Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Qm_QbbTz71y2V12XZN2iCBrIjSk.roa
File:                     Qm_QbbTz71y2V12XZN2iCBrIjSk.roa (raw, json)
Hash identifier:          dTacIlydWMW6HRAOuY6jtjo08iaWZOw+sdPAJN9wUxs=
Subject key identifier:   42:6F:D0:6D:B4:F3:EF:5C:B6:57:5D:97:64:DD:A2:08:1A:C8:8D:29
Certificate issuer:       /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial:       018E043A38994FAF571683CADFAFE5B99E51
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Qm_QbbTz71y2V12XZN2iCBrIjSk.roa
Signing time:             Sun 03 Mar 2024 12:11:48 +0000
ROA not before:           Sun 03 Mar 2024 12:11:48 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
                          2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:04:3a:38:99:4f:af:57:16:83:ca:df:af:e5:b9:9e:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
        Validity
            Not Before: Mar  3 12:11:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=426fd06db4f3ef5cb6575d9764dda2081ac88d29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:aa:6d:81:b9:26:ce:6f:e7:83:ba:79:96:0f:
                    4b:9a:f9:ef:83:53:97:42:17:a8:df:5d:86:45:6a:
                    9f:e2:82:c5:e7:dd:7f:5b:c6:2c:4b:67:49:69:f3:
                    9d:e6:0f:5f:26:bf:cf:1d:61:92:cd:83:a0:e7:f0:
                    cd:61:d2:02:5f:00:4d:78:f4:05:23:67:7b:98:b1:
                    51:a1:9f:e8:d5:84:d8:25:b1:f1:f9:71:b2:24:86:
                    6c:ac:d8:51:54:7a:aa:86:14:58:d9:e0:83:9b:70:
                    6f:31:fb:b3:e1:e7:6e:d8:1b:27:81:9b:ce:e4:a1:
                    cb:de:39:9a:59:fb:a5:ba:cf:e1:cd:aa:0e:9b:ad:
                    eb:f5:61:b0:4b:45:4d:c2:80:1f:6b:b0:db:56:ff:
                    15:d7:b6:8b:86:ef:89:09:cd:f0:fa:69:f1:fc:22:
                    46:73:29:1e:d6:cf:73:c7:91:cf:1f:7a:f4:9d:14:
                    7c:6f:53:e6:e7:46:be:59:0b:82:58:78:f3:b0:cb:
                    ed:3a:77:59:c9:0e:db:9d:c0:42:b7:de:29:0b:18:
                    d8:9d:48:60:d0:dc:af:b5:15:72:82:51:a7:97:e2:
                    e9:b6:77:bc:6d:a2:5c:2d:7c:31:7a:7e:5a:e1:3e:
                    0d:fe:67:24:33:fd:88:77:6b:36:1e:40:14:3f:e5:
                    84:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:6F:D0:6D:B4:F3:EF:5C:B6:57:5D:97:64:DD:A2:08:1A:C8:8D:29
            X509v3 Authority Key Identifier:
                keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Qm_QbbTz71y2V12XZN2iCBrIjSk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         4e:68:89:0b:6f:d8:bf:01:76:87:22:42:ae:3b:a5:85:42:a3:
         7c:1f:2e:1c:34:ef:0c:e7:77:df:9d:e9:64:c8:3e:49:3d:b6:
         fd:70:a3:b7:89:4e:47:d1:28:32:09:6e:81:9e:ec:76:5f:d4:
         fb:87:bb:db:5b:2d:bd:53:66:66:1f:0c:40:5a:69:2c:fc:3b:
         91:0a:8c:2f:5a:32:d8:28:ed:ae:74:d5:5d:6d:84:53:e0:4e:
         b3:01:bf:e6:93:46:e8:23:31:96:ae:92:4c:61:af:62:72:07:
         78:a4:19:cb:bd:ce:d6:21:4d:16:ff:e8:c7:55:1e:6c:93:37:
         09:f0:65:64:10:05:da:74:f6:c8:5d:f6:66:14:33:84:93:d6:
         45:93:aa:f1:eb:24:29:2e:d8:50:ef:0b:c3:96:89:ce:9c:26:
         44:cd:5b:a9:30:69:d4:06:ce:9a:b8:f7:0e:61:16:38:11:29:
         aa:66:b2:dd:59:b6:1b:56:29:63:dc:92:ba:44:7d:b7:a9:2f:
         db:b2:de:24:7a:b3:12:3f:f3:87:81:12:8d:ad:70:6b:ab:30:
         c5:df:5a:93:24:23:2d:51:1e:82:86:83:94:c9:86:ad:96:33:
         b0:a5:86:90:1c:72:ea:d0:59:87:70:bf:c8:24:59:7e:ad:9e:
         32:33:65:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----