Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/VTCUT114uWPnN_ttIOUbphW3v-8.roa
File:                     VTCUT114uWPnN_ttIOUbphW3v-8.roa (raw, json)
Hash identifier:          COwkY5Vi5bsnIHIxBoWR1sEOzwPcZegzBDcRSqOhqgU=
Subject key identifier:   55:30:94:4F:5D:78:B9:63:E7:37:FB:6D:20:E5:1B:A6:15:B7:BF:EF
Certificate issuer:       /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial:       018EBC1DD069A0C861CEAEDC4865F298A47C
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/VTCUT114uWPnN_ttIOUbphW3v-8.roa
Signing time:             Mon 08 Apr 2024 05:10:54 +0000
ROA not before:           Mon 08 Apr 2024 05:10:54 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:bc:1d:d0:69:a0:c8:61:ce:ae:dc:48:65:f2:98:a4:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
        Validity
            Not Before: Apr  8 05:10:54 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=5530944f5d78b963e737fb6d20e51ba615b7bfef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:3f:ed:e0:e9:12:86:77:49:0b:2f:b8:a4:d0:
                    db:46:9c:30:7c:97:4c:65:d9:85:f6:d2:9a:53:d9:
                    7a:72:cc:ed:e9:a2:f2:12:e7:52:c3:6c:da:3f:c2:
                    f7:d2:81:78:0b:69:03:2a:26:28:d1:f1:05:29:35:
                    83:24:32:26:b3:c2:29:7d:27:bb:d8:e6:25:dc:fe:
                    70:15:a7:96:cf:cf:0f:02:e7:8a:d3:df:31:3f:13:
                    3f:e6:72:73:70:90:59:2b:bb:d2:e3:d6:18:17:71:
                    09:ff:a8:e8:ce:5b:fd:ca:4b:b6:39:c4:26:ac:49:
                    c6:fc:c4:95:44:73:ae:be:51:03:b4:99:e5:e6:b5:
                    01:d3:e8:6a:73:6a:d5:ed:49:38:d9:b0:03:aa:37:
                    fe:c9:26:66:63:30:80:08:22:dd:6c:ea:c8:fc:d6:
                    9b:71:0b:57:0f:bb:77:97:c9:af:e2:f7:00:a4:05:
                    4a:09:88:06:d3:4c:75:55:0c:70:c9:3e:53:d6:cf:
                    6d:93:ee:da:20:fc:d6:f6:56:f8:48:bd:06:df:f7:
                    d7:c5:f7:47:46:e5:bf:f2:75:2a:3a:27:16:d6:25:
                    ea:70:69:ec:a0:b7:85:cb:3e:eb:ac:d9:be:9e:4a:
                    3e:7b:52:98:ef:a0:04:72:6c:60:1c:e9:5a:d6:48:
                    99:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:30:94:4F:5D:78:B9:63:E7:37:FB:6D:20:E5:1B:A6:15:B7:BF:EF
            X509v3 Authority Key Identifier:
                keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/VTCUT114uWPnN_ttIOUbphW3v-8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         60:64:d7:83:2d:1e:d1:be:36:70:11:b6:77:7d:fa:c7:0e:1b:
         83:3e:b2:4c:23:c7:fb:56:bc:bd:4c:4c:31:5b:14:6b:78:2a:
         ed:6e:6d:c5:d6:15:35:51:d9:55:c2:8d:b9:e8:ed:26:d8:30:
         2f:b4:32:95:6d:d0:a4:a2:45:51:a8:7a:0b:95:f8:73:84:47:
         2d:df:62:88:e3:c1:61:b2:e9:33:c5:58:39:6d:b0:2f:c7:0c:
         dd:96:d4:45:67:08:e4:44:37:cc:c4:c5:3b:ba:43:d7:bc:2c:
         b4:8f:84:ba:2a:51:d3:35:44:19:34:89:64:a8:a1:5e:4d:97:
         03:e0:ed:fe:ca:ac:27:1f:15:91:ee:1e:77:c3:be:d9:a7:ec:
         4a:e5:93:db:d6:e5:35:0f:4e:93:bc:52:2f:de:ef:b1:b5:7f:
         b5:e0:04:8b:76:e9:1d:ad:b3:a5:04:02:90:54:39:78:a2:e4:
         db:c7:fc:17:de:54:11:24:96:e6:5d:5c:79:bb:7e:18:c0:c8:
         7e:60:e6:d7:39:95:30:b5:c3:62:56:bb:17:0e:3b:60:e8:68:
         53:a0:e5:fe:66:1c:95:aa:1b:72:d8:55:d1:7a:c1:22:86:c9:
         a3:fc:10:b6:78:f5:32:3b:c5:50:d6:b6:7b:6d:2b:55:2e:4f:
         39:c3:1b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----