Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/iP3ZDG2yXHEmYjgZ94WNaca_KGA.roa
File:                     iP3ZDG2yXHEmYjgZ94WNaca_KGA.roa (raw, json)
Hash identifier:          9Ug6aLpexJoxI2F6XbWO6FrLO39otC4IOcbfPgU2H4I=
Subject key identifier:   88:FD:D9:0C:6D:B2:5C:71:26:62:38:19:F7:85:8D:69:C6:BF:28:60
Certificate issuer:       /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial:       018DBE48D9CB4D32C28401CCF211745DFCD5
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/iP3ZDG2yXHEmYjgZ94WNaca_KGA.roa
Signing time:             Sun 18 Feb 2024 22:14:21 +0000
ROA not before:           Sun 18 Feb 2024 22:14:21 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:be:48:d9:cb:4d:32:c2:84:01:cc:f2:11:74:5d:fc:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
        Validity
            Not Before: Feb 18 22:14:21 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=88fdd90c6db25c7126623819f7858d69c6bf2860
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:58:86:e7:ca:22:18:b5:b9:0f:fb:ce:c7:a4:
                    94:9c:59:51:c1:1d:c3:ab:a6:f3:33:7e:35:42:8a:
                    bd:b9:30:0c:56:05:ba:1a:f5:d4:d3:b6:86:98:f4:
                    67:a8:a9:5f:35:e3:ed:19:13:59:03:ed:dc:68:a6:
                    50:a1:8a:d0:91:f9:50:64:08:6e:7f:8c:0e:fc:32:
                    80:22:ec:16:a6:f2:4d:6c:7c:61:4d:b7:30:0e:4e:
                    4a:7f:9a:73:84:44:4b:fc:98:3d:d1:f8:83:11:2b:
                    b3:a5:a2:e7:a2:7d:4d:67:e9:f9:50:bf:b8:61:ef:
                    68:d1:36:36:49:5e:e2:71:dc:39:84:e0:11:9d:d3:
                    39:c0:79:d1:03:d9:f6:eb:ad:81:33:3d:04:f2:5a:
                    e9:b7:1a:cf:9f:cd:49:5c:08:3e:04:41:f4:b7:ae:
                    90:8b:48:0a:80:48:f1:73:cc:65:a7:e9:f8:e4:1f:
                    3e:ab:dc:56:82:a8:21:95:86:55:fc:f1:90:c6:2b:
                    57:ce:0e:6d:f6:e3:97:b0:9f:3d:74:3c:d7:c7:55:
                    07:7d:08:d2:42:64:03:d6:f8:4d:6b:f6:63:bf:5c:
                    b4:29:9b:e0:5c:51:85:f7:19:98:86:c2:0a:6a:44:
                    de:3b:77:3a:15:5c:f6:99:01:34:38:c0:ce:a7:97:
                    be:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:FD:D9:0C:6D:B2:5C:71:26:62:38:19:F7:85:8D:69:C6:BF:28:60
            X509v3 Authority Key Identifier:
                keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/iP3ZDG2yXHEmYjgZ94WNaca_KGA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         4a:6c:2a:b8:94:15:bb:6d:19:52:1e:ee:81:bd:cc:13:8a:22:
         fb:c2:7f:38:60:08:fe:91:1c:ce:6f:2f:04:4e:20:a9:e3:15:
         64:85:09:cd:27:c9:af:3c:21:58:c9:d3:72:ec:af:1f:31:8e:
         e2:8f:90:5a:63:4b:72:f9:68:83:a1:ec:40:8d:48:28:a7:ff:
         59:ad:cf:40:ac:54:c2:99:c9:6f:a7:18:71:d9:4c:9c:36:2a:
         7d:3e:3f:aa:51:df:89:4c:2f:3b:9f:66:17:ee:ce:c9:d1:f1:
         11:b1:ac:77:00:cd:4b:20:c9:3c:95:13:79:b3:5f:eb:f9:0e:
         62:0b:1e:62:3f:3f:0d:9d:1f:09:2f:b3:6f:d8:d8:ea:1d:7e:
         b7:fc:28:f3:32:45:f6:2b:e9:bc:3f:da:2e:96:62:b6:52:7f:
         1b:ea:c5:cb:53:c4:fd:f7:69:6f:12:69:04:53:fd:6b:f8:34:
         4c:53:2a:37:5a:4a:61:f6:bb:cc:2f:db:c2:6a:df:b3:30:84:
         a5:c1:b1:53:95:4d:d7:fa:39:c7:e4:52:d5:f3:23:9e:d7:aa:
         d7:c6:79:47:ff:ca:9b:63:b5:21:c3:87:c4:03:9e:56:7b:65:
         49:94:28:df:c3:97:37:7d:9f:c4:7b:d4:5e:4a:ca:fc:72:8c:
         d5:d7:06:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----