Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/gyaqDKQoFQ0CevtQbWIRw_Fssy4.roa
File:                     gyaqDKQoFQ0CevtQbWIRw_Fssy4.roa (raw, json)
Hash identifier:          WjYS/sU8rWdiBSjEnt7YRjXOTu09QiL13THK1bko6ps=
Subject key identifier:   83:26:AA:0C:A4:28:15:0D:02:7A:FB:50:6D:62:11:C3:F1:6C:B3:2E
Certificate issuer:       /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial:       018C9DAD6F228CD5171B8CB87F8F7EA1B924
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/gyaqDKQoFQ0CevtQbWIRw_Fssy4.roa
Signing time:             Sun 24 Dec 2023 21:13:58 +0000
ROA not before:           Sun 24 Dec 2023 21:13:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:9d:ad:6f:22:8c:d5:17:1b:8c:b8:7f:8f:7e:a1:b9:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
        Validity
            Not Before: Dec 24 21:13:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8326aa0ca428150d027afb506d6211c3f16cb32e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:40:81:56:3c:34:9d:ac:1c:96:1c:fd:f7:d1:
                    5c:1d:6d:72:76:73:3c:3f:51:97:93:13:75:d0:a9:
                    79:96:50:5b:e9:f6:bf:b5:8d:c4:a6:2f:6a:b9:8b:
                    e0:05:3b:54:ce:b3:47:6a:70:a0:a4:a7:da:68:1c:
                    e1:10:35:27:e6:63:86:f2:c4:06:b5:74:3e:7f:c0:
                    43:3d:90:24:69:ec:8b:31:32:cb:e6:57:00:d5:40:
                    70:1e:d7:ac:cc:5b:19:d9:33:f1:3e:28:a1:0f:4f:
                    cc:4a:7c:60:28:ee:c4:18:5c:5a:db:97:61:9d:b3:
                    af:90:26:b2:3e:6e:57:7b:2a:c7:2b:67:bb:a9:78:
                    3f:07:2f:28:c8:8b:c3:11:c3:84:46:2b:31:6c:9c:
                    df:3c:6b:19:65:0d:3c:2c:76:2e:62:89:58:ae:8c:
                    c9:92:f2:37:fb:11:a2:ce:86:17:9c:4f:5b:78:80:
                    52:23:39:b2:44:29:43:df:69:97:ea:26:c4:b4:a1:
                    95:89:e2:e3:3f:4a:3f:c6:e0:10:25:64:9a:13:fa:
                    84:9c:2d:4d:f2:1b:3e:c2:4c:0e:57:63:96:95:cb:
                    fd:b5:52:8e:91:31:a4:3b:ab:6e:84:aa:81:ea:ef:
                    e6:c8:5a:1f:1e:3b:88:c7:64:7c:a8:2c:2d:b0:c6:
                    e0:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:26:AA:0C:A4:28:15:0D:02:7A:FB:50:6D:62:11:C3:F1:6C:B3:2E
            X509v3 Authority Key Identifier:
                keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/gyaqDKQoFQ0CevtQbWIRw_Fssy4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         74:7d:5b:18:90:5b:1b:d3:1f:69:a2:8e:95:48:3b:10:62:17:
         99:da:40:0a:31:64:cf:d8:dd:c2:6e:bb:69:08:04:72:4a:49:
         70:e0:62:92:26:49:b1:e2:50:89:dc:d8:4e:f5:d4:20:74:a8:
         8e:21:08:47:a2:ab:c9:1d:50:82:3d:50:6f:1f:97:0f:6f:05:
         21:eb:38:4f:dc:47:30:ce:d4:7d:98:0d:24:24:b2:8a:d9:0b:
         bd:31:2f:7d:b9:b7:21:4f:20:2e:e3:ed:b9:ef:c2:d7:f3:ec:
         74:6c:06:55:95:6b:81:61:49:30:0f:cd:d5:03:8c:26:eb:ae:
         f3:b9:b0:87:ca:69:12:c3:5f:bd:f1:d2:41:b9:76:33:68:ce:
         21:6a:3b:fb:55:42:b2:5c:17:15:b4:26:26:57:c1:65:5a:5b:
         bb:ce:28:f3:34:ce:e5:b3:10:cc:66:1f:84:54:d3:a6:89:b2:
         0c:e3:06:af:24:0d:37:af:e7:0b:11:b1:9f:7f:4a:6c:64:0f:
         79:ba:7c:91:84:40:d7:15:eb:56:73:d2:cf:7e:71:b4:9a:4e:
         89:1a:5c:75:71:20:27:61:6f:74:c3:ad:e7:61:e5:af:75:a7:
         7a:98:fb:53:5d:d7:1a:7f:ec:11:4a:5f:ba:5a:68:66:dd:69:
         ec:e5:37:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----