Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/TdzArQqnqtPiin3_Z23E4EFOx5w.roa
File:                     TdzArQqnqtPiin3_Z23E4EFOx5w.roa (raw, json)
Hash identifier:          xFCWrf9ur7hijs9tKCCW7fC7PCsY8wgVM0sJP53TQOs=
Subject key identifier:   4D:DC:C0:AD:0A:A7:AA:D3:E2:8A:7D:FF:67:6D:C4:E0:41:4E:C7:9C
Certificate issuer:       /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial:       018ED5E08CD6F9C08DA6F0EB652712BE40CA
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/TdzArQqnqtPiin3_Z23E4EFOx5w.roa
Signing time:             Sat 13 Apr 2024 05:14:06 +0000
ROA not before:           Sat 13 Apr 2024 05:14:06 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:d5:e0:8c:d6:f9:c0:8d:a6:f0:eb:65:27:12:be:40:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
        Validity
            Not Before: Apr 13 05:14:06 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=4ddcc0ad0aa7aad3e28a7dff676dc4e0414ec79c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:fe:79:db:70:75:f0:02:d8:46:fb:41:32:9c:
                    57:ce:e4:fe:8c:77:34:f7:f1:1b:cb:9e:00:24:36:
                    ba:7e:23:9b:7c:99:e6:9f:88:91:fc:f7:e4:ae:46:
                    16:90:ae:5d:e2:d4:df:2c:a7:9a:a6:fb:d0:9f:b1:
                    0b:98:bb:19:8e:e9:a5:7f:6c:f1:79:e8:a9:16:ad:
                    07:88:60:ea:dd:42:85:21:18:6f:8f:9c:b7:a7:b5:
                    2c:3f:b1:a7:cd:4d:37:2c:98:51:6e:13:a3:5a:7f:
                    1f:52:0b:3b:83:7c:f7:be:b4:06:dc:92:02:9a:fa:
                    0e:96:ec:5e:f2:32:08:a4:9c:42:19:b8:65:aa:11:
                    ff:38:12:28:da:6f:2c:1a:c6:96:9e:96:95:7c:66:
                    9c:9f:59:61:0e:f4:11:a2:1a:2f:8c:6e:15:a0:47:
                    84:86:43:0a:d5:27:85:8d:92:16:eb:08:d1:ff:fa:
                    6f:e6:0e:1a:50:88:94:9c:70:8e:a3:5b:23:73:19:
                    d6:30:98:9e:cd:bb:5f:da:52:a0:f3:d4:f1:f7:ae:
                    14:4d:62:20:14:b6:69:e2:81:56:61:0f:4a:80:a3:
                    4a:12:2b:c2:cc:cd:1d:04:2b:12:f8:22:36:6f:70:
                    8d:29:96:7a:97:07:64:b0:ac:70:36:be:11:79:ef:
                    4e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:DC:C0:AD:0A:A7:AA:D3:E2:8A:7D:FF:67:6D:C4:E0:41:4E:C7:9C
            X509v3 Authority Key Identifier:
                keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/TdzArQqnqtPiin3_Z23E4EFOx5w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         7a:cc:0f:91:1d:1d:c9:2d:19:63:24:b8:01:fd:da:98:f5:de:
         49:e8:aa:8b:3b:fa:d6:a7:db:58:e4:7e:0a:20:23:1c:23:3f:
         68:86:7a:a3:2c:ce:a0:18:2f:b8:23:38:85:04:f2:c0:60:ec:
         88:72:91:a8:21:40:44:7a:f1:3f:23:af:11:ea:4c:85:4b:d2:
         01:a2:31:f9:45:84:3b:17:10:ed:10:b6:02:52:b8:a9:de:05:
         57:c4:b8:b6:2d:26:a5:ff:68:98:ff:75:6f:ce:a9:ee:57:73:
         96:59:ec:85:5e:b7:a3:30:c1:a9:ac:29:61:60:75:92:83:cf:
         c1:74:07:46:b5:58:2a:0f:1f:92:a2:90:34:59:b6:ab:ea:64:
         31:d2:05:91:ea:44:db:7a:da:5c:8e:f9:64:b9:53:70:b3:46:
         45:99:54:f0:0b:42:7c:db:c8:6b:eb:e6:d2:23:ee:aa:cc:43:
         3f:3a:94:ed:47:49:df:48:32:20:90:0f:7b:9c:5d:2a:53:7a:
         f3:7b:ab:2e:f7:40:64:f9:f3:ef:b3:d4:96:f4:09:6d:41:57:
         c5:36:21:c6:0b:1e:2f:50:2c:88:a4:b7:ed:d9:a4:71:60:21:
         5a:59:d4:03:58:14:54:db:0d:2f:57:d7:0d:89:d6:66:f2:b2:
         1b:f3:ea:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----