Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ILWZRbiuuRMJuqBdeyu_rJUaY9o.roa
File:                     ILWZRbiuuRMJuqBdeyu_rJUaY9o.roa (raw, json)
Hash identifier:          s0ThJwf0Ug652upBToXYXacxsXKk5ZSbmCxwcXyGQM8=
Subject key identifier:   20:B5:99:45:B8:AE:B9:13:09:BA:A0:5D:7B:2B:BF:AC:95:1A:63:DA
Certificate issuer:       /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial:       018EB2ADBC15D02E43F83A7F10EBBB1AB1FB
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ILWZRbiuuRMJuqBdeyu_rJUaY9o.roa
Signing time:             Sat 06 Apr 2024 09:11:54 +0000
ROA not before:           Sat 06 Apr 2024 09:11:54 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:b2:ad:bc:15:d0:2e:43:f8:3a:7f:10:eb:bb:1a:b1:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
        Validity
            Not Before: Apr  6 09:11:54 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=20b59945b8aeb91309baa05d7b2bbfac951a63da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:28:e1:33:16:91:78:cf:fd:ee:6a:59:81:75:
                    7d:3c:1d:66:f9:a4:b8:c5:f9:09:7f:3e:9a:91:66:
                    e2:18:04:c2:51:5a:69:b8:f2:0e:d6:0e:83:47:c2:
                    a6:50:be:17:c9:05:21:e1:d5:1e:ff:a1:25:9c:ef:
                    a7:01:d2:54:eb:98:48:a3:e7:75:80:11:13:c4:cc:
                    44:a9:ae:b5:31:84:b5:a7:91:b4:ab:62:c2:42:53:
                    b5:9d:4a:b2:ec:33:8b:ed:4a:2d:ca:9b:09:fb:1e:
                    93:16:e8:80:d2:db:6a:93:b8:8d:09:f6:e1:87:3b:
                    d5:3c:10:fb:04:da:53:44:d9:f6:f4:ce:80:f6:0c:
                    c2:4c:f0:62:85:9a:91:90:9e:fb:e8:6a:5e:ad:5a:
                    52:ec:13:68:0e:f7:fc:fb:4d:ba:72:52:23:80:05:
                    f8:14:09:9d:8a:c2:12:60:ac:82:5b:f2:d9:15:67:
                    09:cb:e5:be:88:4a:23:e5:59:8b:15:e7:44:52:0b:
                    27:8d:3d:63:bb:e4:3d:34:86:cd:fd:58:ea:d2:42:
                    d4:15:46:19:03:a1:c5:a2:67:3f:ee:6a:a7:14:2b:
                    fc:b5:a1:39:06:c3:01:35:ca:2e:2d:40:4f:c8:8b:
                    41:15:45:90:5d:2d:6f:85:b1:2c:b7:e6:58:13:de:
                    79:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:B5:99:45:B8:AE:B9:13:09:BA:A0:5D:7B:2B:BF:AC:95:1A:63:DA
            X509v3 Authority Key Identifier:
                keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ILWZRbiuuRMJuqBdeyu_rJUaY9o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         0d:49:4b:10:a6:b6:1d:c6:53:14:7e:89:0c:78:93:cc:d7:11:
         39:45:7d:0b:01:4e:ac:c4:ff:5c:4d:14:d2:29:15:1b:f9:25:
         56:c8:53:4f:c7:47:fe:06:44:30:e3:e3:03:bc:fd:a9:12:a3:
         d1:d6:0e:f2:3e:32:cf:a3:a1:86:c6:5d:70:a3:90:32:79:82:
         0d:04:4b:4e:f0:0c:c4:cd:31:3f:88:64:66:c6:c6:55:9a:39:
         63:6d:06:c9:81:f5:f6:e1:5b:2e:39:5b:07:7b:f6:f7:cd:59:
         f0:9c:1f:02:e0:07:1f:9e:db:61:a4:c9:7e:4c:52:4e:27:8a:
         c9:4d:70:db:e0:08:85:bf:72:3c:68:63:70:7c:12:f0:11:65:
         98:8d:ea:15:71:3b:e3:bd:fd:c8:b6:23:ee:97:83:a2:71:3a:
         7a:e5:bf:cf:26:c0:ce:22:59:7f:8b:fe:bb:2c:dc:29:62:14:
         9c:14:a3:31:15:95:d7:35:c5:5e:08:b7:c0:9d:84:b6:98:3f:
         cd:6a:e0:d3:81:d8:91:f9:28:c2:0f:f9:4f:ad:3e:ef:de:86:
         26:78:86:9b:e8:da:36:c9:25:62:c5:aa:42:fe:06:23:cf:ad:
         d1:e0:4e:d0:ad:50:f0:69:e9:f3:91:c9:37:bb:ef:ed:fb:6a:
         98:e0:d9:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----