Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/VWV2WzCxXu-r8kioNxuMfrIoRUc.roa
File:                     VWV2WzCxXu-r8kioNxuMfrIoRUc.roa (raw, json)
Hash identifier:          WT1ta95FBVsnVGIBfonVbQjbuguxoWEGoisyj26U+OU=
Subject key identifier:   55:65:76:5B:30:B1:5E:EF:AB:F2:48:A8:37:1B:8C:7E:B2:28:45:47
Certificate issuer:       /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial:       018E705DE42724EC8A64256C23578726FB49
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/VWV2WzCxXu-r8kioNxuMfrIoRUc.roa
Signing time:             Sun 24 Mar 2024 12:09:45 +0000
ROA not before:           Sun 24 Mar 2024 12:09:45 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
                          2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:70:5d:e4:27:24:ec:8a:64:25:6c:23:57:87:26:fb:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
        Validity
            Not Before: Mar 24 12:09:45 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=5565765b30b15eefabf248a8371b8c7eb2284547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:9f:7e:08:ec:60:5e:af:21:41:e0:42:24:ed:
                    cd:0a:6f:4c:e6:82:70:e5:de:5b:f9:74:da:3d:fb:
                    47:9a:b1:14:6b:b0:bb:00:e9:69:e7:eb:e7:06:fc:
                    be:cb:44:40:fe:6c:59:e3:72:fb:df:40:4e:e7:68:
                    bf:33:7a:5f:50:88:24:78:5e:4f:59:49:ce:b4:8f:
                    5f:ec:53:2b:ee:ea:80:64:51:91:06:aa:56:09:e3:
                    7c:9f:8c:1a:b3:43:ee:75:21:98:9c:d7:7e:55:17:
                    6a:22:68:c2:fb:83:ed:cf:96:27:2c:ba:39:a2:6d:
                    47:07:33:45:3a:2a:6d:a9:d0:04:6d:0a:62:65:45:
                    2a:d0:41:fc:cf:74:1d:71:0a:ce:35:0b:63:31:31:
                    97:9b:d6:1e:cf:bc:dd:26:50:e6:0e:0e:9f:46:9b:
                    9a:13:0a:43:95:d0:29:77:8f:b0:bf:50:c4:47:07:
                    b4:ea:e1:3b:aa:f8:73:3d:0e:dd:12:e9:46:80:46:
                    c0:8c:ee:0c:65:f8:5f:d9:38:2a:53:3f:10:83:c8:
                    be:21:aa:08:3f:4b:e8:dd:f5:62:fc:a2:96:c7:f6:
                    5e:4d:a7:a0:85:18:47:03:e6:7e:74:1b:a0:d4:94:
                    4e:17:2e:1b:4f:75:8a:5f:92:d2:48:e1:71:e2:cf:
                    eb:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:65:76:5B:30:B1:5E:EF:AB:F2:48:A8:37:1B:8C:7E:B2:28:45:47
            X509v3 Authority Key Identifier:
                keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/VWV2WzCxXu-r8kioNxuMfrIoRUc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         73:99:70:58:60:67:00:9a:a7:30:e7:73:9c:76:53:4c:ad:f3:
         94:c4:6f:44:67:6c:ae:39:04:58:d9:2f:de:17:68:c3:5c:d9:
         97:35:60:92:e2:c0:bf:b6:87:2c:d8:ef:5d:a0:73:ad:1e:cf:
         e5:11:d2:c1:68:5f:d8:92:28:46:36:85:1b:27:e9:09:d9:51:
         62:eb:4b:04:3b:3c:a1:95:c4:03:19:36:69:1c:bd:f5:a0:f3:
         b0:ee:57:24:a3:ce:65:3a:3c:70:1c:8e:12:5a:13:e1:1b:29:
         fc:76:4a:89:7e:d6:b0:72:27:bc:aa:86:36:81:3d:86:dc:db:
         48:8a:31:14:6c:5d:fe:17:eb:e3:a7:c0:20:d2:a6:92:29:45:
         8f:13:c5:6c:d3:f7:29:88:88:1e:33:89:09:62:dc:5a:04:46:
         d8:3b:f7:0b:3c:fb:e8:ef:a2:f7:7c:b6:16:ce:69:8e:2e:b9:
         9c:e5:30:5f:84:c3:61:3a:74:59:99:68:35:b2:36:09:cf:99:
         f2:d3:bd:64:e7:48:d9:7e:48:a0:7e:a7:a9:ba:ba:b7:47:bc:
         1c:e0:df:1b:3b:89:bc:b5:c1:7a:b2:d3:ba:b0:7b:76:08:db:
         53:5b:01:c0:f8:fd:2b:fc:9a:26:01:62:fc:01:9f:4c:ab:21:
         85:02:fb:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----