Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/KUYFFYTAbGwGN6p9SQTWW-XwJ9c.roa
File:                     KUYFFYTAbGwGN6p9SQTWW-XwJ9c.roa (raw, json)
Hash identifier:          bpfPZcPDmZtH+KYk8hxAEiW9HY1fw5VXKOe/GotLFUU=
Subject key identifier:   29:46:05:15:84:C0:6C:6C:06:37:AA:7D:49:04:D6:5B:E5:F0:27:D7
Certificate issuer:       /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial:       018E8CEA8BAAB94F49A50FC7341AC5BA715F
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/KUYFFYTAbGwGN6p9SQTWW-XwJ9c.roa
Signing time:             Sat 30 Mar 2024 01:12:45 +0000
ROA not before:           Sat 30 Mar 2024 01:12:45 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
                          2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
                          2001:67c:64:ffff:0:18e:76c8:d5da/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:8c:ea:8b:aa:b9:4f:49:a5:0f:c7:34:1a:c5:ba:71:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
        Validity
            Not Before: Mar 30 01:12:45 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=2946051584c06c6c0637aa7d4904d65be5f027d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:bc:95:d5:9e:f9:b7:8f:13:a3:fe:9e:24:5c:
                    bb:ac:cb:cb:e0:bc:7a:b6:73:4f:ca:9f:22:ee:cd:
                    bf:3a:84:cb:9b:b3:46:6b:ed:4a:6b:28:0d:dd:67:
                    34:40:16:9b:c1:80:ae:13:df:12:8c:8f:c8:d3:5e:
                    b9:a5:2c:b0:d1:82:c9:b6:b1:48:a6:80:9e:0a:d9:
                    b4:fd:eb:90:0d:e3:b9:59:68:eb:39:3c:49:86:ab:
                    2f:43:49:3d:84:75:68:0b:d1:c8:17:5d:ea:79:10:
                    88:21:cf:13:11:12:27:9f:05:d3:aa:b5:65:0a:fc:
                    dc:42:0a:a5:31:29:c0:db:53:9c:f0:30:f8:44:70:
                    78:6e:cd:d5:3f:d9:bb:77:1f:17:b5:b3:74:51:d1:
                    7d:a7:59:73:db:0c:4e:f5:2f:80:9e:3a:1d:3e:77:
                    16:c8:93:0c:95:16:65:e8:05:12:2c:f3:7d:f0:c8:
                    11:df:44:4e:c2:14:67:90:a5:e8:63:43:35:ed:e0:
                    de:a4:e0:97:86:80:f8:6d:ea:05:f4:8a:0e:1a:f2:
                    bc:f1:24:ab:11:09:82:af:c2:6e:29:5b:20:c9:34:
                    ec:b8:95:9c:56:70:60:66:34:a2:0f:9f:6e:1a:22:
                    9a:44:6c:0b:b8:37:33:58:e3:d9:66:f7:bb:14:11:
                    da:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:46:05:15:84:C0:6C:6C:06:37:AA:7D:49:04:D6:5B:E5:F0:27:D7
            X509v3 Authority Key Identifier:
                keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/KUYFFYTAbGwGN6p9SQTWW-XwJ9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         84:ee:27:bb:dc:da:3b:ab:8d:2a:0a:b6:2f:fd:a6:64:f2:cf:
         74:60:39:72:a0:7a:8e:af:7e:d4:59:4b:7a:ae:e5:20:08:23:
         db:40:53:f1:79:04:e9:ee:03:1c:b0:7e:f4:50:a5:df:89:6d:
         5c:27:9f:0b:03:df:28:c4:61:d8:84:17:a9:9c:34:77:e5:6a:
         62:be:fe:bb:ae:32:de:28:b1:c7:2f:25:1a:f1:84:fb:f3:cb:
         42:5e:7c:15:9f:de:6d:3f:5c:5a:6b:95:77:4f:14:e5:b4:85:
         29:aa:c0:8c:01:4f:68:4e:73:c6:83:57:74:bf:70:cb:8c:8c:
         57:ad:04:94:2c:0d:8a:90:c8:1d:83:34:5b:ec:11:84:9c:9d:
         cd:1b:7e:d0:60:fa:60:70:1f:7f:8b:11:4c:2e:75:9c:91:d8:
         00:d9:35:4a:c6:de:f4:f4:8f:ed:b1:0b:dd:c1:3c:17:d3:ee:
         a3:71:9c:9e:4e:02:76:00:e2:ca:0d:41:88:9d:b2:aa:0a:54:
         18:a5:35:0f:21:f5:a3:24:6b:83:55:dc:db:f5:f5:70:cd:39:
         38:fd:65:d4:0a:28:5e:cc:8b:0c:05:c2:c7:0f:fb:35:68:ab:
         c3:4a:97:ba:00:6a:18:59:69:75:ec:a8:3f:59:9a:ba:d7:4c:
         79:22:e8:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----