Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/VVieIN-B_poakKw1U93GLIWuETE.roa
File:                     VVieIN-B_poakKw1U93GLIWuETE.roa (raw, json)
Hash identifier:          iYglr1mm/+fgnAHBzBXetH0z8nOx4CmWaSL0ZAoRm+U=
Subject key identifier:   55:58:9E:20:DF:81:FE:9A:1A:90:AC:35:53:DD:C6:2C:85:AE:11:31
Certificate issuer:       /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial:       018C875E5F9AA3A6F6FB1E85B8A6D2F2A22C
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/VVieIN-B_poakKw1U93GLIWuETE.roa
Signing time:             Wed 20 Dec 2023 13:15:58 +0000
ROA not before:           Wed 20 Dec 2023 13:15:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:87:5e:5f:9a:a3:a6:f6:fb:1e:85:b8:a6:d2:f2:a2:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
        Validity
            Not Before: Dec 20 13:15:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=55589e20df81fe9a1a90ac3553ddc62c85ae1131
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:f1:11:77:83:ef:e3:a0:81:76:50:ec:a6:a6:
                    c1:b5:cf:43:cb:2b:9b:2a:35:03:63:12:1b:77:e9:
                    27:e9:3c:5e:cf:85:8b:97:b7:1b:15:31:29:d1:0c:
                    47:34:cf:0f:7e:2a:71:e7:52:b1:7e:78:7a:6a:7c:
                    49:63:19:c3:6c:4e:6f:b1:16:9a:49:bf:a4:22:6d:
                    8c:72:fb:c9:16:67:c6:58:46:91:9d:a2:51:90:13:
                    a9:91:60:16:5f:4b:20:83:b2:11:58:52:27:2c:18:
                    53:6c:ec:28:8b:47:25:8d:bb:df:2b:ee:61:4d:2e:
                    5d:83:53:87:c9:3e:8f:e6:e6:c9:3b:a1:df:bc:a9:
                    c4:7d:45:52:a7:33:30:cb:5f:9a:bf:95:6c:52:78:
                    ce:46:89:5d:a7:12:68:37:7d:70:1b:69:d9:79:70:
                    9a:4a:91:04:40:7c:6a:47:c5:6e:8c:28:95:73:2a:
                    d3:51:70:11:56:b8:b0:9c:54:12:2c:a1:df:1e:f6:
                    c9:ab:ed:54:a7:e0:58:0f:12:c7:7f:c8:fe:1d:f3:
                    19:ac:43:48:67:02:a8:a8:2c:28:50:54:be:21:e7:
                    ef:8f:70:61:9e:b2:bf:bf:b0:dd:c7:67:d7:e3:ae:
                    2d:81:b1:f3:17:81:bb:3d:eb:b7:4d:f7:0a:56:28:
                    4a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:58:9E:20:DF:81:FE:9A:1A:90:AC:35:53:DD:C6:2C:85:AE:11:31
            X509v3 Authority Key Identifier:
                keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/VVieIN-B_poakKw1U93GLIWuETE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         6d:84:91:03:20:21:6f:c4:8d:b9:a5:67:58:a0:74:7b:93:d6:
         42:29:c1:a9:4a:b7:fc:e8:27:7f:62:b5:46:11:5e:1a:0d:60:
         d9:e9:e6:09:b8:4c:f3:57:cf:3e:4d:7c:02:8f:7f:7e:23:d6:
         43:a0:f6:60:f2:49:ba:44:aa:b3:85:b2:f9:9e:5d:32:0a:b0:
         53:93:e5:ee:58:3f:6c:3b:cd:88:18:73:77:b7:7f:0d:57:a2:
         44:46:42:ca:ab:29:0e:e6:fa:b1:60:78:8a:c4:6a:db:9f:12:
         36:8f:2d:d1:b7:9b:db:f4:e7:38:8c:63:30:8a:fb:22:cc:da:
         cd:ec:95:51:5f:45:cb:7e:a6:e8:49:80:a0:59:15:93:30:0c:
         13:ee:22:cf:6a:88:d0:14:9c:b9:f9:92:12:c3:08:d5:97:01:
         2f:95:ff:98:f1:0f:66:c9:2f:1f:63:e3:3f:9d:7e:8f:7f:16:
         23:ff:a3:a8:b1:ae:bc:98:7a:de:f8:5d:1d:39:34:0a:b6:e0:
         78:79:3e:be:43:12:15:df:99:5e:6b:bd:37:10:d6:19:36:f1:
         d8:db:c0:a6:b5:7d:f8:9a:3b:e0:57:9e:4e:ff:5a:a9:56:91:
         d0:df:56:ca:a3:d6:6e:82:ae:a1:2b:b7:79:fb:07:6a:47:4e:
         ab:df:ff:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----