Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/e6tTQLDoy03peWH6T2CLH9VmpzM.roa
File:                     e6tTQLDoy03peWH6T2CLH9VmpzM.roa (raw, json)
Hash identifier:          TRrFtJyJp4WcVsfFOv6P24/AqxA/YEy4KTPRzYicDlQ=
Subject key identifier:   7B:AB:53:40:B0:E8:CB:4D:E9:79:61:FA:4F:60:8B:1F:D5:66:A7:33
Certificate issuer:       /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial:       018DD0F539CB187B0410A5882253F3A9B0ED
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/e6tTQLDoy03peWH6T2CLH9VmpzM.roa
Signing time:             Thu 22 Feb 2024 13:15:48 +0000
ROA not before:           Thu 22 Feb 2024 13:15:48 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:d0:f5:39:cb:18:7b:04:10:a5:88:22:53:f3:a9:b0:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
        Validity
            Not Before: Feb 22 13:15:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=7bab5340b0e8cb4de97961fa4f608b1fd566a733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:76:ce:c1:de:26:e4:62:c4:04:c7:ef:22:42:
                    49:4f:d0:71:c9:9b:6b:58:20:eb:9c:2d:cd:92:56:
                    47:82:df:d5:ac:9b:83:2c:4a:9a:de:05:57:e5:af:
                    02:79:1b:3d:fe:b9:22:d9:98:b7:7b:85:ad:19:3a:
                    bc:07:8e:90:21:ee:fb:a9:75:53:15:d7:d7:3d:5d:
                    5c:bb:f5:8f:d6:21:aa:33:81:3b:79:cb:3b:c4:c6:
                    83:bb:70:cf:c3:30:2c:1a:07:17:92:81:2a:de:81:
                    31:a8:de:92:67:16:16:8b:94:25:42:3f:0b:7c:22:
                    8d:99:bf:cc:be:9d:a4:c6:c6:02:4e:a1:39:3a:fe:
                    46:72:df:ed:29:8e:ba:91:9b:5c:a1:ae:58:ac:06:
                    43:fb:b7:9c:eb:e9:25:d0:0a:90:fb:f5:2e:e0:87:
                    81:c7:fc:22:55:77:b6:33:2f:51:88:e8:b2:c5:a8:
                    06:bc:11:e5:99:2b:ac:69:b8:9b:19:d6:8d:b0:97:
                    2f:1a:40:9a:88:c7:9a:39:84:44:f3:ca:a0:0d:d2:
                    d0:6e:2f:5d:c8:6d:6c:3d:8e:fb:83:a6:eb:2f:42:
                    99:59:ee:7e:1b:cc:05:d3:a5:67:da:26:6f:40:93:
                    a3:7e:db:69:b7:f6:30:ca:ae:44:65:cd:a6:5a:02:
                    ad:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:AB:53:40:B0:E8:CB:4D:E9:79:61:FA:4F:60:8B:1F:D5:66:A7:33
            X509v3 Authority Key Identifier:
                keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/e6tTQLDoy03peWH6T2CLH9VmpzM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         1d:fa:2b:08:f9:5b:73:9d:a6:de:ca:3c:36:e0:16:68:9e:dc:
         d2:43:e9:cb:80:3b:ae:91:b5:ef:73:c0:6e:0f:85:0b:23:b9:
         a1:04:d7:22:61:30:24:09:8b:eb:fb:c9:20:e5:de:ea:53:96:
         ed:0f:5a:34:0e:c1:c6:e6:28:26:c5:63:41:77:d6:16:2f:0f:
         2f:a2:5f:73:29:41:5e:92:b6:c1:8c:9c:45:b5:9a:30:bc:ba:
         4a:88:d9:c2:01:d5:24:30:61:e3:d1:eb:8f:7e:f6:89:6b:34:
         ed:ba:85:08:da:de:0d:51:94:c0:26:8c:37:8f:f3:e0:84:4d:
         05:1b:9e:a0:b0:3e:ed:e2:67:52:9b:1f:40:3f:d7:6b:d1:ba:
         f5:49:34:96:9f:84:79:36:15:34:73:13:ef:6c:b6:31:d8:96:
         1b:79:31:2d:18:45:65:fa:17:1f:f5:91:17:36:bf:1d:52:83:
         6a:33:db:75:39:80:b3:4d:c6:c3:1f:c4:61:07:ce:ef:b1:40:
         d6:17:af:36:06:5a:2c:af:81:a6:90:16:ef:cf:63:fa:52:0e:
         e3:53:34:bc:18:fe:ee:c0:cd:e4:6e:8e:ab:aa:5a:67:2f:b2:
         01:ff:e1:56:ba:46:f9:d8:fa:41:21:8c:62:e5:52:34:1d:4c:
         2b:e1:b9:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----