Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/co-Pd3BUNThfgtToeiH6hO6yolg.roa
File:                     co-Pd3BUNThfgtToeiH6hO6yolg.roa (raw, json)
Hash identifier:          LOD+Ixwhlmza7fzMVdf0h44vP4Jl/qXSkpl3TCErxvU=
Subject key identifier:   72:8F:8F:77:70:54:35:38:5F:82:D4:E8:7A:21:FA:84:EE:B2:A2:58
Certificate issuer:       /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial:       018DA0AD3348897BB76E4E53189033F33BB5
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/co-Pd3BUNThfgtToeiH6hO6yolg.roa
Signing time:             Tue 13 Feb 2024 04:15:21 +0000
ROA not before:           Tue 13 Feb 2024 04:15:21 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:a0:ad:33:48:89:7b:b7:6e:4e:53:18:90:33:f3:3b:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
        Validity
            Not Before: Feb 13 04:15:21 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=728f8f77705435385f82d4e87a21fa84eeb2a258
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b9:54:16:77:5b:79:3e:05:df:7c:72:79:7d:
                    ff:da:d5:37:22:06:7b:5f:b5:78:18:cb:49:b2:cd:
                    2a:56:9e:ac:c3:f6:1a:62:75:c5:14:52:1a:a6:b7:
                    bc:72:3c:c4:4c:2d:7d:cd:24:67:de:32:9a:af:c5:
                    a0:2b:0e:7b:8d:30:04:9f:f7:8c:c9:53:69:5a:10:
                    c4:84:5d:4f:6e:be:e5:32:72:60:9c:da:2c:40:30:
                    c7:16:5c:ff:bd:f2:2c:0c:fd:2c:e5:8e:5c:9b:d0:
                    0f:b6:b5:25:67:1b:5f:6b:9e:bc:bd:6d:e1:5a:00:
                    c3:ca:7d:a0:d0:b9:80:e3:76:e3:08:96:0c:a7:8f:
                    35:59:2a:06:57:b6:07:f6:74:6a:05:e5:5a:4d:a4:
                    ad:84:6d:5b:72:01:ab:9e:f2:17:8e:27:c1:70:d6:
                    2b:5d:81:b5:47:e0:ca:59:c1:6c:73:af:f8:93:3c:
                    a7:75:6c:5d:f5:93:fb:fb:b3:bf:71:47:35:f4:fd:
                    3e:2e:3b:94:fb:c7:12:7f:76:f4:27:26:1c:84:70:
                    3e:1f:c8:71:74:41:8c:cc:ed:e4:b6:89:5a:be:83:
                    04:27:b4:96:f0:31:fc:29:75:84:4c:dd:0b:5d:4d:
                    56:ff:ff:c6:59:05:18:c0:d1:2a:6c:4e:ab:b6:1f:
                    4f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:8F:8F:77:70:54:35:38:5F:82:D4:E8:7A:21:FA:84:EE:B2:A2:58
            X509v3 Authority Key Identifier:
                keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/co-Pd3BUNThfgtToeiH6hO6yolg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         98:40:aa:dc:98:fc:5c:00:62:0c:07:52:63:96:50:df:3d:bf:
         fe:eb:13:92:4b:9c:51:ab:8f:9f:70:93:6f:70:a4:d0:91:6c:
         f0:4d:c5:31:be:16:ec:1b:de:39:8e:f3:e1:b1:52:bb:88:95:
         c9:9d:7e:f0:cc:4a:77:5d:d8:a0:5b:a1:d2:15:ea:c3:c0:09:
         b5:08:ed:a7:91:a0:15:0b:0c:84:d8:7e:cd:61:d9:93:40:61:
         23:11:e1:48:e0:8b:46:d6:e7:a2:18:fc:e0:fa:05:65:64:d1:
         0f:84:6f:b3:ca:e2:4d:58:0a:3c:30:ff:f3:e3:9d:57:b8:cf:
         ec:c7:93:fd:57:d1:7c:1f:ed:bd:e8:20:ab:e4:9c:02:c8:21:
         64:5f:ce:cb:bc:e1:3c:aa:fb:f4:c8:19:98:ef:38:bc:48:c7:
         96:99:3f:03:2a:39:fb:dd:9a:9a:87:34:2e:cf:3e:d4:cb:68:
         f3:78:15:5d:4f:c4:c6:8e:77:2f:51:79:fe:62:3e:5a:1f:d9:
         04:7d:26:b9:c1:94:44:d7:ac:69:ac:d6:6e:bf:ec:9f:15:3a:
         0d:f3:ab:a8:66:87:fc:ae:2c:a9:76:f5:23:01:c7:2c:e0:f0:
         a2:35:be:56:d9:7e:60:1e:53:4f:a2:e5:d6:c3:5d:bf:43:d2:
         1f:c6:e8:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----