Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Wu7i_dTkm4P3ZuR05O1l0BAIQ1A.roa
File:                     Wu7i_dTkm4P3ZuR05O1l0BAIQ1A.roa (raw, json)
Hash identifier:          pI4EZXlELrYtxir7NDBah/vDhU84dr9FJvFItZ51k/g=
Subject key identifier:   5A:EE:E2:FD:D4:E4:9B:83:F7:66:E4:74:E4:ED:65:D0:10:08:43:50
Certificate issuer:       /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial:       018DFB71B03426CBBF60AF9E848E6AEDAE6C
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Wu7i_dTkm4P3ZuR05O1l0BAIQ1A.roa
Signing time:             Fri 01 Mar 2024 19:15:48 +0000
ROA not before:           Fri 01 Mar 2024 19:15:48 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
                          2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:fb:71:b0:34:26:cb:bf:60:af:9e:84:8e:6a:ed:ae:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
        Validity
            Not Before: Mar  1 19:15:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=5aeee2fdd4e49b83f766e474e4ed65d010084350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:29:e9:04:9d:c6:c8:86:96:db:34:d3:fd:79:
                    45:10:7a:09:c0:e3:0b:5a:81:f9:92:9b:13:36:5e:
                    16:6c:0a:28:19:f7:1d:49:9f:ba:57:0c:32:dc:35:
                    ce:98:3b:b1:35:d3:47:45:9a:18:ba:69:a4:af:c6:
                    aa:93:45:4d:56:36:08:41:b8:9f:de:58:d0:1f:88:
                    00:d9:dc:2d:97:89:7d:16:c2:3c:08:5f:8f:62:e2:
                    87:a1:f2:7c:9d:6e:2b:3b:da:6d:94:cf:74:a2:27:
                    c3:9b:e2:ce:4c:e5:c4:1d:16:6e:ac:0e:c0:a8:87:
                    55:e2:c9:ac:bb:94:71:a7:bd:79:5f:e4:7d:3c:3c:
                    fb:8f:cb:0b:89:c3:d0:a3:35:25:ce:16:27:1d:63:
                    88:b1:92:8e:37:7b:28:ed:a5:2a:f3:30:48:5e:24:
                    00:cc:b2:71:78:bd:0a:4a:37:67:9d:06:7b:59:7e:
                    29:9a:49:23:42:62:bb:42:2c:9f:66:18:bc:30:26:
                    ce:a3:bf:93:64:59:8c:ca:30:72:6d:fe:c7:94:3c:
                    7b:1a:a8:c1:06:5a:1e:b9:8a:36:50:07:6c:e4:d0:
                    06:81:d4:79:3c:e2:9f:40:df:7e:7a:d1:bb:96:d8:
                    90:3e:bf:b6:7a:d6:87:c6:7c:cd:8a:10:2a:48:b8:
                    ae:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:EE:E2:FD:D4:E4:9B:83:F7:66:E4:74:E4:ED:65:D0:10:08:43:50
            X509v3 Authority Key Identifier:
                keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Wu7i_dTkm4P3ZuR05O1l0BAIQ1A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         a3:47:2f:b8:0a:4e:ef:2c:f7:43:f3:f8:f7:69:ef:a9:f9:1d:
         cb:0c:77:7d:b5:b0:1a:f8:13:67:d5:e7:20:de:e3:9f:cb:33:
         ca:e4:61:4c:63:d4:63:71:fd:28:60:58:64:7c:7d:12:7e:42:
         81:48:ad:60:d5:c8:f7:46:59:43:fd:91:72:4f:72:55:58:e2:
         44:c7:5d:2d:2a:a7:38:8b:b1:4c:29:02:bc:4b:fa:a1:76:ff:
         32:00:9f:19:ba:ef:3c:38:7e:5f:38:fa:64:f4:e7:3f:69:ec:
         d4:f1:03:c0:db:8b:d1:73:25:80:57:8f:e7:7e:55:49:8c:a8:
         34:70:90:28:9d:1c:d9:09:94:c1:a3:60:37:19:67:50:9e:13:
         01:fb:44:38:ee:0b:5f:ce:7f:b3:ca:70:f2:11:b7:e6:6b:22:
         36:11:2e:2a:ad:5b:ea:33:be:6e:1b:ec:d0:29:f8:02:22:c2:
         ca:eb:29:1c:27:ed:3e:ba:18:e0:5a:0c:60:9e:ca:ef:39:73:
         5c:d6:cd:98:62:24:20:40:70:e3:17:f9:1e:fe:4d:d8:ae:31:
         9e:51:54:3b:a4:10:93:4d:ed:86:bb:42:dd:91:5c:9d:f8:38:
         55:93:5c:74:ff:87:00:f5:1d:2c:4f:f8:fc:15:3b:40:e3:26:
         82:fe:1d:3c
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY37cbA0Jsu/YK+ehI5q7a5sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMzAxMTkxNTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YWVlZTJmZGQ0ZTQ5YjgzZjc2NmU0NzRlNGVkNjVkMDEwMDg0MzUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3inpBJ3GyIaW2zTT/XlFEHoJwOML
WoH5kpsTNl4WbAooGfcdSZ+6Vwwy3DXOmDuxNdNHRZoYummkr8aqk0VNVjYIQbif
3ljQH4gA2dwtl4l9FsI8CF+PYuKHofJ8nW4rO9ptlM90oifDm+LOTOXEHRZurA7A
qIdV4smsu5Rxp715X+R9PDz7j8sLicPQozUlzhYnHWOIsZKON3so7aUq8zBIXiQA
zLJxeL0KSjdnnQZ7WX4pmkkjQmK7QiyfZhi8MCbOo7+TZFmMyjBybf7HlDx7GqjB
BloeuYo2UAds5NAGgdR5POKfQN9+etG7ltiQPr+2etaHxnzNihAqSLiuewIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFru4v3U5JuD92bkdOTtZdAQCENQMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvV3U3aV9kVGttNFAzWnVSMDVPMWwwQkFJUTFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKNHL7gKTu8s90Pz+Pdp
76n5HcsMd321sBr4E2fV5yDe45/LM8rkYUxj1GNx/ShgWGR8fRJ+QoFIrWDVyPdG
WUP9kXJPclVY4kTHXS0qpziLsUwpArxL+qF2/zIAnxm67zw4fl84+mT05z9p7NTx
A8Dbi9FzJYBXj+d+VUmMqDRwkCidHNkJlMGjYDcZZ1CeEwH7RDjuC1/Of7PKcPIR
t+ZrIjYRLiqtW+ozvm4b7NAp+AIiwsrrKRwn7T66GOBaDGCeyu85c1zWzZhiJCBA
cOMX+R7+TdiuMZ5RVDukEJNN7Ya7Qt2RXJ34OFWTXHT/hwD1HSxP+PwVO0DjJoL+
HTw=
-----END CERTIFICATE-----