Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/EPGbfyb1Nb66HlFF2x17zqGgxs4.roa
File:                     EPGbfyb1Nb66HlFF2x17zqGgxs4.roa (raw, json)
Hash identifier:          hP+Nj0Z/UnmOM2orK6eD2WJL1ne6dwzvLbgRBU44LcQ=
Subject key identifier:   10:F1:9B:7F:26:F5:35:BE:BA:1E:51:45:DB:1D:7B:CE:A1:A0:C6:CE
Certificate issuer:       /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial:       018E23882A71D4643FB059452A811963541F
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/EPGbfyb1Nb66HlFF2x17zqGgxs4.roa
Signing time:             Sat 09 Mar 2024 14:05:10 +0000
ROA not before:           Sat 09 Mar 2024 14:05:10 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
                          2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
                          2001:67c:64:ffff:0:18e:2387:5ca2/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:23:88:2a:71:d4:64:3f:b0:59:45:2a:81:19:63:54:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
        Validity
            Not Before: Mar  9 14:05:10 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=10f19b7f26f535beba1e5145db1d7bcea1a0c6ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:bc:cc:fc:c9:3a:c1:9f:4e:05:2d:b7:88:66:
                    0a:da:12:2f:5f:80:0c:da:0e:cf:d1:05:74:48:c0:
                    77:3a:17:b9:71:f8:e5:3d:92:9a:db:ca:37:97:c1:
                    a6:ff:73:1e:49:2e:70:d8:71:b7:f7:de:48:3b:01:
                    5a:ff:37:1a:a6:60:f2:de:02:5e:a0:56:bc:11:9d:
                    7a:b8:cb:9e:12:87:fb:65:bc:9b:1c:41:ac:51:6a:
                    8e:d2:3e:7f:f4:30:8d:a2:74:46:81:f3:c4:13:0a:
                    a9:e3:35:f0:d9:ad:2a:ab:9f:5a:38:fe:dc:ba:07:
                    7a:f8:27:88:09:c9:27:db:0c:3a:4c:43:54:28:ba:
                    d9:0b:cf:08:8c:fc:4f:b1:14:64:05:79:d0:4f:c4:
                    c0:1b:08:06:02:28:e5:12:ea:2a:c7:46:9c:6f:88:
                    85:d9:62:f1:1c:33:4e:82:21:ed:b3:29:5c:ce:91:
                    3e:54:07:54:74:16:e4:2c:ed:a7:53:49:0c:fc:f2:
                    9a:4e:ac:5f:a1:5f:c2:52:99:9a:a8:58:f0:dd:78:
                    7f:e6:6d:87:6e:ae:af:44:d5:02:b6:2f:87:a9:84:
                    7d:91:51:ec:7d:ef:09:f0:3e:cd:9e:df:d8:4c:e1:
                    c3:5f:20:5d:78:f6:17:0b:7e:45:8e:68:29:22:fc:
                    6e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:F1:9B:7F:26:F5:35:BE:BA:1E:51:45:DB:1D:7B:CE:A1:A0:C6:CE
            X509v3 Authority Key Identifier:
                keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/EPGbfyb1Nb66HlFF2x17zqGgxs4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         8b:18:91:c5:dd:c1:ac:3c:12:84:67:ae:11:71:bb:5e:29:f4:
         53:10:c4:9a:f2:75:45:cd:90:e8:4c:fa:ff:ab:f3:e5:3d:a1:
         d5:33:01:bc:84:75:4f:58:54:65:0b:95:88:2c:e0:e3:1f:e1:
         1b:31:44:e2:23:11:1b:f5:97:d0:23:7c:89:a0:95:5e:b0:c9:
         02:5f:93:9c:43:38:19:12:2a:83:9c:a2:e1:3f:06:a1:84:30:
         d6:47:80:7c:35:e2:cd:b8:ce:74:22:73:e4:06:23:4e:15:ec:
         93:fc:e7:bc:73:1e:1e:bc:5b:0c:3a:48:fe:11:a3:c2:b0:ce:
         df:2d:8b:92:d0:09:d9:40:c8:a0:c4:c2:a6:56:ec:38:51:f6:
         46:1c:ce:44:9b:28:8f:43:74:8f:5d:fe:91:5d:49:8c:80:62:
         da:51:b6:5a:dd:38:9b:fd:c2:9e:0d:06:df:41:65:ee:5f:51:
         4a:28:02:c4:42:93:86:a6:38:df:21:29:0d:1d:5f:97:66:8a:
         7f:62:7c:da:c4:8a:b0:7c:34:52:0d:85:6a:d3:ed:d5:ee:23:
         86:79:68:d0:ea:8d:d1:81:4b:84:77:5d:9b:c8:bb:8d:1d:cc:
         f8:f2:bd:a9:f3:b4:92:5b:68:b7:91:37:f3:4d:5a:b9:23:95:
         3d:14:cb:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----