Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/GRM_Toe8hFG-Q-NTDW2AulslV34.roa
File:                     GRM_Toe8hFG-Q-NTDW2AulslV34.roa (raw, json)
Hash identifier:          e3dBvwd96CNonJ2Nw+A8pRI5Zx5o6psXOc0XXQV/AOs=
Subject key identifier:   19:13:3F:4E:87:BC:84:51:BE:43:E3:53:0D:6D:80:BA:5B:25:57:7E
Certificate issuer:       /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial:       018E762CB4859CBE3DCC80AA4A82B00820A0
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/GRM_Toe8hFG-Q-NTDW2AulslV34.roa
Signing time:             Mon 25 Mar 2024 15:13:45 +0000
ROA not before:           Mon 25 Mar 2024 15:13:45 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
                          2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:76:2c:b4:85:9c:be:3d:cc:80:aa:4a:82:b0:08:20:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
        Validity
            Not Before: Mar 25 15:13:45 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=19133f4e87bc8451be43e3530d6d80ba5b25577e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:55:d4:1d:50:ac:61:11:0a:4e:7b:14:ed:99:
                    85:5e:c2:1d:44:ba:af:77:8d:d2:40:7c:2c:a2:83:
                    da:c2:52:41:40:3d:d0:c0:73:19:a9:18:3d:3f:4d:
                    cb:3a:32:aa:e3:59:ce:5d:51:8b:39:6a:b5:51:a5:
                    ac:58:f6:da:b8:0f:c2:fd:dc:3a:cd:c7:8f:6f:7d:
                    41:e3:7b:ac:c2:4c:d8:3e:a1:8e:13:2a:d8:6b:b6:
                    c2:ef:fc:49:6b:45:56:11:b6:25:6a:af:21:a2:42:
                    69:75:19:a7:bd:c5:b5:d0:18:8b:ab:a9:b9:17:91:
                    d7:60:58:e0:37:9c:ee:a1:ed:59:a8:d9:b1:89:85:
                    89:44:38:56:bb:13:a9:fe:ba:62:64:7e:aa:5e:1a:
                    24:a8:45:e2:94:57:6d:71:73:d1:be:a7:0c:e1:d3:
                    39:00:a4:78:f7:d1:f0:e8:f3:5e:4a:fb:f8:9b:80:
                    c9:14:18:b7:44:78:94:d1:2b:b3:ac:e8:b6:23:dc:
                    bb:d0:27:0d:e0:f2:a8:3f:d1:06:7e:3f:85:ac:be:
                    e8:b3:b6:5a:1b:ae:25:d7:1a:a7:54:5b:25:93:f1:
                    b2:f3:f7:0f:62:8a:82:95:17:d7:11:d5:f3:0a:7c:
                    8e:f1:c5:85:44:49:87:b8:ca:08:ce:38:97:9f:c9:
                    d3:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:13:3F:4E:87:BC:84:51:BE:43:E3:53:0D:6D:80:BA:5B:25:57:7E
            X509v3 Authority Key Identifier:
                keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/GRM_Toe8hFG-Q-NTDW2AulslV34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         4a:c1:5d:1e:1a:bf:d8:d8:4d:9e:31:cf:45:69:4d:b1:f5:50:
         4d:4f:e5:c2:5b:13:18:68:64:73:27:c4:37:98:86:00:c8:b1:
         75:1a:18:1d:8d:9e:ac:15:ae:86:29:2d:54:9a:ff:e2:da:e7:
         67:3f:97:c1:4e:a9:f8:2f:53:48:f5:6a:20:f9:4a:51:da:16:
         85:de:c0:dd:48:ba:52:26:7d:44:a2:a4:c1:44:6c:2f:ec:19:
         56:18:72:d7:ba:97:54:89:df:a7:e8:7c:21:6b:b7:d1:c9:26:
         04:5f:37:e1:39:da:e4:6f:99:e9:0e:30:16:b0:0e:33:98:59:
         f2:61:18:8b:dd:e0:c8:85:1d:d8:3f:cc:51:bc:8f:ab:c0:53:
         b6:46:53:67:8b:9b:c0:fd:96:81:09:71:aa:42:a5:f8:da:b5:
         aa:3d:5f:8b:fe:18:b9:22:40:57:f1:4c:42:11:6e:5f:af:90:
         7e:0c:18:12:d6:13:9c:11:48:ea:e8:6d:cc:ed:7c:aa:ba:ce:
         b1:3e:3f:ab:d0:0a:68:cf:8e:ab:cb:91:0d:77:5b:ee:3b:44:
         6e:94:d6:23:d5:ad:b0:79:74:50:71:28:4f:5f:4c:8e:1d:46:
         98:09:c2:98:ab:ab:91:a4:25:bf:d9:5b:dc:8b:ee:90:0e:89:
         27:1d:40:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----