Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/PmNcyd5j7ZmGr2AkP7NY8hXE60Y.roa
File:                     PmNcyd5j7ZmGr2AkP7NY8hXE60Y.roa (raw, json)
Hash identifier:          kw9MHWPKJUiZgGVLjQLq3iR6rwfgYLWt0d1iyevFP9s=
Subject key identifier:   3E:63:5C:C9:DE:63:ED:99:86:AF:60:24:3F:B3:58:F2:15:C4:EB:46
Certificate issuer:       /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial:       018E87C345F0B95B3C5C54FF5BDF7296537F
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/PmNcyd5j7ZmGr2AkP7NY8hXE60Y.roa
Signing time:             Fri 29 Mar 2024 01:11:45 +0000
ROA not before:           Fri 29 Mar 2024 01:11:45 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
                          2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
                          2001:67c:64:ffff:0:18e:76c8:d5da/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:87:c3:45:f0:b9:5b:3c:5c:54:ff:5b:df:72:96:53:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
        Validity
            Not Before: Mar 29 01:11:45 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=3e635cc9de63ed9986af60243fb358f215c4eb46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a0:82:75:6f:db:7d:73:bc:22:54:23:0f:4b:
                    a7:3b:da:64:a4:86:bc:52:dd:95:f1:fc:a0:04:7c:
                    05:9a:3c:47:d1:d6:98:66:9c:45:3d:91:a1:03:4f:
                    db:86:8b:bd:ec:12:aa:ee:73:a9:fb:12:3d:16:73:
                    75:0a:13:49:d9:30:27:dd:38:09:e4:30:0d:56:04:
                    a9:28:06:59:85:7b:1d:65:f3:dd:18:3e:76:b1:3f:
                    76:60:a2:b5:0a:c1:3e:c8:63:37:56:1c:c9:5d:cb:
                    18:51:a4:dd:84:09:bc:dc:47:b0:96:6a:29:e5:d2:
                    96:fa:7c:fa:3e:d1:12:5d:72:9c:ce:69:9c:16:04:
                    c1:b2:35:70:98:70:63:43:96:06:95:9e:fd:a9:e0:
                    f0:3c:91:30:4e:2f:61:45:2d:ca:94:aa:37:44:ea:
                    98:e3:82:d8:cc:34:5f:35:1c:0a:2c:42:42:52:71:
                    4e:b1:31:d9:71:b0:a9:79:cd:8f:40:b0:3e:63:fe:
                    18:50:55:51:22:aa:2d:6b:5b:41:9a:fa:2e:9a:fb:
                    f3:4f:c8:33:9d:cc:f3:ae:15:6e:f9:96:65:5f:5a:
                    2f:c6:12:b9:b7:b4:75:71:dd:0b:56:b7:de:4a:33:
                    a9:5f:33:0b:47:14:a4:85:68:d4:cd:3d:7b:8e:bb:
                    e0:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:63:5C:C9:DE:63:ED:99:86:AF:60:24:3F:B3:58:F2:15:C4:EB:46
            X509v3 Authority Key Identifier:
                keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/PmNcyd5j7ZmGr2AkP7NY8hXE60Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         05:49:29:3f:40:e5:e6:73:93:1e:c2:79:6a:fb:47:92:72:40:
         a7:3e:0a:aa:84:e8:8d:4b:b6:51:15:61:b6:13:e8:2a:85:51:
         99:c7:6d:63:6d:66:40:4f:80:60:10:d7:ae:da:47:b5:4c:70:
         06:86:e0:c3:3c:e6:ed:19:b9:3f:e4:53:9a:d7:56:3e:c6:c2:
         3f:15:db:3d:36:06:39:e5:56:c2:c6:4e:e0:fb:2a:2c:2b:9f:
         f8:93:73:37:a4:5d:f4:4e:08:92:80:9d:26:d7:59:44:85:c7:
         b3:c1:26:93:92:50:c2:ef:a4:55:48:ae:68:20:9d:da:7c:a6:
         d0:18:53:4c:a0:fd:21:97:e5:71:82:c0:5d:92:96:08:3c:50:
         31:51:05:4e:1e:e1:df:15:43:da:35:de:b5:0c:74:c7:03:b2:
         39:8c:9a:c3:be:38:c2:0b:33:b6:09:8e:8d:e0:bc:5c:00:58:
         e6:01:f2:e4:36:42:5b:33:43:2a:ad:d8:b7:52:56:a2:e2:b4:
         5e:8e:86:0b:34:54:00:f0:0e:ea:d5:68:a8:bc:4b:2e:a3:fa:
         f3:4d:5a:95:3c:d4:28:55:be:46:85:7e:28:14:6f:d4:d1:bc:
         11:98:df:f5:df:26:d3:f3:06:39:42:b3:fc:83:22:fb:1b:71:
         97:e9:e0:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----