Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ecTygme-VRlhekn4SqRPdw9pNGg.roa
File:                     ecTygme-VRlhekn4SqRPdw9pNGg.roa (raw, json)
Hash identifier:          2QSuXshjVcng5Jaek4SzglTL8NJgliV7x67+MqVm9Rc=
Subject key identifier:   79:C4:F2:82:67:BE:55:19:61:7A:49:F8:4A:A4:4F:77:0F:69:34:68
Certificate issuer:       /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial:       018D4EE8DA86940A09CD43E606084CF46532
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ecTygme-VRlhekn4SqRPdw9pNGg.roa
Signing time:             Sun 28 Jan 2024 07:11:39 +0000
ROA not before:           Sun 28 Jan 2024 07:11:39 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:4e:e8:da:86:94:0a:09:cd:43:e6:06:08:4c:f4:65:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
        Validity
            Not Before: Jan 28 07:11:39 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=79c4f28267be5519617a49f84aa44f770f693468
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ac:4b:d0:cb:0a:34:3e:48:a1:f7:e3:81:59:
                    bb:a1:c4:39:e8:45:d8:4b:3d:e7:35:ad:3e:48:d8:
                    3d:9b:c4:c6:0e:7f:5b:93:7a:f3:7c:7e:20:71:fd:
                    c1:5c:c4:b3:e2:d9:94:73:1a:cb:9b:16:74:4a:6b:
                    76:85:a6:3e:2a:00:07:9b:c3:e2:16:2f:57:57:7f:
                    49:2f:0a:59:0f:ef:44:16:4c:12:78:3a:b0:5d:64:
                    69:3b:4c:f2:95:be:6a:4e:c5:39:d6:71:5e:7f:4f:
                    6d:4d:b1:ba:ae:4f:dc:3c:21:43:53:42:b5:ca:39:
                    c1:f4:be:00:6d:35:cf:88:cf:94:c6:bc:98:9d:0a:
                    41:ce:39:52:31:92:3f:02:22:4f:6b:90:99:86:88:
                    f2:81:d2:23:76:9e:fb:60:91:1c:1a:3f:16:ef:2e:
                    9a:5e:5d:5d:7f:6f:34:67:e7:1a:ed:6f:83:e1:4e:
                    d8:24:17:34:1b:9d:b0:57:1c:75:79:e2:61:91:42:
                    d4:2d:58:ce:8f:c3:59:19:64:62:32:2e:d2:b3:77:
                    cb:72:63:b6:b6:ac:cd:d5:bf:49:14:a4:66:d4:9e:
                    62:6b:4a:4b:81:b8:c0:8c:be:4a:ad:9c:70:82:09:
                    67:75:e3:14:3f:a1:04:b0:11:d6:46:26:31:85:fd:
                    3e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:C4:F2:82:67:BE:55:19:61:7A:49:F8:4A:A4:4F:77:0F:69:34:68
            X509v3 Authority Key Identifier:
                keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ecTygme-VRlhekn4SqRPdw9pNGg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         1a:eb:04:a7:61:64:41:e8:4c:83:1e:47:43:2f:c9:8c:7d:b3:
         5c:8e:94:5a:48:19:d1:56:75:e4:eb:93:ff:9d:0d:31:2e:8b:
         00:f9:26:87:11:87:6d:3b:28:b2:16:3a:42:67:62:34:9f:56:
         9a:32:6e:8d:ea:57:10:d6:ea:1e:93:a6:fb:01:c6:19:07:86:
         27:d9:9c:b3:bb:cc:08:3b:ea:f1:c2:b0:51:ad:89:4a:c0:42:
         f5:3c:41:33:78:af:1e:03:f7:50:6e:0f:29:9c:d3:79:05:9c:
         6d:78:ad:98:72:04:85:94:72:0c:4d:dc:3f:f2:c9:40:b2:4f:
         a4:4a:69:69:7a:5f:34:2c:db:f8:4e:97:7e:91:f3:a7:77:d0:
         d0:77:cd:d5:c9:c9:d9:f9:fe:58:e7:ce:45:3f:91:35:f7:34:
         bf:f5:81:7b:85:a4:c1:43:fa:78:0e:b1:64:1d:74:ee:da:19:
         15:7c:e5:df:ad:4f:23:ed:a2:ad:24:a3:23:fa:c0:4d:d0:af:
         21:4b:22:ef:87:99:ec:d6:65:36:4f:4d:3b:95:c8:16:1f:a6:
         40:8e:7e:47:fc:de:c5:e8:01:b0:85:7e:b9:a3:f7:c9:51:55:
         9a:b7:ca:d7:67:3a:8b:24:3d:dc:cb:c1:b6:4f:0d:b0:0d:12:
         ac:66:4a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----