Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/V9GtfKVwJTipBa68d4JmCSdSm8k.roa
File:                     V9GtfKVwJTipBa68d4JmCSdSm8k.roa (raw, json)
Hash identifier:          weeBP0xjw6EXeg0iFOaz9KiB5UK6LdZLIED3r/Cccx0=
Subject key identifier:   57:D1:AD:7C:A5:70:25:38:A9:05:AE:BC:77:82:66:09:27:52:9B:C9
Certificate issuer:       /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial:       018D5F6E9797C521AD44D08F5D77B2BDED7E
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/V9GtfKVwJTipBa68d4JmCSdSm8k.roa
Signing time:             Wed 31 Jan 2024 12:11:39 +0000
ROA not before:           Wed 31 Jan 2024 12:11:39 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:5f:6e:97:97:c5:21:ad:44:d0:8f:5d:77:b2:bd:ed:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
        Validity
            Not Before: Jan 31 12:11:39 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=57d1ad7ca5702538a905aebc7782660927529bc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e6:53:93:e1:71:e7:f2:0b:ad:99:c5:f9:fe:
                    70:17:ea:c4:4f:79:59:79:a3:91:59:48:ce:a9:5d:
                    ae:83:3e:c3:11:80:fa:25:e2:fb:1b:ca:80:01:7a:
                    8d:cd:d1:57:ab:09:28:4f:d2:8c:92:df:dd:ff:e6:
                    b9:de:61:63:9b:67:6d:d5:3b:54:31:a9:8c:66:98:
                    9d:93:b1:66:52:5f:99:c3:3d:cd:15:69:89:08:62:
                    69:c2:0e:a5:54:cd:2d:bc:11:98:fe:1e:d1:d2:80:
                    d0:fc:40:20:ef:ef:8d:96:50:ef:ff:92:32:8e:a2:
                    1e:e5:96:79:f8:f7:19:fd:9a:42:21:a4:e4:0c:c2:
                    27:d6:62:62:80:26:c4:2e:4a:f8:50:94:3f:b6:15:
                    4c:32:2a:96:49:2d:f3:65:92:e3:b3:09:34:d5:0b:
                    ae:2e:3e:5e:d6:23:5f:54:5c:b6:e5:7a:19:f8:6b:
                    4b:fa:8e:35:3f:d8:d9:ca:cf:9a:37:f1:e2:ed:3b:
                    9f:53:52:eb:45:ce:99:ba:c9:9c:ed:48:9a:28:02:
                    ea:8b:b3:0d:73:9a:6f:55:ed:f5:77:52:f2:65:e9:
                    f2:3c:d0:ab:5e:ee:87:87:10:2a:95:15:fb:8a:df:
                    73:ad:d6:11:9d:06:4d:44:4c:e4:83:7c:4c:69:20:
                    20:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:D1:AD:7C:A5:70:25:38:A9:05:AE:BC:77:82:66:09:27:52:9B:C9
            X509v3 Authority Key Identifier:
                keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/V9GtfKVwJTipBa68d4JmCSdSm8k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         28:d5:ed:df:0a:2d:e7:ad:0f:95:1f:5f:4b:0a:a0:2e:ea:f8:
         17:44:21:b4:07:ef:50:c2:c2:2a:75:60:8e:28:0c:82:91:70:
         40:62:6b:aa:3d:5d:aa:b5:c5:ad:39:8e:51:2f:27:e1:c4:34:
         cc:60:c3:01:2f:5b:1a:c1:77:77:2c:fe:1e:71:0f:29:59:41:
         15:50:87:1e:0e:a4:d0:9e:86:10:8c:3c:92:a9:33:e1:87:c0:
         c4:de:88:51:1f:6a:68:9e:f7:53:04:9c:c5:40:be:2b:d9:9b:
         f2:6a:a3:94:5b:f0:72:eb:9f:c7:b1:ca:01:73:3c:41:73:f1:
         1f:04:a9:24:58:6d:15:85:d1:83:83:c0:5b:d6:14:1a:af:50:
         38:1b:7a:ff:88:6b:88:e4:84:38:58:8a:5b:b5:fe:a8:fd:ed:
         32:9c:81:38:a7:9e:6b:aa:0b:3d:ff:45:2b:af:a1:85:04:e9:
         71:91:74:fc:ee:a6:cb:88:9a:6a:91:35:20:b6:05:18:20:13:
         be:94:c9:3d:a5:bc:7d:07:de:fd:36:9c:9a:e5:6d:ea:3e:c9:
         96:e7:e8:62:c9:06:aa:ef:dc:15:28:ca:3f:d0:8f:91:32:93:
         ee:67:a4:21:77:09:3a:5e:29:e6:56:fb:e1:41:04:08:6f:98:
         f0:16:22:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----