Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/agPTeF0L7XYXbDW6YjUl3HjthJU.roa
File:                     agPTeF0L7XYXbDW6YjUl3HjthJU.roa (raw, json)
Hash identifier:          a4pzoITcp8WWqzkIIDeirSJRE5/DzlgBonnrd2pPT68=
Subject key identifier:   6A:03:D3:78:5D:0B:ED:76:17:6C:35:BA:62:35:25:DC:78:ED:84:95
Certificate issuer:       /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial:       018D9055254BF4D6D96724DCD6E3FF79C328
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/agPTeF0L7XYXbDW6YjUl3HjthJU.roa
Signing time:             Sat 10 Feb 2024 00:05:15 +0000
ROA not before:           Sat 10 Feb 2024 00:05:15 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
                          2001:67c:64:ffff:0:18d:9054:484f/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:90:55:25:4b:f4:d6:d9:67:24:dc:d6:e3:ff:79:c3:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
        Validity
            Not Before: Feb 10 00:05:15 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6a03d3785d0bed76176c35ba623525dc78ed8495
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:19:88:24:fc:cb:4d:03:34:bf:b4:67:f2:96:
                    97:31:91:94:ee:0d:26:56:c8:77:e3:d8:f8:3c:f9:
                    92:aa:a0:e4:d0:84:bd:e9:cb:05:b0:00:55:5e:68:
                    49:fb:45:69:a9:4d:df:2f:80:23:c3:91:3f:04:80:
                    c5:99:db:1e:8f:f6:71:bd:30:a2:86:29:9a:6b:4c:
                    de:8a:0c:f5:5d:41:24:ef:a4:38:7c:e1:19:68:e8:
                    b8:d2:fb:f7:b7:bb:db:4e:11:57:b0:33:71:3c:42:
                    96:31:7c:e4:b3:0c:dc:cd:c0:0b:75:a1:2b:1c:f2:
                    b8:03:2e:eb:7a:7a:5e:d9:e2:9f:f5:b1:df:37:9a:
                    9c:70:08:ac:1d:53:76:13:86:da:fd:dc:27:46:78:
                    6b:fa:b2:74:78:b3:7e:f1:62:79:6d:52:69:07:c5:
                    67:f7:2d:6f:db:25:7b:bd:6f:72:78:8c:52:f1:b1:
                    69:58:6e:88:cb:03:6c:36:4c:00:11:ac:96:01:74:
                    52:ba:44:9d:70:af:7f:c1:c9:d4:a6:a9:ea:19:de:
                    7a:6d:4a:5d:72:3d:e2:71:27:82:6c:6c:5b:c3:45:
                    1e:67:9f:e2:f7:5b:00:44:48:b9:c5:e8:c7:fb:26:
                    70:0b:a4:cb:7a:a0:1c:db:b7:7b:e9:ed:14:70:32:
                    79:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:03:D3:78:5D:0B:ED:76:17:6C:35:BA:62:35:25:DC:78:ED:84:95
            X509v3 Authority Key Identifier:
                keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/agPTeF0L7XYXbDW6YjUl3HjthJU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         1b:de:8d:07:b5:40:8f:1c:9d:49:ab:41:df:74:9b:8e:49:cf:
         07:a6:ec:68:4e:25:4a:f8:f1:23:2b:79:a7:9e:34:6e:06:e1:
         5c:9a:37:ce:1c:f3:b0:4c:ee:3b:ea:00:2e:fa:70:18:bd:bf:
         24:b3:25:2e:98:e8:57:62:04:56:f9:1d:b9:9f:fc:98:21:ef:
         c4:7e:07:db:b2:51:a1:03:4e:43:be:fe:1f:f4:8f:d7:99:8f:
         f6:d5:0f:7d:d1:9c:2d:6b:36:db:e4:73:b0:7a:7b:e2:2a:f3:
         79:7b:67:48:ea:9e:42:a4:21:b5:6a:ca:08:7a:87:1b:f2:f3:
         ef:e6:b8:06:6d:48:0b:19:c6:27:c5:28:b4:10:5b:69:47:75:
         8e:ff:28:a5:e0:18:1c:b6:68:27:04:aa:5c:3c:97:40:ad:9c:
         01:8e:96:69:9e:bd:26:bc:5a:2a:bc:47:11:62:8b:42:43:ab:
         44:e7:cf:ba:4d:c8:96:f8:bd:32:39:31:19:41:ef:e6:5d:4f:
         03:32:11:d3:3d:5f:df:4c:9a:86:c0:37:b0:54:dc:54:74:a1:
         cf:e8:06:f9:39:e2:4d:73:e3:51:81:6e:fb:86:40:f9:4f:01:
         3f:62:90:70:dd:46:82:bb:d6:c1:3b:fa:fc:da:97:d2:1d:04:
         b6:46:b5:3b
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY2QVSVL9NbZZyTc1uP/ecMoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMjEwMDAwNTE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YTAzZDM3ODVkMGJlZDc2MTc2YzM1YmE2MjM1MjVkYzc4ZWQ4NDk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxmIJPzLTQM0v7Rn8paXMZGU7g0m
Vsh349j4PPmSqqDk0IS96csFsABVXmhJ+0VpqU3fL4Ajw5E/BIDFmdsej/ZxvTCi
himaa0zeigz1XUEk76Q4fOEZaOi40vv3t7vbThFXsDNxPEKWMXzkswzczcALdaEr
HPK4Ay7renpe2eKf9bHfN5qccAisHVN2E4ba/dwnRnhr+rJ0eLN+8WJ5bVJpB8Vn
9y1v2yV7vW9yeIxS8bFpWG6IywNsNkwAEayWAXRSukSdcK9/wcnUpqnqGd56bUpd
cj3icSeCbGxbw0UeZ5/i91sAREi5xejH+yZwC6TLeqAc27d76e0UcDJ57wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFGoD03hdC+12F2w1umI1Jdx47YSVMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvYWdQVGVGMEw3WFlYYkRXNllqVWwzSGp0aEpVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABvejQe1QI8cnUmrQd90
m45Jzwem7GhOJUr48SMreaeeNG4G4VyaN84c87BM7jvqAC76cBi9vySzJS6Y6Fdi
BFb5Hbmf/Jgh78R+B9uyUaEDTkO+/h/0j9eZj/bVD33RnC1rNtvkc7B6e+Iq83l7
Z0jqnkKkIbVqygh6hxvy8+/muAZtSAsZxifFKLQQW2lHdY7/KKXgGBy2aCcEqlw8
l0CtnAGOlmmevSa8Wiq8RxFii0JDq0Tnz7pNyJb4vTI5MRlB7+ZdTwMyEdM9X99M
mobAN7BU3FR0oc/oBvk54k1z41GBbvuGQPlPAT9ikHDdRoK71sE7+vzal9IdBLZG
tTs=
-----END CERTIFICATE-----