Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Sh2jHmZqBjWsmGfbOzOAybQcp3A.roa
File:                     Sh2jHmZqBjWsmGfbOzOAybQcp3A.roa (raw, json)
Hash identifier:          TMspZgooSJ5EWb9uEb5VVdRgXYPgVWYe5FWU/8HZqno=
Subject key identifier:   4A:1D:A3:1E:66:6A:06:35:AC:98:67:DB:3B:33:80:C9:B4:1C:A7:70
Certificate issuer:       /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial:       018D1DC9A949327D593A7B247A8F0C4DD2E2
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Sh2jHmZqBjWsmGfbOzOAybQcp3A.roa
Signing time:             Thu 18 Jan 2024 18:16:11 +0000
ROA not before:           Thu 18 Jan 2024 18:16:11 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:1d:c9:a9:49:32:7d:59:3a:7b:24:7a:8f:0c:4d:d2:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
        Validity
            Not Before: Jan 18 18:16:11 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=4a1da31e666a0635ac9867db3b3380c9b41ca770
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2c:b9:56:77:c0:6c:d4:3d:d4:48:6c:c2:11:
                    9a:76:52:b1:e3:8e:ea:b5:89:98:39:02:a5:6c:3f:
                    86:88:81:31:5f:4d:aa:7f:b1:c1:68:06:40:e6:d8:
                    89:29:37:1a:bb:21:e0:15:ee:24:bb:7a:71:20:78:
                    c0:ab:04:10:f4:e9:14:41:4b:73:fa:24:6b:51:16:
                    e7:a2:95:77:52:19:8a:01:6b:64:ad:42:a7:3e:d3:
                    de:90:d4:23:cb:17:68:8a:8c:6e:08:dc:bf:18:c5:
                    d2:1f:2a:ab:ff:45:ab:8c:58:62:7e:80:49:40:8b:
                    79:20:43:3c:47:2a:f7:6b:3e:6f:bb:bf:ca:eb:9e:
                    54:ae:79:28:e7:ed:c6:95:20:a1:70:7d:e5:9f:42:
                    41:f2:bb:1e:d3:58:43:95:50:17:d6:10:07:50:ec:
                    f9:83:19:f9:50:f0:5c:fa:10:8b:04:46:79:3e:dc:
                    83:12:c3:07:37:90:9f:83:e6:a2:af:f7:27:7b:a2:
                    1a:b8:51:fd:8c:2f:a0:d0:a8:14:33:d4:66:b0:c8:
                    95:6a:3f:09:2b:ef:b9:fe:20:b7:92:2a:c8:0b:92:
                    63:4b:ab:a5:9f:0b:99:51:c2:fa:47:69:80:a8:65:
                    21:b7:b1:5d:09:e4:bf:d8:be:80:40:fb:a2:8e:1a:
                    be:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:1D:A3:1E:66:6A:06:35:AC:98:67:DB:3B:33:80:C9:B4:1C:A7:70
            X509v3 Authority Key Identifier:
                keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Sh2jHmZqBjWsmGfbOzOAybQcp3A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         25:24:98:e4:9f:07:e0:11:a1:08:00:0d:f9:79:9f:7c:c1:de:
         dd:a4:bc:a8:ef:f5:f5:4f:76:47:41:c8:33:1a:21:cc:19:4c:
         b3:f9:44:e3:03:0f:08:2f:ec:80:a1:27:9c:7e:c3:5e:be:26:
         6d:c0:45:f0:46:f9:ec:5a:08:8d:77:74:c2:28:92:ba:28:e8:
         a9:47:f6:bc:fb:e2:ed:16:82:65:d7:00:d1:57:ec:11:72:36:
         7c:be:7d:fd:96:7a:26:20:cd:1f:19:c7:ec:5d:01:1b:19:4e:
         f9:be:c4:10:b5:3d:4a:47:99:ee:15:2c:78:88:79:6e:78:8a:
         e6:df:22:5c:cd:67:db:14:73:45:6b:44:f4:b9:b6:8e:a0:46:
         e0:32:ea:07:cb:eb:76:28:6a:c2:df:d7:3a:6f:4f:7e:ee:34:
         8b:fe:f0:79:f0:4f:01:d9:92:ec:b4:de:c3:9e:fa:42:ba:c5:
         f1:bd:d9:97:ec:69:30:c5:e4:15:91:4d:da:0f:be:9b:aa:40:
         db:79:e6:80:8b:06:e9:ac:43:a3:5a:cf:e7:3d:7d:e4:b8:13:
         4f:84:1d:0c:db:6c:49:9c:f7:5c:92:61:5d:01:f0:7f:a3:82:
         55:b1:94:91:02:b2:33:73:19:37:a2:68:68:53:aa:52:8c:d2:
         a6:10:1c:63
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY0dyalJMn1ZOnskeo8MTdLiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMTE4MTgxNjExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YTFkYTMxZTY2NmEwNjM1YWM5ODY3ZGIzYjMzODBjOWI0MWNhNzcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzyy5VnfAbNQ91EhswhGadlKx447q
tYmYOQKlbD+GiIExX02qf7HBaAZA5tiJKTcauyHgFe4ku3pxIHjAqwQQ9OkUQUtz
+iRrURbnopV3UhmKAWtkrUKnPtPekNQjyxdoioxuCNy/GMXSHyqr/0WrjFhifoBJ
QIt5IEM8Ryr3az5vu7/K655Urnko5+3GlSChcH3ln0JB8rse01hDlVAX1hAHUOz5
gxn5UPBc+hCLBEZ5PtyDEsMHN5Cfg+air/cne6IauFH9jC+g0KgUM9RmsMiVaj8J
K++5/iC3kirIC5JjS6ulnwuZUcL6R2mAqGUht7FdCeS/2L6AQPuijhq+nwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEodox5magY1rJhn2zszgMm0HKdwMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvU2gyakhtWnFCaldzbUdmYk96T0F5YlFjcDNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACUkmOSfB+ARoQgADfl5
n3zB3t2kvKjv9fVPdkdByDMaIcwZTLP5ROMDDwgv7IChJ5x+w16+Jm3ARfBG+exa
CI13dMIokroo6KlH9rz74u0WgmXXANFX7BFyNny+ff2WeiYgzR8Zx+xdARsZTvm+
xBC1PUpHme4VLHiIeW54iubfIlzNZ9sUc0VrRPS5to6gRuAy6gfL63YoasLf1zpv
T37uNIv+8HnwTwHZkuy03sOe+kK6xfG92ZfsaTDF5BWRTdoPvpuqQNt55oCLBums
Q6Naz+c9feS4E0+EHQzbbEmc91ySYV0B8H+jglWxlJECsjNzGTeiaGhTqlKM0qYQ
HGM=
-----END CERTIFICATE-----