Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/WZorYbxNR8CyOanuGsx-6C7pd48.roa
File:                     WZorYbxNR8CyOanuGsx-6C7pd48.roa (raw, json)
Hash identifier:          0NM/mYAL4MohTGaYAGEPSnTyq2Q/e5q8j6mqACHOPcI=
Subject key identifier:   59:9A:2B:61:BC:4D:47:C0:B2:39:A9:EE:1A:CC:7E:E8:2E:E9:77:8F
Certificate issuer:       /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial:       018E01A9CA1DB1A4EA15210E7E8F5F2D9195
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/WZorYbxNR8CyOanuGsx-6C7pd48.roa
Signing time:             Sun 03 Mar 2024 00:14:48 +0000
ROA not before:           Sun 03 Mar 2024 00:14:48 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
                          2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:01:a9:ca:1d:b1:a4:ea:15:21:0e:7e:8f:5f:2d:91:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
        Validity
            Not Before: Mar  3 00:14:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=599a2b61bc4d47c0b239a9ee1acc7ee82ee9778f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:10:ea:57:b3:ae:ee:74:5b:f0:4c:42:98:da:
                    85:13:b0:8a:50:31:02:c0:68:74:cd:c5:6d:3b:fb:
                    99:7e:e6:0f:e2:7b:46:9c:e9:fe:3b:73:39:49:c9:
                    a5:ff:5a:f2:44:3c:78:ce:cc:a7:b1:92:bb:8d:00:
                    66:81:45:43:c2:56:40:9b:37:ce:38:83:93:a4:70:
                    5a:dc:7d:5a:00:b3:e7:9f:82:f7:a6:10:96:88:ef:
                    72:f0:87:be:24:5b:92:0f:6b:7b:30:f6:3d:7f:6f:
                    23:6b:76:87:a9:ef:ce:d2:0a:1e:55:b7:01:b8:68:
                    9c:3d:02:fa:a5:c2:3b:9d:c7:91:8c:54:a5:3d:b2:
                    74:c9:77:94:5c:a3:d8:dc:a9:19:8c:c9:e1:55:d1:
                    96:6e:34:07:f2:2e:63:7c:ff:70:37:b6:27:8d:7d:
                    1d:15:e8:5d:35:44:10:f6:47:12:03:a8:25:c0:15:
                    45:f2:56:e0:64:bc:0b:32:7e:07:ec:50:a8:74:b3:
                    31:69:89:c5:52:3f:2d:f1:83:20:f2:a9:94:78:1b:
                    bc:2b:e3:41:0a:eb:27:6a:c0:26:f0:3f:ff:53:e2:
                    35:45:dd:09:91:2e:9e:3e:f3:5e:64:35:ae:1b:b0:
                    c9:11:64:6c:2c:60:7e:fc:1a:2c:13:4e:0d:af:75:
                    8f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:9A:2B:61:BC:4D:47:C0:B2:39:A9:EE:1A:CC:7E:E8:2E:E9:77:8F
            X509v3 Authority Key Identifier:
                keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/WZorYbxNR8CyOanuGsx-6C7pd48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         0d:55:b3:b0:29:76:f4:b2:17:2a:a8:b0:7f:18:34:ff:dd:3b:
         c6:df:c9:be:61:89:6e:54:7e:c5:c4:85:bd:dc:11:cd:b7:4c:
         e3:4f:42:48:ff:16:2e:70:96:21:c3:41:af:67:9e:2f:9f:4d:
         b9:5c:18:e4:9e:93:6f:d6:cf:9e:94:44:64:5c:af:4a:33:70:
         10:e6:f9:0b:fe:24:0d:ec:ae:e5:87:4b:cd:d4:c6:c8:09:8d:
         c1:31:5e:4a:43:c2:61:b6:c9:83:87:ca:a7:93:5d:44:4e:30:
         84:0f:bf:5c:1e:63:db:26:4c:89:39:e1:2f:dc:c4:ce:72:f1:
         f6:46:f0:f2:0c:e0:22:bd:a3:99:9d:15:af:91:53:dd:49:1f:
         05:90:ae:e7:c3:17:4f:bf:ce:a8:07:e9:93:42:12:1e:4e:60:
         5a:b5:dc:75:ec:67:b2:93:90:07:fe:b9:cf:9c:b1:ae:32:5e:
         6c:a4:7b:71:53:6f:d9:4a:3c:af:35:49:2e:fa:c8:4d:f8:18:
         62:6f:f1:21:52:c4:d0:30:a6:a5:c3:f7:79:d9:b0:d0:ac:ec:
         3d:7b:d6:97:66:b5:66:9a:3d:67:3e:39:87:55:17:44:32:71:
         29:bb:fd:07:b3:98:1e:8a:81:0c:de:d6:66:a2:36:10:0f:5e:
         74:c0:b2:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----