:6c:8f:7e:a7:2d:a8:0e:
         7a:a5:1b:0c:83:70:86:ff:84:b2:dd:48:1a:3a:e9:08:72:45:
         ed:9f:67:23:1e:e6:51:b0:03:c6:01:b1:a9:39:80:9b:b3:cf:
         7a:a0:4b:b6:97:ce:ae:75:04:09:13:5d:e9:87:b7:b1:3d:fb:
         28:3c:3e:11:0a:f4:c1:e5:87:f1:42:df:52:cb:bf:14:d9:a0:
         fb:18:07:64:16:f8:a8:eb:ed:7d:70:0b:13:90:bc:39:c2:e0:
         38:80:d2:ab:39:01:01:da:de:39:53:3e:08:cb:46:27:7e:0e:
         ad:b3:83:3d:01:1c:89:0c:21:70:02:e2:3c:e4:4a:e8:d9:df:
         94:f1:8e:69:7e:b0:e0:6c:0a:3b:43:91:72:75:30:29:2d:40:
         36:fc:86:dd:d6:42:96:6a:4e:6e:53:6a:c5:f2:a5:33:88:e0:
         80:40:18:9c:00:2e:58:2f:39:40:43:b8:f3:5e:b0:34:3c:83:
         0b:8c:e2:79:79:10:b3:bf:07:f9:d4:b3:c9:d6:3b:5b:c1:ba:
         f7:71:66:65:e5:44:69:66:21:74:47:c2:fe:91:39:92:aa:66:
         36:7e:7f:a6:3b:be:df:ac:c6:8e:fc:da:6b:5b:81:28:f8:c8:
         39:00:56:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----