Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/RJtU8yyrQjpumTZDoMfl6SOgrYs.roa
File:                     RJtU8yyrQjpumTZDoMfl6SOgrYs.roa (raw, json)
Hash identifier:          309tmSGPI6HYrCXCmSprWhX+3fPqB/s7ITZjZ8vYHHM=
Subject key identifier:   44:9B:54:F3:2C:AB:42:3A:6E:99:36:43:A0:C7:E5:E9:23:A0:AD:8B
Certificate issuer:       /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial:       018EDD2A65DB8946C8D033AF1C75DCAD1FDF
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/RJtU8yyrQjpumTZDoMfl6SOgrYs.roa
Signing time:             Sun 14 Apr 2024 15:12:07 +0000
ROA not before:           Sun 14 Apr 2024 15:12:07 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:dd:2a:65:db:89:46:c8:d0:33:af:1c:75:dc:ad:1f:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
        Validity
            Not Before: Apr 14 15:12:07 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=449b54f32cab423a6e993643a0c7e5e923a0ad8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:27:70:b5:23:50:08:25:b2:50:52:e6:f8:f3:
                    f4:7a:59:ca:df:31:75:20:d9:d0:4d:68:11:15:27:
                    a4:90:b1:7e:54:e9:bb:5d:51:c1:7b:70:ce:c3:f9:
                    a7:a1:d4:96:4f:57:12:ec:74:7c:48:5b:19:d8:87:
                    cf:2f:87:5f:07:e9:21:0a:59:d0:f6:11:ac:30:02:
                    c0:5d:66:d2:05:7c:b8:25:52:7d:67:77:d6:f7:95:
                    ee:58:cd:91:13:ee:a9:02:ee:93:79:cd:65:a3:c9:
                    3d:9a:82:e4:96:aa:b4:c1:53:47:e5:ba:8e:43:cb:
                    2b:d4:a6:20:4f:d9:95:98:e1:87:41:51:d6:37:ad:
                    b2:b2:75:19:7a:2a:f8:46:96:22:68:ce:74:cb:8d:
                    b0:d1:1e:1f:1e:79:c6:9a:35:12:0e:79:84:0c:62:
                    0c:61:27:c8:fa:05:16:37:cb:3d:6a:fa:56:44:98:
                    6c:81:0d:59:97:6c:ac:f5:a8:b5:f8:e4:6c:af:86:
                    06:99:15:b2:a9:15:06:7d:1f:2a:c6:8c:7c:c5:74:
                    a8:a4:d9:38:e7:ca:09:cd:be:cb:eb:45:6b:5a:0c:
                    6f:e2:4f:29:b0:7c:72:a0:bb:29:9b:52:d5:9c:95:
                    3e:36:86:db:ce:64:d4:42:34:1c:bf:b0:c8:cc:5b:
                    e3:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:9B:54:F3:2C:AB:42:3A:6E:99:36:43:A0:C7:E5:E9:23:A0:AD:8B
            X509v3 Authority Key Identifier:
                keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/RJtU8yyrQjpumTZDoMfl6SOgrYs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         61:e4:f3:f5:cc:f2:44:6b:f5:85:05:d2:5c:e0:88:6d:46:2a:
         17:63:3e:a7:35:8a:44:4d:c5:65:e4:b1:3b:c3:5d:c5:55:a2:
         ee:d7:75:76:09:10:30:3d:fe:c4:aa:6d:b1:92:a5:ad:4a:cf:
         7d:fc:84:ff:69:4f:6c:17:25:73:9f:68:fa:1d:47:e4:de:57:
         3d:86:01:4d:c5:04:9a:9d:8b:69:93:00:95:b6:b4:bd:49:ff:
         69:b5:c1:fe:86:a8:6a:72:31:70:8a:01:bc:f0:bb:aa:b3:4a:
         a7:3c:26:44:55:30:d0:5e:a5:a0:9e:f7:02:1a:04:73:16:4f:
         06:d0:16:a8:6f:2f:79:c6:74:2f:7b:4a:8b:a0:0e:b0:a8:46:
         57:68:e6:6d:6e:e6:c2:55:26:d7:ba:75:0a:e3:ce:ec:60:6d:
         b8:5a:fa:39:a6:5c:55:43:c1:b1:85:fb:8c:2c:12:f7:fa:1e:
         1f:af:f1:b3:b6:a2:2a:0d:53:30:a9:f3:4a:fb:a7:b6:87:23:
         26:de:de:4b:9b:20:3b:46:c6:25:ea:72:4a:4b:14:c3:4a:55:
         88:4f:74:54:e3:76:88:02:72:f9:eb:cb:66:1c:29:fc:9f:d1:
         c0:c1:7f:a8:b3:05:77:01:b0:87:a5:56:be:7d:bf:24:7d:09:
         f9:7f:3c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----