Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/da9no6FtDn2fQig1yUsLYVTg_zM.roa
File:                     da9no6FtDn2fQig1yUsLYVTg_zM.roa (raw, json)
Hash identifier:          10kbUTwwtLRRqRylm6qvnsCxo8A2IMfDSrP4DQAtTUc=
Subject key identifier:   75:AF:67:A3:A1:6D:0E:7D:9F:42:28:35:C9:4B:0B:61:54:E0:FF:33
Certificate issuer:       /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial:       018CFC4B46622341109F5BA11C2534E7A87B
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/da9no6FtDn2fQig1yUsLYVTg_zM.roa
Signing time:             Fri 12 Jan 2024 06:10:40 +0000
ROA not before:           Fri 12 Jan 2024 06:10:40 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:fc:4b:46:62:23:41:10:9f:5b:a1:1c:25:34:e7:a8:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
        Validity
            Not Before: Jan 12 06:10:40 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=75af67a3a16d0e7d9f422835c94b0b6154e0ff33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:2a:47:ad:7a:38:89:f9:55:54:a2:1e:ad:61:
                    55:11:ef:a0:e9:f3:d3:85:a9:a6:ec:f0:cf:31:d9:
                    63:0b:e6:90:f0:17:fb:31:a0:0b:93:9e:c6:b1:60:
                    b4:44:cb:0d:c8:ef:a5:ef:0b:93:95:52:80:0b:02:
                    25:60:ba:97:4f:37:1d:fd:ac:0d:5f:37:f6:6f:f7:
                    16:03:eb:29:a8:cb:c0:12:13:49:84:9e:72:bb:21:
                    2f:05:28:92:55:50:1f:4c:7b:4b:69:99:f5:7a:c7:
                    ed:2f:ff:54:59:1e:3c:53:95:a4:ef:57:b7:26:d8:
                    72:8e:af:d8:93:a0:78:ff:df:ac:98:d2:78:9b:00:
                    01:ab:4f:c0:a0:df:1a:f0:9d:6d:ee:e5:c6:03:07:
                    18:99:41:17:47:b2:2e:a8:af:dc:91:10:ad:f8:39:
                    4a:19:ea:34:93:21:7c:48:21:d7:99:80:d2:4a:f6:
                    41:48:51:1b:51:66:18:e1:bf:c8:42:c5:3a:7b:96:
                    dc:0a:f6:32:36:29:21:a7:2d:f2:e2:41:4a:79:b0:
                    df:d5:6e:aa:59:88:ed:3a:b4:1d:d1:1d:32:76:f6:
                    c7:f4:e7:23:a0:73:4e:ab:5b:94:af:74:65:29:4f:
                    10:5d:79:3a:c8:e7:8b:c0:39:c3:74:a2:ad:ea:6d:
                    a3:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:AF:67:A3:A1:6D:0E:7D:9F:42:28:35:C9:4B:0B:61:54:E0:FF:33
            X509v3 Authority Key Identifier:
                keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/da9no6FtDn2fQig1yUsLYVTg_zM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         01:6c:7f:72:01:1f:14:68:22:d4:a5:ef:8b:39:df:26:44:e4:
         14:26:67:ab:0c:8f:27:cb:c6:22:77:83:73:59:91:45:6e:c5:
         d9:e3:bc:5e:11:70:4f:01:40:73:b5:43:b2:bf:ba:d6:a5:df:
         77:ef:be:f4:ee:d4:ff:6f:bd:72:31:45:62:7d:dc:c8:cc:ee:
         76:95:74:85:18:33:c2:71:d0:39:56:d2:4d:99:fa:c9:b9:26:
         a9:94:ba:da:ea:6e:16:2f:69:c7:78:1d:54:72:12:84:7a:d4:
         5d:14:39:23:fb:d8:e3:15:59:53:0d:60:e6:c0:e1:26:70:7a:
         6a:9e:a2:1b:27:be:b7:d8:03:3d:44:6d:3f:22:31:fb:41:06:
         3b:8c:c9:48:a2:9e:62:04:d6:b8:a8:e0:26:6a:de:92:cf:ed:
         50:64:10:fa:a2:d3:6b:bf:61:a6:d7:88:3a:07:f1:12:32:5e:
         9a:57:fa:d2:a8:7e:00:82:a2:27:81:01:d4:a7:c5:dd:9f:63:
         0e:5a:35:c7:33:08:06:0e:ba:83:5e:2b:df:bb:11:57:85:c0:
         e5:31:22:d0:45:24:98:23:58:0b:d9:12:0c:84:45:ae:14:cc:
         ee:8b:73:02:ca:ce:ae:ee:70:b7:cc:9f:92:fd:e9:f9:d9:5f:
         7d:48:04:2c
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYz8S0ZiI0EQn1uhHCU056h7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMTEyMDYxMDQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NWFmNjdhM2ExNmQwZTdkOWY0MjI4MzVjOTRiMGI2MTU0ZTBmZjMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqypHrXo4iflVVKIerWFVEe+g6fPT
hamm7PDPMdljC+aQ8Bf7MaALk57GsWC0RMsNyO+l7wuTlVKACwIlYLqXTzcd/awN
Xzf2b/cWA+spqMvAEhNJhJ5yuyEvBSiSVVAfTHtLaZn1esftL/9UWR48U5Wk71e3
Jthyjq/Yk6B4/9+smNJ4mwABq0/AoN8a8J1t7uXGAwcYmUEXR7IuqK/ckRCt+DlK
Geo0kyF8SCHXmYDSSvZBSFEbUWYY4b/IQsU6e5bcCvYyNikhpy3y4kFKebDf1W6q
WYjtOrQd0R0ydvbH9OcjoHNOq1uUr3RlKU8QXXk6yOeLwDnDdKKt6m2j2wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFHWvZ6OhbQ59n0IoNclLC2FU4P8zMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvZGE5bm82RnREbjJmUWlnMXlVc0xZVlRnX3pNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAFsf3IBHxRoItSl74s5
3yZE5BQmZ6sMjyfLxiJ3g3NZkUVuxdnjvF4RcE8BQHO1Q7K/utal33fvvvTu1P9v
vXIxRWJ93MjM7naVdIUYM8Jx0DlW0k2Z+sm5JqmUutrqbhYvacd4HVRyEoR61F0U
OSP72OMVWVMNYObA4SZwemqeohsnvrfYAz1EbT8iMftBBjuMyUiinmIE1rio4CZq
3pLP7VBkEPqi02u/YabXiDoH8RIyXppX+tKofgCCoieBAdSnxd2fYw5aNcczCAYO
uoNeK9+7EVeFwOUxItBFJJgjWAvZEgyERa4UzO6LcwLKzq7ucLfMn5L96fnZX31I
BCw=
-----END CERTIFICATE-----