Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/IxYzCmcus2EW1c9qyrHsni5btS8.roa
File:                     IxYzCmcus2EW1c9qyrHsni5btS8.roa (raw, json)
Hash identifier:          oxKQA+ALPSllD4C7mnM2BwyTSAEqkLiw+E4BzjKhtiA=
Subject key identifier:   23:16:33:0A:67:2E:B3:61:16:D5:CF:6A:CA:B1:EC:9E:2E:5B:B5:2F
Certificate issuer:       /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial:       018DDCF7903DFAA453120C49AA9B65E52162
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/IxYzCmcus2EW1c9qyrHsni5btS8.roa
Signing time:             Sat 24 Feb 2024 21:13:48 +0000
ROA not before:           Sat 24 Feb 2024 21:13:48 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:dc:f7:90:3d:fa:a4:53:12:0c:49:aa:9b:65:e5:21:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
        Validity
            Not Before: Feb 24 21:13:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=2316330a672eb36116d5cf6acab1ec9e2e5bb52f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:2e:5e:8e:5a:ad:94:d8:de:13:c7:45:f5:21:
                    92:7a:b7:c6:77:81:64:9e:57:cb:31:11:7a:70:b0:
                    08:71:bc:b8:3d:e5:07:96:66:42:d5:43:05:20:28:
                    e9:3a:ba:79:77:d3:d1:7a:21:bb:d5:a0:af:e1:b8:
                    2b:0e:fc:79:7d:3d:a9:21:48:ef:b8:8c:5f:2f:87:
                    fd:40:75:4d:f0:41:6b:2d:4b:77:22:0b:fe:3c:5d:
                    c3:88:a7:5c:1a:1b:12:30:91:cf:c7:9d:c7:6b:68:
                    ab:49:c4:1f:1e:be:bd:bc:70:3e:95:0f:ad:50:19:
                    a6:83:82:04:ca:ac:b3:84:44:2e:5d:e7:11:c1:5c:
                    bf:32:bb:44:07:bf:c8:b8:13:b9:61:21:95:5c:12:
                    04:c9:3f:42:92:87:82:fc:2b:f4:5a:78:0f:26:de:
                    0f:c5:12:ac:d5:31:c1:08:9c:30:13:7b:c1:90:a7:
                    ef:40:cf:c2:ff:21:88:60:a3:82:c6:ec:f5:9b:57:
                    49:68:83:2e:1c:77:e9:85:c3:77:24:3b:96:10:f7:
                    cb:8b:11:05:2b:65:29:6f:98:48:7e:2e:04:38:9a:
                    5f:06:d6:e8:ec:03:c8:7f:6c:83:37:64:7b:6a:11:
                    9a:cb:28:5d:6e:66:f2:d8:bc:a1:5d:f5:23:ac:fb:
                    de:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:16:33:0A:67:2E:B3:61:16:D5:CF:6A:CA:B1:EC:9E:2E:5B:B5:2F
            X509v3 Authority Key Identifier:
                keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/IxYzCmcus2EW1c9qyrHsni5btS8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         81:59:28:7f:e9:b0:30:3a:84:6e:e7:ae:e1:30:fe:18:31:73:
         07:35:82:9c:92:db:74:82:a7:64:e2:bf:82:3a:bb:f0:da:e2:
         54:28:c6:1d:56:29:0d:39:9e:1c:df:1b:80:34:aa:49:1c:fe:
         54:d6:e4:06:cb:70:65:fb:a9:1b:d7:ae:7b:d1:2a:4a:75:13:
         07:67:48:c5:5b:ce:7a:aa:9f:67:c7:fb:00:6b:c4:9e:4b:62:
         c0:a8:04:5e:50:cd:ca:06:33:f4:25:89:2c:c8:16:e1:c7:4f:
         a8:f8:68:76:5c:11:95:12:94:b8:83:56:35:b1:a6:be:da:93:
         ba:b1:e7:d7:ec:b4:76:87:50:78:4d:63:f4:30:e9:83:07:b6:
         30:1b:f5:b2:15:93:72:48:15:95:f0:80:ba:a2:d7:b7:b7:79:
         0c:61:f1:34:27:fe:5b:f1:01:2e:a2:f7:43:8e:41:de:0c:28:
         c3:28:1d:f9:cd:87:2c:91:e5:34:78:0f:f7:be:ad:b4:56:71:
         21:b9:a7:37:2e:48:02:d4:f4:66:0c:1e:50:7b:64:d4:98:9f:
         00:04:d7:85:b4:8a:0a:0b:57:20:cb:9c:c8:bf:58:15:8f:4c:
         fb:44:04:c9:34:c5:8c:3a:dd:bf:7d:66:4d:86:5a:e3:04:f3:
         dc:db:75:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----