Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/V9pLxyycMg0DVH3xqQ1e_9gudSs.roa
File:                     V9pLxyycMg0DVH3xqQ1e_9gudSs.roa (raw, json)
Hash identifier:          X0VuMEfEUql6lqtq5alIQ/Alm4ZUXOJViXBjEvwNUfY=
Subject key identifier:   57:DA:4B:C7:2C:9C:32:0D:03:54:7D:F1:A9:0D:5E:FF:D8:2E:75:2B
Certificate issuer:       /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial:       018E6ED8CB004B90C7FB457DA46D2C517518
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/V9pLxyycMg0DVH3xqQ1e_9gudSs.roa
Signing time:             Sun 24 Mar 2024 05:04:45 +0000
ROA not before:           Sun 24 Mar 2024 05:04:45 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
                          2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
                          2001:67c:64:ffff:0:18e:6ed8:7571/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:6e:d8:cb:00:4b:90:c7:fb:45:7d:a4:6d:2c:51:75:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
        Validity
            Not Before: Mar 24 05:04:45 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=57da4bc72c9c320d03547df1a90d5effd82e752b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:43:4c:ec:e9:14:f7:61:64:32:b6:9b:0d:eb:
                    c1:f2:1c:66:2f:f4:9d:c8:9a:55:14:05:29:cd:30:
                    1c:23:9c:a2:b6:03:cd:2c:86:cb:cc:3d:20:e5:38:
                    72:c1:0a:d5:a3:d1:e7:d1:d5:74:05:50:0f:f8:eb:
                    3e:d4:d9:c0:38:d8:3d:29:ff:e9:01:3c:aa:74:94:
                    97:69:29:d9:bf:82:96:61:fa:f4:81:5e:c9:38:4a:
                    49:4a:c0:dd:5c:45:2b:23:95:e0:8d:ac:be:ab:3f:
                    49:da:c0:80:e3:bf:44:8d:8b:fc:4c:d9:04:9c:2a:
                    07:6d:eb:75:3c:76:0c:2b:7b:68:9b:f5:db:04:66:
                    0b:fb:63:9e:15:90:eb:d2:68:9d:f5:83:ed:b4:84:
                    07:ef:d4:81:fb:e0:da:90:36:47:e1:6c:af:84:f8:
                    e5:c1:05:4c:c8:7e:7e:68:4e:4a:d1:b7:19:ed:56:
                    57:1c:ee:d7:9b:4a:70:14:ff:c4:02:bd:22:21:f6:
                    13:b1:25:b4:dc:d9:b4:33:35:85:57:60:35:5a:b4:
                    40:6e:d2:c0:c4:88:9f:f3:02:d6:ed:de:37:b5:de:
                    bf:a7:3c:aa:0f:27:78:a4:fb:bf:c5:87:d0:cc:86:
                    e4:8d:76:c3:a2:24:05:dd:ba:35:23:f2:54:d9:e7:
                    c4:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:DA:4B:C7:2C:9C:32:0D:03:54:7D:F1:A9:0D:5E:FF:D8:2E:75:2B
            X509v3 Authority Key Identifier:
                keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/V9pLxyycMg0DVH3xqQ1e_9gudSs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         4b:42:19:af:a5:df:1a:33:68:7e:1f:1e:76:ba:25:18:35:15:
         a2:13:66:9c:6d:d8:2c:a5:e6:85:4c:12:72:c7:0f:d4:f0:c9:
         b8:7c:0e:13:bd:71:45:8c:bf:4f:13:f3:f3:bc:25:13:55:8b:
         5c:86:8f:6f:b2:4c:19:7f:71:8f:34:e9:84:78:55:7d:c6:34:
         5c:33:29:73:2a:ed:a3:71:41:a1:58:c7:dc:b1:32:12:49:88:
         2b:f5:1d:f6:a6:41:ce:0c:c6:6d:b5:2a:2d:59:fc:ff:45:e3:
         27:77:98:82:a4:72:b7:63:9f:18:e8:62:48:bc:e2:85:6e:87:
         6a:aa:11:a4:3e:3f:f6:22:46:7d:7f:34:ba:17:f5:64:77:55:
         b5:b9:70:ae:13:a2:0f:40:78:c3:ec:32:9d:c9:a1:ac:6c:d7:
         43:05:b2:41:d6:cc:d4:ff:e8:f8:16:f1:17:29:b5:1d:4d:db:
         9f:d2:4a:76:47:a9:58:3e:10:3e:21:d8:95:f9:fd:1b:69:91:
         7d:71:cc:70:36:79:64:f6:9d:13:d5:59:a7:e5:4a:89:c6:1c:
         2f:b9:26:5f:0f:7e:8a:bb:57:ba:fc:02:53:07:f0:92:6b:d4:
         80:1a:f3:48:16:de:97:a1:c5:91:d8:7a:76:74:39:c5:8b:15:
         9a:73:fe:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----