Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/caNR1K2FF0sXgO1SWibcDaTCgTc.roa
File:                     caNR1K2FF0sXgO1SWibcDaTCgTc.roa (raw, json)
Hash identifier:          ddp9JKk/oxVQtShCBOSNQrOqwDysQkkKqmwAEPOCwpE=
Subject key identifier:   71:A3:51:D4:AD:85:17:4B:17:80:ED:52:5A:26:DC:0D:A4:C2:81:37
Certificate issuer:       /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial:       018CAF7CC27AFE48EB495A2FDC26BEB01E21
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/caNR1K2FF0sXgO1SWibcDaTCgTc.roa
Signing time:             Thu 28 Dec 2023 08:13:58 +0000
ROA not before:           Thu 28 Dec 2023 08:13:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:af:7c:c2:7a:fe:48:eb:49:5a:2f:dc:26:be:b0:1e:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
        Validity
            Not Before: Dec 28 08:13:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=71a351d4ad85174b1780ed525a26dc0da4c28137
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:91:19:cc:46:1a:3f:8f:46:5b:83:2e:db:6f:
                    e4:43:e8:77:9d:e0:c6:1b:c7:31:df:7b:88:dc:00:
                    8d:5d:d8:79:5a:d7:85:dc:bd:a5:2f:cd:fa:10:b8:
                    a2:8e:d0:d8:46:70:c3:9c:69:7e:4c:7b:5d:62:28:
                    32:c1:23:a5:3a:c2:2b:43:82:4b:f0:0a:79:37:fb:
                    8d:44:9f:d9:1b:e9:96:5b:21:b4:d2:36:c2:b2:63:
                    fe:78:4b:ac:08:d3:24:79:af:cf:e2:3c:23:3b:43:
                    65:0e:fb:f8:95:ee:d9:ed:63:a9:17:a6:73:2e:0b:
                    d8:75:1d:2d:2d:71:4c:80:5e:07:62:90:c7:c3:d5:
                    7d:3f:f3:84:21:b8:e0:07:c4:5c:8d:f6:58:ab:df:
                    23:af:7a:95:f9:e4:20:7e:9f:e8:db:07:89:16:a6:
                    45:6e:b9:2c:23:ac:b1:e6:9c:9b:70:00:2f:0c:b7:
                    5e:ca:62:3e:ca:93:f2:0d:c9:3d:c9:da:c6:b6:bd:
                    7f:99:e5:55:34:0d:bf:b0:7b:c5:72:db:18:11:99:
                    17:75:dd:ac:d6:b6:c4:ae:ee:cd:8b:98:80:91:1c:
                    a5:66:e7:a7:23:25:b8:ad:71:4e:5f:a0:91:4b:80:
                    f7:3d:eb:f6:0a:53:3b:28:da:d9:c1:9e:18:ac:7a:
                    01:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:A3:51:D4:AD:85:17:4B:17:80:ED:52:5A:26:DC:0D:A4:C2:81:37
            X509v3 Authority Key Identifier:
                keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/caNR1K2FF0sXgO1SWibcDaTCgTc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         3c:17:ae:6a:8b:c7:10:cd:30:1a:e8:9b:0b:5e:b1:11:7c:07:
         04:64:45:97:e4:e4:f6:ef:99:f1:c5:bc:96:2f:4d:55:d7:78:
         10:fb:07:cc:9e:03:db:59:fa:19:ff:3e:47:7c:2c:ae:98:3d:
         96:5e:8b:c5:3a:23:61:7a:f6:a6:e4:40:de:3f:ce:dc:94:79:
         28:56:2b:29:15:80:06:5b:32:fb:13:f3:77:6a:83:25:91:23:
         4e:92:c0:c9:c0:46:95:f9:a1:a9:90:fe:8a:d2:e3:85:18:9d:
         97:46:42:cd:8b:56:27:3c:dd:14:76:c4:0d:cd:a5:77:22:2a:
         9f:14:6c:64:e7:c9:4f:32:14:e4:6a:d7:4d:e5:2b:dc:ec:3d:
         5a:63:9d:9b:97:9b:47:a7:f2:99:c4:67:4b:58:44:70:b7:66:
         1b:82:6e:67:7c:0f:66:1a:1f:64:9a:ba:89:3f:99:9f:b0:04:
         0e:97:92:b3:e8:a0:28:2f:5a:78:f5:38:32:18:b1:6e:e3:e3:
         9a:0e:a5:31:ff:cf:95:f8:88:76:cc:80:86:d9:62:ce:a4:d4:
         a3:2c:7f:43:f5:29:58:0a:aa:f4:d0:b6:6a:63:1f:97:69:cf:
         1a:f1:07:54:7d:c6:c1:2b:d9:54:1c:10:cc:7b:b3:b8:cf:62:
         51:69:27:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----