Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/UWUfF7-5MpZC4DimkhJeqpFidLw.roa
File:                     UWUfF7-5MpZC4DimkhJeqpFidLw.roa (raw, json)
Hash identifier:          NL2EPEj4AFP1m1wY4rTzHaB1ZbKt/0YfuxlCGqig2zY=
Subject key identifier:   51:65:1F:17:BF:B9:32:96:42:E0:38:A6:92:12:5E:AA:91:62:74:BC
Certificate issuer:       /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial:       018E30003A9B098B668F3FE1E119E4981937
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/UWUfF7-5MpZC4DimkhJeqpFidLw.roa
Signing time:             Tue 12 Mar 2024 00:11:45 +0000
ROA not before:           Tue 12 Mar 2024 00:11:45 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
                          2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:30:00:3a:9b:09:8b:66:8f:3f:e1:e1:19:e4:98:19:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
        Validity
            Not Before: Mar 12 00:11:45 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=51651f17bfb9329642e038a692125eaa916274bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d9:35:6a:89:fb:e0:40:ed:1e:0a:ab:a9:4f:
                    99:02:95:cd:6b:3b:c9:ee:96:86:e2:35:c0:9c:20:
                    d0:8b:ed:83:d5:de:8f:ac:8d:e7:da:87:30:c0:dc:
                    ac:d9:b1:05:57:cd:85:6c:b4:7f:d2:26:e0:bc:de:
                    06:7a:6a:e2:8c:f9:6a:ca:dd:86:df:54:f3:b6:12:
                    96:84:b4:89:4e:99:cf:78:cf:69:4a:0b:54:57:85:
                    93:c3:ee:24:cc:b8:e4:01:26:bf:1b:83:af:5f:41:
                    5b:a0:41:9a:a7:bc:16:b4:02:93:62:ef:3c:2b:80:
                    9d:7d:db:0f:0e:0d:ff:e2:b1:24:25:63:9d:2b:07:
                    86:f4:7b:29:d2:72:cb:be:e1:82:9b:2f:e7:b8:a3:
                    31:94:74:6f:82:aa:ac:98:b6:3f:dd:ab:5b:fc:85:
                    b8:c3:3e:f3:ef:24:d3:fe:53:24:87:ce:24:60:5e:
                    6b:4e:11:e6:86:77:f8:5b:6e:70:a1:5b:17:07:1f:
                    da:c4:8a:8b:9c:fd:58:a1:47:ec:c8:fe:c2:62:f7:
                    d8:b2:09:cb:b7:27:d2:4d:87:2c:0b:36:98:08:40:
                    4d:af:e4:1e:83:8d:0c:4c:cc:37:9b:74:97:c2:d7:
                    0b:30:3e:ab:62:4c:08:5e:3f:ca:1e:51:cc:3e:eb:
                    da:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:65:1F:17:BF:B9:32:96:42:E0:38:A6:92:12:5E:AA:91:62:74:BC
            X509v3 Authority Key Identifier:
                keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/UWUfF7-5MpZC4DimkhJeqpFidLw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         5b:51:4a:cb:68:66:bd:97:b1:9b:7a:ba:89:5d:c0:0d:00:85:
         e7:0b:77:9b:fb:f0:e7:2d:57:15:ca:8f:b0:ee:49:06:26:4d:
         3b:bf:e6:9b:b4:55:40:c6:91:ca:49:da:0c:81:1f:f7:e0:34:
         b6:e2:4f:7d:06:78:f5:15:ae:8b:36:1a:a1:f7:39:1a:d8:17:
         11:c8:ca:67:91:5c:65:b2:13:af:09:98:41:ae:da:ce:6b:d6:
         4c:f4:a2:ab:d9:b2:b9:b6:1a:64:95:06:80:8b:da:c2:02:e7:
         bf:92:d0:7d:ef:e5:af:a9:3b:8e:9f:5d:41:56:99:d0:25:10:
         4f:f3:be:ff:5d:6f:7b:0d:86:a9:ff:d8:d7:63:78:ce:ce:d1:
         1d:ec:3b:bc:30:75:16:a2:38:db:4c:78:33:98:c8:31:3e:74:
         7e:a3:85:a2:4a:ca:c8:11:4d:e9:7e:f0:7e:1c:7c:2a:fb:a7:
         4f:4e:84:82:7d:12:1b:85:33:f5:36:9f:38:aa:0a:0b:46:be:
         2b:ad:c5:c2:27:18:6a:a8:89:e0:f1:c2:25:9b:d7:67:8c:1e:
         7b:15:a1:1b:9d:76:0e:c2:f9:66:03:b2:0e:ad:9a:4f:ed:37:
         d3:c0:49:d9:ad:ee:0b:9b:41:f7:a6:6c:2b:32:2c:9e:55:a5:
         94:e1:a5:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----