Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/fsTO5OTWz_W8CHSBpl_bM_dPuX4.roa
File:                     fsTO5OTWz_W8CHSBpl_bM_dPuX4.roa (raw, json)
Hash identifier:          Mxh3m/TgUV9p5H8bXJTaU1u2RR6GBRIWUp7IHFEDn78=
Subject key identifier:   7E:C4:CE:E4:E4:D6:CF:F5:BC:08:74:81:A6:5F:DB:33:F7:4F:B9:7E
Certificate issuer:       /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial:       018E502FFABBA633E2516BDC9F0FA004D8CB
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/fsTO5OTWz_W8CHSBpl_bM_dPuX4.roa
Signing time:             Mon 18 Mar 2024 06:11:45 +0000
ROA not before:           Mon 18 Mar 2024 06:11:45 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
                          2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:50:2f:fa:bb:a6:33:e2:51:6b:dc:9f:0f:a0:04:d8:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
        Validity
            Not Before: Mar 18 06:11:45 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=7ec4cee4e4d6cff5bc087481a65fdb33f74fb97e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c0:ea:92:21:13:2a:07:61:b0:6b:bd:c6:be:
                    d9:fa:d5:11:1f:d6:0d:18:45:f0:0b:32:55:56:23:
                    e3:fd:74:70:7e:0f:0f:ee:09:ad:a9:48:3e:10:81:
                    10:d0:d2:63:7b:a4:e7:33:d9:d6:c5:31:61:d0:9b:
                    44:8d:51:0c:fc:bd:5d:52:f9:40:23:a1:de:49:95:
                    c5:3f:34:05:70:ca:4f:e8:be:3b:1e:cf:14:47:ce:
                    34:ce:72:43:78:b8:32:e6:2c:71:c5:42:12:0d:f3:
                    d4:00:11:e8:60:e6:6a:17:54:08:4f:4c:71:31:96:
                    74:19:02:18:f6:10:9d:02:cb:91:3d:66:4a:43:42:
                    95:ad:7d:f8:66:02:62:ef:74:6c:ba:28:39:c2:66:
                    c5:32:a0:00:78:f7:84:47:00:b3:02:8d:a5:3c:c0:
                    c7:40:02:e4:e0:ce:5e:1f:01:8d:a2:8a:4f:e0:f5:
                    d4:5b:e0:87:50:30:26:bd:a4:e3:28:41:63:95:fe:
                    55:91:1b:5a:16:7d:af:3c:4d:05:0d:1c:d1:26:33:
                    3d:9f:74:74:0f:ee:4a:9f:65:9b:4d:81:a9:5f:3f:
                    b4:7a:e8:05:06:3b:d2:fa:48:c1:29:d1:ec:fc:81:
                    52:de:e7:42:50:c8:90:97:a5:a1:61:e7:61:cc:e5:
                    69:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:C4:CE:E4:E4:D6:CF:F5:BC:08:74:81:A6:5F:DB:33:F7:4F:B9:7E
            X509v3 Authority Key Identifier:
                keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/fsTO5OTWz_W8CHSBpl_bM_dPuX4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         44:75:7d:bb:0a:f4:72:b0:c7:46:ce:38:bb:45:12:b6:53:f3:
         ab:d0:9e:87:cd:30:a3:84:26:e4:c1:35:75:bf:63:c3:70:e4:
         ab:37:13:27:04:71:57:64:2a:fb:36:15:98:2f:d8:90:ae:bd:
         32:92:d9:89:c8:dc:3b:0e:df:a9:2b:06:7a:c3:97:e0:7f:f3:
         19:b0:4e:c6:fd:e7:e5:d8:61:3e:f6:73:6e:53:98:15:66:4a:
         70:6c:fc:44:8c:34:91:1c:1c:f0:c2:85:17:03:b6:2c:2d:db:
         bb:74:0f:ea:09:43:28:af:86:19:1a:79:8d:95:41:44:1a:d8:
         cf:b0:82:f3:ae:e4:50:1c:1a:a7:5c:a8:fb:db:15:97:07:12:
         67:47:3c:db:fe:da:7d:81:6b:da:67:79:d4:e0:2d:ea:2a:08:
         10:33:c6:d3:a0:12:db:73:f8:c7:7b:bf:59:24:76:26:a3:58:
         1b:a4:99:0d:cc:16:75:25:25:18:c1:16:15:8d:ad:36:3f:97:
         52:b5:42:cb:90:f2:52:57:44:7a:80:3b:fc:55:3a:6c:3d:31:
         c3:0b:63:48:43:18:1b:8a:9b:98:47:f3:c8:29:a5:6c:23:a5:
         3f:33:b8:c2:68:1c:15:b6:19:8e:fe:75:dd:5e:e6:7f:e2:9e:
         9b:01:c7:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----