Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/hz40Qgkveq2UjsrgOUU8qp7Qbxk.roa
File:                     hz40Qgkveq2UjsrgOUU8qp7Qbxk.roa (raw, json)
Hash identifier:          Q3bd6OPnrDgNlRqWv7phCyHvrvMmwJtPEQwszjZ9Cv4=
Subject key identifier:   87:3E:34:42:09:2F:7A:AD:94:8E:CA:E0:39:45:3C:AA:9E:D0:6F:19
Certificate issuer:       /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial:       018D0707B0171D4FF84851A3116CA03497A6
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/hz40Qgkveq2UjsrgOUU8qp7Qbxk.roa
Signing time:             Sun 14 Jan 2024 08:12:40 +0000
ROA not before:           Sun 14 Jan 2024 08:12:40 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:07:07:b0:17:1d:4f:f8:48:51:a3:11:6c:a0:34:97:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
        Validity
            Not Before: Jan 14 08:12:40 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=873e3442092f7aad948ecae039453caa9ed06f19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:56:57:76:03:7b:3c:b4:4d:b0:a2:da:e5:2c:
                    d5:02:8b:a5:e2:4d:76:f4:a7:bf:04:ee:b3:b6:2e:
                    96:5c:e5:22:6b:18:5e:e9:06:8e:bf:6a:ad:10:60:
                    00:15:bb:c2:24:fe:58:42:47:58:51:e0:0d:d8:e8:
                    27:df:16:23:e0:2a:17:9f:74:ed:2a:85:f0:b4:b1:
                    1d:56:dc:10:ed:aa:be:1e:be:14:fe:5b:19:67:3d:
                    91:79:4a:c5:46:09:d7:7e:fc:d6:6a:63:ea:6b:f7:
                    9e:f6:0b:09:e7:31:4b:e4:44:4c:67:ba:c1:1b:6f:
                    97:22:81:86:5a:3d:e4:94:a0:e6:a2:5a:5a:74:de:
                    f4:6b:24:7a:b9:ae:57:8a:93:82:b3:2d:db:d7:d5:
                    a0:cb:d9:fa:2f:cf:f1:ff:ab:71:cc:01:24:bd:4a:
                    f4:3f:62:16:03:db:ac:f8:a0:99:83:16:73:0e:64:
                    75:ba:ff:ac:2f:de:95:3e:56:0f:65:a4:4b:14:63:
                    07:09:ca:0d:3c:53:bf:23:67:77:3b:89:51:15:3a:
                    9e:28:74:70:49:86:c2:c6:72:c1:5d:7c:eb:36:d2:
                    e0:d0:27:e6:eb:58:0d:dc:9e:dd:69:56:89:65:fe:
                    c1:ff:15:c0:47:13:b3:a9:4a:96:31:99:fd:e9:2c:
                    cc:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:3E:34:42:09:2F:7A:AD:94:8E:CA:E0:39:45:3C:AA:9E:D0:6F:19
            X509v3 Authority Key Identifier:
                keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/hz40Qgkveq2UjsrgOUU8qp7Qbxk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         1c:36:7a:b2:6c:55:87:b9:42:49:dc:ac:b1:aa:0a:48:b3:83:
         f1:d7:e3:ce:9c:82:f2:7c:f2:56:94:ab:b9:58:9c:18:1c:ef:
         51:13:d1:6c:88:6f:8d:fe:62:7e:b6:9c:1a:22:36:5b:bb:6b:
         2c:8c:e4:33:f6:be:6e:35:6a:77:08:3f:57:11:aa:af:77:8f:
         79:dc:12:0b:61:60:31:6d:c2:a4:4f:4b:cd:8c:27:97:5d:4e:
         e9:3f:b6:a9:94:4b:df:c1:c3:e5:0a:66:cc:17:f5:3f:46:f2:
         4c:97:ec:09:f3:ea:75:33:08:68:ce:d5:75:93:c1:dd:fd:0a:
         60:20:b8:96:a0:3e:b2:9c:d1:39:26:e8:5c:ca:25:da:6f:69:
         fd:ed:ac:fd:4a:2a:ae:93:2c:b1:ad:ec:bf:3a:9a:d9:6b:dd:
         f0:4e:aa:af:42:02:8c:71:88:24:ae:63:98:42:ed:44:1e:fd:
         5d:87:f0:67:ed:b5:04:0e:e3:5f:85:9e:1b:ad:ce:cf:70:37:
         19:ce:62:4e:7c:66:0b:6a:24:41:7e:c1:97:2f:62:3a:f2:8f:
         c7:9b:8d:64:d5:9e:d4:86:41:a0:4c:15:3c:79:5d:9d:1b:d1:
         f9:ee:61:7c:b7:eb:fd:7e:05:f1:aa:74:83:fe:35:52:12:73:
         2a:dc:5d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----