Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Td9oovupOP-3Xb2Qx-Y9bdhsf7Q.roa
File:                     Td9oovupOP-3Xb2Qx-Y9bdhsf7Q.roa (raw, json)
Hash identifier:          P5GehPHkmUJg9nccQem4cHsadSqhk0BWSSFxoyFjZKs=
Subject key identifier:   4D:DF:68:A2:FB:A9:38:FF:B7:5D:BD:90:C7:E6:3D:6D:D8:6C:7F:B4
Certificate issuer:       /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial:       018C8D289CD0E8093B344FB954D1E7E4AADC
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Td9oovupOP-3Xb2Qx-Y9bdhsf7Q.roa
Signing time:             Thu 21 Dec 2023 16:14:58 +0000
ROA not before:           Thu 21 Dec 2023 16:14:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:8d:28:9c:d0:e8:09:3b:34:4f:b9:54:d1:e7:e4:aa:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
        Validity
            Not Before: Dec 21 16:14:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4ddf68a2fba938ffb75dbd90c7e63d6dd86c7fb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:fc:01:6e:a3:e2:ac:7e:7f:e4:c4:dc:c8:e7:
                    85:48:b3:9d:3b:0d:63:f3:be:a3:45:39:cd:ef:b1:
                    8f:36:8e:d0:3b:49:6f:eb:a3:85:b0:8b:5f:17:ff:
                    a9:fc:bc:f3:db:aa:86:dd:03:6f:d9:d7:f7:b1:07:
                    57:ca:df:98:5d:a3:48:3f:37:30:7b:e1:23:19:20:
                    ee:11:c3:db:27:b3:c9:16:b4:33:02:2b:f3:55:e8:
                    0e:40:24:c7:fa:b0:bb:5f:84:2c:c8:75:d4:7a:8a:
                    96:da:9f:e5:bc:12:2c:ad:d1:63:b1:e3:25:7a:e9:
                    40:71:ff:12:0e:7c:33:3b:cc:58:77:38:4b:42:1e:
                    41:e6:26:a5:d8:b6:77:9a:4b:ab:09:65:4e:c7:4b:
                    f4:8a:70:3d:a7:e0:9a:62:4b:f7:71:c5:78:90:2a:
                    8f:59:42:bf:0a:2d:c4:fc:0b:5e:d1:de:80:5d:68:
                    74:8e:ab:b4:df:4d:ce:8b:47:9f:07:59:bb:65:b7:
                    22:30:02:ae:2d:f8:2f:b0:f5:14:60:7c:bd:29:40:
                    82:fb:be:85:e2:94:ab:64:e9:8d:ac:60:06:bd:4e:
                    1f:3c:9d:37:22:d7:ea:b6:83:e8:39:90:56:07:0e:
                    66:79:b1:90:a2:ea:e2:3b:c7:76:1c:d4:03:fc:eb:
                    76:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:DF:68:A2:FB:A9:38:FF:B7:5D:BD:90:C7:E6:3D:6D:D8:6C:7F:B4
            X509v3 Authority Key Identifier:
                keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Td9oovupOP-3Xb2Qx-Y9bdhsf7Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         4e:b4:c3:a0:1e:b1:39:e7:6b:0b:12:0e:a1:c6:33:63:b5:78:
         d6:d7:ad:d5:0c:62:15:89:6d:ea:43:9b:31:ce:c4:2a:1b:58:
         1f:92:3c:2a:f1:1c:60:ca:28:ac:43:4c:61:02:77:18:15:09:
         ab:e0:f0:6a:23:da:60:b0:89:09:1e:da:7e:e3:7c:d1:ec:29:
         f6:80:4c:00:cf:04:0f:9e:e1:83:d1:e8:ad:fa:12:30:99:99:
         ab:9c:b9:1f:48:ff:d9:68:f2:42:9b:a4:64:88:69:91:2f:74:
         50:b3:a8:e2:ea:f3:0d:31:47:84:5a:e9:ac:0a:2f:6c:3d:bc:
         9b:09:c8:3c:cd:b2:39:e3:83:0b:b6:8d:62:71:91:54:cd:99:
         60:e6:90:1b:a0:c1:e0:b5:4f:18:b7:c2:21:fc:91:40:81:36:
         7d:b1:53:cd:25:79:59:bd:6d:fc:11:23:0c:19:25:e8:e5:61:
         46:5d:41:d0:b9:f2:6d:ea:8f:ac:fa:d8:37:a8:77:44:8d:d7:
         87:81:55:b5:de:b1:d4:7f:ae:dd:8e:42:74:58:eb:56:75:b0:
         da:86:1b:8a:f9:75:f0:26:80:5d:9d:e0:11:41:15:93:ed:e3:
         bf:07:9b:20:b9:f4:e3:24:40:ca:14:cc:ee:3f:99:65:c1:1b:
         aa:f7:3f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----