Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/cHRm6oB3GP_qMzR6NOQ9rkSXcmI.roa
File:                     cHRm6oB3GP_qMzR6NOQ9rkSXcmI.roa (raw, json)
Hash identifier:          TRJJEXgnDnlKbNYCP649ZZXsB/Gy9+ikVCz9DwSaxwU=
Subject key identifier:   70:74:66:EA:80:77:18:FF:EA:33:34:7A:34:E4:3D:AE:44:97:72:62
Certificate issuer:       /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial:       018CC0DE3977DD065C0672E0CAB5B7D6335B
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/cHRm6oB3GP_qMzR6NOQ9rkSXcmI.roa
Signing time:             Sun 31 Dec 2023 17:13:58 +0000
ROA not before:           Sun 31 Dec 2023 17:13:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c0:de:39:77:dd:06:5c:06:72:e0:ca:b5:b7:d6:33:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
        Validity
            Not Before: Dec 31 17:13:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=707466ea807718ffea33347a34e43dae44977262
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d3:7d:27:04:68:27:e6:5d:ee:65:0a:cb:82:
                    dc:9d:5c:dd:f1:50:6e:13:9b:1d:a5:cb:ba:e0:76:
                    37:e1:4a:04:b8:59:81:75:dd:3e:72:d5:a4:fe:16:
                    0b:ec:50:7b:41:f7:3c:35:0c:59:d0:0a:bc:83:2b:
                    08:a6:16:d3:14:f6:e3:32:3c:69:c2:51:08:10:a0:
                    d5:30:7b:e2:db:13:2e:ef:7c:6d:7a:85:e8:34:fc:
                    cc:35:dc:78:a6:a0:f9:41:59:df:23:a0:1f:e2:52:
                    16:4d:f6:b2:7a:63:8e:91:63:93:0f:db:1f:d5:bf:
                    f5:40:64:15:c9:03:d9:c3:5e:1c:8a:60:8f:2b:33:
                    43:76:1e:02:18:34:c7:c7:47:ba:1d:e9:45:c9:a7:
                    06:b9:2c:da:f3:9e:5d:a5:a3:87:57:ed:63:2f:f4:
                    00:40:50:b7:be:9e:2e:02:16:c2:75:75:31:96:a5:
                    a6:f2:3f:bd:d7:cb:d8:ca:fa:ed:30:df:43:fc:c2:
                    d1:b2:28:0c:6b:77:ab:45:75:6b:ce:f4:62:33:37:
                    7a:60:86:ea:ec:52:b6:00:2a:2e:9d:d8:5e:bc:4a:
                    15:2b:7f:b7:1d:35:ab:0b:51:24:e8:bf:53:ef:f4:
                    62:45:47:40:24:86:4c:bc:06:7b:62:30:c1:92:f1:
                    ad:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:74:66:EA:80:77:18:FF:EA:33:34:7A:34:E4:3D:AE:44:97:72:62
            X509v3 Authority Key Identifier:
                keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/cHRm6oB3GP_qMzR6NOQ9rkSXcmI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         89:7e:e1:0f:4d:ad:e3:85:4d:b8:5c:34:cb:fa:7c:fe:ac:ab:
         7f:fe:ad:39:69:46:94:db:69:e2:dd:06:82:e4:f4:52:84:26:
         57:18:84:c4:c5:da:d8:d8:90:cd:4c:ed:53:93:68:b6:fc:df:
         db:8d:d7:55:d1:92:37:28:a9:9b:54:cc:fe:12:fc:b0:fb:38:
         84:4a:72:84:d2:1c:21:9d:0d:f6:ed:d3:8f:d0:9c:e1:d4:9f:
         53:0a:ed:43:91:c6:12:f9:d0:09:1b:1a:8f:7d:d7:96:0a:74:
         44:68:17:2d:a5:34:bc:5c:d9:53:00:ba:c8:dc:83:b9:74:72:
         2d:61:ed:5f:1a:2d:b4:f0:23:75:c2:65:df:e9:c1:d9:45:bd:
         d7:a8:dd:1b:92:2e:9b:de:e7:2e:f0:06:95:7f:d5:9b:f9:61:
         b7:21:a8:40:b0:18:27:88:0e:d5:37:0d:db:b0:25:48:6c:1e:
         58:f7:4d:c6:c2:f9:2f:04:be:7a:02:e2:9c:d1:92:0c:94:29:
         59:1b:b5:08:bb:51:3b:3b:75:29:47:b6:60:a6:e8:d5:79:fc:
         ec:f7:32:27:0f:5c:4b:cb:5d:e4:1f:25:e9:9c:5d:e2:79:c3:
         11:71:63:50:3a:2b:74:ba:8f:56:04:c0:56:00:60:b1:09:72:
         d6:d8:0b:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----