Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/cfZNuQhKe2k6lBkxoAICU4K2BG4.roa
File:                     cfZNuQhKe2k6lBkxoAICU4K2BG4.roa (raw, json)
Hash identifier:          +vHCT9WkINFJuwHmzetJ7uc3Gaq/XWDhwf7P7YiSpwY=
Subject key identifier:   71:F6:4D:B9:08:4A:7B:69:3A:94:19:31:A0:02:02:53:82:B6:04:6E
Certificate issuer:       /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial:       018D14FBF8AB63A1D5928C314AC681109A1A
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/cfZNuQhKe2k6lBkxoAICU4K2BG4.roa
Signing time:             Wed 17 Jan 2024 01:14:33 +0000
ROA not before:           Wed 17 Jan 2024 01:14:33 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:14:fb:f8:ab:63:a1:d5:92:8c:31:4a:c6:81:10:9a:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
        Validity
            Not Before: Jan 17 01:14:33 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=71f64db9084a7b693a941931a002025382b6046e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:17:0b:45:ef:e3:ab:b3:bf:23:48:1e:f3:fd:
                    1e:a6:88:a7:f5:0a:2b:db:40:6f:11:a8:31:60:ee:
                    f7:ea:33:75:30:08:7a:01:e3:0b:54:db:d5:6c:02:
                    e5:97:22:70:4a:be:09:3e:a9:3d:dd:70:5c:48:34:
                    93:07:c9:56:8d:81:50:4c:63:40:2c:e5:2a:fb:0d:
                    3b:35:ad:72:2b:2f:a2:cb:b2:7b:1b:03:6e:98:74:
                    6e:3c:f9:d8:4a:ad:db:51:41:c4:b7:0f:8b:1d:7c:
                    92:eb:e7:93:99:a7:5a:76:74:7e:6c:8f:7d:33:1f:
                    6a:6d:bb:19:2d:98:53:7e:3f:19:83:4b:ed:bc:7a:
                    55:57:e9:cc:e3:64:80:8b:47:54:0e:be:3f:8a:4c:
                    7d:00:a1:03:60:de:60:0b:7a:ea:84:99:9d:a9:19:
                    1a:42:b0:54:57:05:51:fd:9f:cb:6c:9d:c6:fe:b5:
                    7f:05:ab:27:c2:e9:6e:34:1f:30:4d:fa:23:8d:cb:
                    60:76:d1:77:9a:29:4b:9d:5c:e3:36:fb:42:3d:43:
                    13:08:0f:eb:40:8c:06:f9:4d:55:9d:c4:db:ae:a2:
                    b6:14:85:c3:ae:ba:2f:61:78:ae:27:8c:04:69:92:
                    75:8d:78:87:f3:66:5d:0a:a3:d8:01:4f:83:55:cf:
                    fd:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:F6:4D:B9:08:4A:7B:69:3A:94:19:31:A0:02:02:53:82:B6:04:6E
            X509v3 Authority Key Identifier:
                keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/cfZNuQhKe2k6lBkxoAICU4K2BG4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         49:f3:f5:bd:06:01:ee:3a:ca:c9:8c:6f:2a:f2:ea:62:5f:49:
         1e:58:51:47:15:bd:e1:17:7c:3c:d7:39:9e:64:35:14:d2:f6:
         b3:42:4e:e5:13:f3:cf:73:5c:94:ac:ca:7e:58:cc:9d:95:03:
         a6:1f:bf:53:f0:2c:64:a3:1c:91:d9:66:52:71:b6:88:6c:d9:
         58:4f:90:46:e7:9d:db:09:cb:1a:25:05:e0:ff:68:92:8e:e3:
         52:5d:ff:5c:a1:86:68:b0:f6:68:64:5e:b4:cd:ca:41:37:ca:
         14:2b:c3:29:28:b1:49:31:40:03:65:90:5a:3c:0d:4d:17:51:
         5b:83:f7:f5:03:65:b3:2a:6c:04:92:ff:f1:ba:40:42:c9:8a:
         93:3b:49:82:19:c7:b8:71:bc:fc:cb:d8:2a:df:2f:1d:a0:23:
         d2:a2:0b:11:7b:56:a4:6b:2b:bc:0e:9c:66:e6:bc:da:29:66:
         e6:b8:35:9e:fb:d8:f9:cc:aa:fa:61:1f:21:b3:26:22:5b:68:
         00:5a:f4:79:00:da:21:0e:28:b0:8d:8d:08:19:90:4b:a5:77:
         51:75:63:33:c0:7b:ea:eb:ab:d5:4a:20:ba:0d:8f:fe:c4:04:
         92:68:4b:c6:f7:99:aa:7f:37:0a:67:7e:2e:11:4b:91:3a:70:
         8e:ac:00:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----