Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/RkbSVYFEuCrba8uVLAaLyjJKTDc.roa
File:                     RkbSVYFEuCrba8uVLAaLyjJKTDc.roa (raw, json)
Hash identifier:          C1G2GZisz6ZvYWghW1ve7EN4ePX+7kmsY641rV8J/1I=
Subject key identifier:   46:46:D2:55:81:44:B8:2A:DB:6B:CB:95:2C:06:8B:CA:32:4A:4C:37
Certificate issuer:       /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial:       018D393C553A6EFDAA3E89C17B626357ED32
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/RkbSVYFEuCrba8uVLAaLyjJKTDc.roa
Signing time:             Wed 24 Jan 2024 02:11:11 +0000
ROA not before:           Wed 24 Jan 2024 02:11:11 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:39:3c:55:3a:6e:fd:aa:3e:89:c1:7b:62:63:57:ed:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
        Validity
            Not Before: Jan 24 02:11:11 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=4646d2558144b82adb6bcb952c068bca324a4c37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:75:b6:0a:5b:11:9f:92:2e:88:ed:86:34:0f:
                    0b:fc:df:81:a8:ca:71:10:ec:a0:d2:35:aa:43:47:
                    1a:1b:38:39:17:2d:be:50:b5:e5:1d:e5:88:38:67:
                    68:1f:d0:33:01:23:85:9d:99:fd:5c:00:e3:5c:17:
                    ea:94:7f:a5:0d:bb:bd:c4:27:ff:b4:7f:43:13:54:
                    13:df:92:b9:9d:77:19:ae:2f:c8:4d:6f:4b:95:8f:
                    cf:2e:c7:cd:90:17:28:2f:07:45:25:94:01:a2:11:
                    77:0f:54:03:9a:28:ec:c2:4b:b9:08:5b:dc:c5:38:
                    7f:42:4d:8e:66:5c:27:de:40:59:cd:ea:39:98:f4:
                    f7:16:76:0b:8e:10:89:48:71:8c:33:fa:74:fc:72:
                    73:88:bd:87:96:f0:2c:dc:29:cc:97:05:61:7d:28:
                    f9:7a:47:46:3f:2e:c8:0f:63:a7:62:bd:47:08:68:
                    0e:e1:92:1b:e5:24:b3:61:0b:f0:c4:6b:2b:f2:2b:
                    2e:87:f2:5c:03:aa:af:91:b6:53:83:df:90:8a:d3:
                    cd:42:5b:39:38:b4:78:d6:77:0b:ec:18:a7:e2:98:
                    42:a3:a9:02:71:50:95:68:34:67:90:f4:08:77:af:
                    a1:0c:d2:44:9e:c1:dd:d7:9d:34:11:74:88:8b:1c:
                    5d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:46:D2:55:81:44:B8:2A:DB:6B:CB:95:2C:06:8B:CA:32:4A:4C:37
            X509v3 Authority Key Identifier:
                keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/RkbSVYFEuCrba8uVLAaLyjJKTDc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         44:96:94:3e:2a:de:69:b6:6a:26:b4:a6:00:13:90:9d:ce:96:
         90:fb:39:18:de:c8:ec:64:4d:ee:3a:33:fb:0a:3c:c7:80:48:
         77:17:93:24:85:4a:a3:18:c4:e5:9c:3d:32:43:58:ae:a8:13:
         0d:63:66:bf:a9:27:2c:fe:be:ac:32:03:59:39:a2:b4:0c:21:
         98:be:ab:41:f9:eb:cb:c7:0b:0b:63:f1:ee:3d:03:80:de:5f:
         64:a8:44:b7:17:b9:1c:61:ab:90:5a:4e:f7:33:34:43:37:19:
         72:06:de:82:ef:f8:ef:4d:45:98:fd:81:90:d9:cf:7d:11:58:
         c3:ae:7e:61:1b:86:0a:a5:3a:2d:44:f2:c7:17:87:da:9d:b2:
         78:ce:67:3a:0f:3a:75:31:f4:f6:99:d6:1b:ba:44:2a:7f:5d:
         17:7a:b6:b6:57:1f:17:c2:07:03:1a:eb:ee:1f:9c:02:7d:a8:
         ec:d2:c1:ef:55:14:ff:b0:fc:2c:2d:a4:b2:9a:7e:4f:be:8a:
         41:83:84:85:2c:48:8d:af:f4:ec:32:5d:ee:1f:e9:e9:94:e6:
         23:4c:5d:7c:ca:73:04:5b:ef:2c:52:26:dd:38:17:e4:0d:6b:
         35:df:6a:e3:14:00:e4:96:d4:1e:fc:89:ab:9a:ac:5b:b7:c0:
         8f:c1:f4:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----