Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/_gv-LEK7VoDO4sVluAT-odl8hiU.roa
File:                     _gv-LEK7VoDO4sVluAT-odl8hiU.roa (raw, json)
Hash identifier:          H30zw0+YtbYM1f/WI34AF3UpsV5trLN7yvHxXDTBPJk=
Subject key identifier:   FE:0B:FE:2C:42:BB:56:80:CE:E2:C5:65:B8:04:FE:A1:D9:7C:86:25
Certificate issuer:       /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial:       018C8FEFFA79E9C786815234F77E291E98D1
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/_gv-LEK7VoDO4sVluAT-odl8hiU.roa
Signing time:             Fri 22 Dec 2023 05:11:58 +0000
ROA not before:           Fri 22 Dec 2023 05:11:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:8f:ef:fa:79:e9:c7:86:81:52:34:f7:7e:29:1e:98:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
        Validity
            Not Before: Dec 22 05:11:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fe0bfe2c42bb5680cee2c565b804fea1d97c8625
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:8d:c2:5a:75:be:d7:06:bb:24:3a:ff:5f:1d:
                    6e:61:cd:ef:b6:9b:cb:1d:73:75:d7:c0:a5:e0:7b:
                    5a:38:b6:66:7c:8f:10:05:c4:9e:93:6a:b5:9f:3a:
                    27:eb:eb:6b:f4:bd:94:5b:92:09:fa:42:4d:89:53:
                    d6:96:e8:df:da:f9:58:27:0e:ce:33:bb:dd:f5:0f:
                    0e:2d:89:32:f3:6e:b3:a2:74:c0:5c:dc:b0:cc:bb:
                    29:81:8d:dd:cf:d1:b9:bd:b0:a3:56:17:e3:82:a5:
                    c4:07:23:47:5d:73:83:4f:fe:90:d1:4d:fb:7c:96:
                    ba:60:06:53:87:dc:ea:b2:c9:3e:30:44:73:37:bf:
                    55:23:66:2a:bf:e6:a1:0a:fc:e8:83:98:c6:e2:2b:
                    2e:b9:ea:d4:9c:05:ec:d6:da:c7:3a:d7:82:3c:b5:
                    93:dd:34:ba:86:67:93:ac:87:c0:c4:bc:06:5c:6b:
                    dd:76:de:4c:59:e4:c1:7e:b4:56:5b:07:4a:44:6e:
                    94:e1:e5:d8:65:6d:fe:1e:1d:1b:14:17:54:e7:a7:
                    5a:8c:3f:10:87:06:01:e6:dd:d8:7b:79:0b:7a:74:
                    31:0b:da:ad:47:a2:36:ae:e0:dd:84:7b:21:82:65:
                    40:e3:a9:63:36:a4:d6:85:94:47:a5:b2:68:02:71:
                    af:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:0B:FE:2C:42:BB:56:80:CE:E2:C5:65:B8:04:FE:A1:D9:7C:86:25
            X509v3 Authority Key Identifier:
                keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/_gv-LEK7VoDO4sVluAT-odl8hiU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         36:1d:ae:59:02:0d:6e:34:9b:6c:a8:6b:c6:b8:85:0c:45:45:
         a2:b0:61:f8:2d:50:d2:23:f8:c7:eb:dd:20:9c:76:43:c7:a9:
         55:76:31:b1:8e:bc:f6:b4:b9:45:60:6c:fe:39:25:d1:5f:11:
         4a:de:b3:be:6d:b3:d5:9a:98:cc:ce:41:91:0a:38:52:89:5f:
         6c:07:04:0d:85:99:66:d2:eb:ca:e0:79:09:11:f2:cd:35:ef:
         63:ca:fa:62:89:48:f6:62:a6:f3:71:94:66:6d:9d:ec:51:2b:
         d4:04:d9:d8:47:f4:07:e9:89:f5:b0:12:c2:6b:55:2b:2f:cd:
         ea:f0:c7:21:c6:0c:80:64:34:99:8c:8c:2f:ae:cb:aa:06:96:
         3c:bc:b5:2d:42:77:4b:05:ec:2d:3a:84:a4:f1:be:80:74:6a:
         71:c4:6f:18:a4:fd:a6:e6:28:26:31:98:45:20:c4:94:b2:c7:
         0b:54:39:17:b9:b2:e1:9b:31:fa:d6:c4:6c:ba:bc:d3:74:66:
         30:f2:80:55:32:3f:8c:8f:64:4e:7b:5f:58:4e:7f:ec:44:f5:
         aa:34:30:02:6b:a1:27:50:bb:9a:0e:1c:ab:74:19:54:bc:78:
         8a:78:97:3e:37:f0:3a:a7:94:1f:4d:95:94:3d:15:57:b6:00:
         a0:38:a0:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----