Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/M6vnrsarnEAohoAId2eJvWNIrJ4.roa
File:                     M6vnrsarnEAohoAId2eJvWNIrJ4.roa (raw, json)
Hash identifier:          BdEZQ8rgPGj4mbkVvEiyKYg28PWIC1vZtd+v+v8axnM=
Subject key identifier:   33:AB:E7:AE:C6:AB:9C:40:28:86:80:08:77:67:89:BD:63:48:AC:9E
Certificate issuer:       /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial:       018D1C7D5315993010191D47E60785A995AB
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/M6vnrsarnEAohoAId2eJvWNIrJ4.roa
Signing time:             Thu 18 Jan 2024 12:13:11 +0000
ROA not before:           Thu 18 Jan 2024 12:13:11 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:1c:7d:53:15:99:30:10:19:1d:47:e6:07:85:a9:95:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
        Validity
            Not Before: Jan 18 12:13:11 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=33abe7aec6ab9c4028868008776789bd6348ac9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:bf:33:89:f0:00:95:3b:27:c9:03:28:bb:d1:
                    96:f4:29:0f:76:d0:67:24:3c:c4:53:bd:d1:9f:70:
                    8e:32:c2:c6:47:38:c7:35:93:01:fc:cc:0c:30:f7:
                    34:0b:a0:19:47:10:2a:32:66:28:5a:18:38:d5:f3:
                    10:88:d6:63:b3:64:f6:d0:cd:53:39:b4:53:95:f0:
                    a7:a2:a5:40:3b:86:79:5a:71:b9:53:70:91:c8:6d:
                    db:81:c2:d4:f6:7f:57:47:83:6e:a5:91:19:11:05:
                    4c:32:2b:c5:2f:b6:d3:df:93:0b:35:79:84:46:a7:
                    dc:c1:ff:3d:5c:16:02:9d:b4:10:d8:7d:7a:34:7b:
                    3e:ba:cb:fc:d4:ed:e7:90:83:e4:42:d5:4c:02:9a:
                    5d:3a:78:be:4d:e0:d9:cb:bd:36:bf:ce:08:2e:70:
                    e8:c0:2c:74:87:e2:89:87:e0:dd:b2:51:b2:2b:1d:
                    7a:ab:fb:57:59:5a:b8:b8:d6:57:9b:9c:f3:8a:d5:
                    08:f3:14:33:f0:82:87:1c:8f:0f:0e:0e:df:4b:79:
                    58:2b:86:47:9b:b4:cc:bd:41:c7:81:7f:b3:2d:34:
                    45:3a:35:de:b2:45:3b:99:0c:c9:23:75:f2:63:ae:
                    69:79:eb:69:89:3b:69:4c:70:4d:5b:4e:e3:1a:5b:
                    c7:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:AB:E7:AE:C6:AB:9C:40:28:86:80:08:77:67:89:BD:63:48:AC:9E
            X509v3 Authority Key Identifier:
                keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/M6vnrsarnEAohoAId2eJvWNIrJ4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         65:11:ed:94:26:26:69:04:97:4c:14:cc:84:4b:8c:69:7b:4d:
         fb:22:61:50:a4:d8:6c:c3:ff:51:5f:90:78:37:70:7c:72:e5:
         25:db:90:b6:c7:10:0b:d4:82:ce:b4:e5:a0:a3:85:eb:e0:bd:
         93:68:9f:da:ad:5e:53:39:58:7e:47:7b:0b:a8:95:e0:c0:1d:
         4d:67:92:b3:73:ef:c6:c4:24:d9:b0:d8:9c:d8:f2:1c:de:53:
         7f:36:98:1b:e6:0d:9d:76:1f:d7:77:bd:21:aa:98:2b:92:7a:
         b9:1d:bb:fe:d8:32:32:d7:bc:17:75:4b:54:8a:99:49:10:ef:
         50:e5:ad:b8:3d:25:6f:3a:ba:0c:48:73:92:25:4e:32:04:d2:
         c6:50:16:bb:9b:55:c5:95:8a:1b:44:d2:94:dd:1c:f5:bb:45:
         dd:eb:29:9f:cf:28:be:20:eb:8f:0a:4b:b5:66:4d:80:ae:3e:
         38:9c:fb:86:8f:2e:36:8c:e5:ea:57:bc:29:c7:71:d2:5c:ad:
         79:82:62:89:11:10:bc:63:c5:97:d0:24:b0:68:c0:82:00:db:
         53:01:60:e6:b1:c6:9b:07:68:57:5f:d7:f9:f0:6f:cd:9f:bc:
         69:02:d3:74:e4:88:ee:42:15:87:98:b3:e1:08:1a:37:95:8c:
         4b:e0:66:96
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY0cfVMVmTAQGR1H5geFqZWrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMTE4MTIxMzExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzM2FiZTdhZWM2YWI5YzQwMjg4NjgwMDg3NzY3ODliZDYzNDhhYzllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqb8zifAAlTsnyQMou9GW9CkPdtBn
JDzEU73Rn3COMsLGRzjHNZMB/MwMMPc0C6AZRxAqMmYoWhg41fMQiNZjs2T20M1T
ObRTlfCnoqVAO4Z5WnG5U3CRyG3bgcLU9n9XR4NupZEZEQVMMivFL7bT35MLNXmE
Rqfcwf89XBYCnbQQ2H16NHs+usv81O3nkIPkQtVMAppdOni+TeDZy702v84ILnDo
wCx0h+KJh+DdslGyKx16q/tXWVq4uNZXm5zzitUI8xQz8IKHHI8PDg7fS3lYK4ZH
m7TMvUHHgX+zLTRFOjXeskU7mQzJI3XyY65peetpiTtpTHBNW07jGlvHzwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDOr567Gq5xAKIaACHdnib1jSKyeMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvTTZ2bnJzYXJuRUFvaG9BSWQyZUp2V05Jcko0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGUR7ZQmJmkEl0wUzIRL
jGl7TfsiYVCk2GzD/1FfkHg3cHxy5SXbkLbHEAvUgs605aCjhevgvZNon9qtXlM5
WH5HewuoleDAHU1nkrNz78bEJNmw2JzY8hzeU382mBvmDZ12H9d3vSGqmCuSerkd
u/7YMjLXvBd1S1SKmUkQ71Dlrbg9JW86ugxIc5IlTjIE0sZQFrubVcWVihtE0pTd
HPW7Rd3rKZ/PKL4g648KS7VmTYCuPjic+4aPLjaM5epXvCnHcdJcrXmCYokRELxj
xZfQJLBowIIA21MBYOaxxpsHaFdf1/nwb82fvGkC03TkiO5CFYeYs+EIGjeVjEvg
ZpY=
-----END CERTIFICATE-----