Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/i48_bHuYQuDfLoGo2R94alyhW2A.roa
File:                     i48_bHuYQuDfLoGo2R94alyhW2A.roa (raw, json)
Hash identifier:          O2fp2kQV/IGF4kaOhdHZSG8OXLRLTZkxGMWyrxWwj80=
Subject key identifier:   8B:8F:3F:6C:7B:98:42:E0:DF:2E:81:A8:D9:1F:78:6A:5C:A1:5B:60
Certificate issuer:       /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial:       018DBCCBD2D441FFE33495B58B4CA8F6007A
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/i48_bHuYQuDfLoGo2R94alyhW2A.roa
Signing time:             Sun 18 Feb 2024 15:18:10 +0000
ROA not before:           Sun 18 Feb 2024 15:18:10 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:bc:cb:d2:d4:41:ff:e3:34:95:b5:8b:4c:a8:f6:00:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
        Validity
            Not Before: Feb 18 15:18:10 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=8b8f3f6c7b9842e0df2e81a8d91f786a5ca15b60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:25:1f:e7:ff:4d:cd:71:86:c8:75:56:00:d7:
                    e7:47:00:be:57:4b:a9:c6:00:80:71:7d:26:62:8b:
                    e1:5a:0e:93:2b:8f:31:7d:0c:29:4b:6e:a0:99:3c:
                    5d:5c:ef:06:8a:e9:5f:b4:c8:6b:93:fb:c0:0a:10:
                    36:5f:ce:22:37:25:2b:f4:22:86:8e:8d:c7:03:54:
                    ae:57:a9:31:b3:c6:43:06:3c:c2:76:01:d6:8c:61:
                    b8:a7:e9:f5:d9:ad:db:98:aa:3a:d1:98:fb:33:91:
                    59:a9:61:e6:56:61:3f:13:ff:92:98:f3:58:89:15:
                    64:cc:a4:fe:02:b3:84:a9:44:76:2a:71:1b:af:19:
                    91:eb:92:96:a8:eb:25:5c:e2:a5:70:09:fa:a0:a1:
                    01:5b:29:b3:f3:62:1f:19:f0:a3:04:75:d4:bf:10:
                    48:44:3e:36:d0:6d:d0:c2:78:01:70:40:0d:45:a7:
                    e3:5e:30:61:cb:66:0d:59:f2:1d:c3:66:c3:d0:16:
                    a9:c7:22:86:58:34:c6:0f:31:ce:57:e0:e9:7f:78:
                    43:6a:db:df:0a:7b:26:3d:ff:61:71:e3:78:47:b7:
                    a0:a1:b3:5d:43:cb:87:c5:e1:25:04:26:88:a2:d2:
                    78:1f:2f:67:85:74:ee:99:cc:99:c4:72:e1:ad:7a:
                    f5:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:8F:3F:6C:7B:98:42:E0:DF:2E:81:A8:D9:1F:78:6A:5C:A1:5B:60
            X509v3 Authority Key Identifier:
                keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/i48_bHuYQuDfLoGo2R94alyhW2A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         69:a9:27:47:e5:7b:7f:39:f6:eb:97:82:4f:42:3b:0b:45:40:
         08:3a:f1:fa:fc:26:b8:0c:4a:42:5a:64:fd:8f:2b:4c:08:3d:
         50:e0:9c:15:a7:dd:cb:34:33:3a:3e:3f:ce:81:8f:c7:46:78:
         12:82:ec:7a:64:9a:6b:91:2e:0f:b2:e1:45:86:b1:5a:ef:16:
         00:42:b9:df:d6:a2:f2:bc:65:59:e3:ce:16:49:ad:75:bc:6c:
         55:8c:a6:98:76:44:69:35:d6:4b:d0:15:e5:d6:cf:30:1b:2a:
         4f:5b:ea:28:31:91:8f:25:5c:32:56:52:ca:10:bf:90:62:97:
         90:ae:75:94:6c:95:29:f5:71:8d:8a:2a:53:98:e0:de:b0:31:
         ff:af:f7:0a:99:c0:eb:a3:cb:3f:7a:21:1d:a5:d0:0f:d6:80:
         3b:cd:83:94:cb:82:5e:f3:14:58:c9:c9:7e:87:78:65:87:ae:
         40:e9:62:83:62:2f:46:bd:3f:e6:b5:13:b8:90:4c:f6:d5:bb:
         e8:d0:b3:d0:5f:e4:b9:20:98:76:ec:75:b5:42:a6:75:60:31:
         66:19:00:7f:ee:f4:0e:a5:37:12:d6:47:f4:3c:c6:f3:4b:a2:
         10:2e:53:ce:4d:70:50:c5:41:71:8b:fb:e5:27:91:a7:06:58:
         44:a0:aa:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----