Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/jUKcfzIUG6iVxCdo4AqZr-2ajro.roa
File:                     jUKcfzIUG6iVxCdo4AqZr-2ajro.roa (raw, json)
Hash identifier:          I2AIGplZLYJ2z8+vWmKgXG6MUJ9/5Eloduig/UCr2g8=
Subject key identifier:   8D:42:9C:7F:32:14:1B:A8:95:C4:27:68:E0:0A:99:AF:ED:9A:8E:BA
Certificate issuer:       /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial:       018C88A5379D9D738E1C9A8C00E7C316A1C6
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/jUKcfzIUG6iVxCdo4AqZr-2ajro.roa
Signing time:             Wed 20 Dec 2023 19:12:58 +0000
ROA not before:           Wed 20 Dec 2023 19:12:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:88:a5:37:9d:9d:73:8e:1c:9a:8c:00:e7:c3:16:a1:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
        Validity
            Not Before: Dec 20 19:12:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8d429c7f32141ba895c42768e00a99afed9a8eba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c8:5b:47:16:36:22:a0:9a:c9:77:36:27:65:
                    e9:f7:12:33:a8:f7:e7:5d:c0:4c:d2:1a:86:42:8d:
                    f1:0c:33:cc:7a:91:ce:cd:97:90:5f:67:1c:95:de:
                    ce:af:c5:52:09:96:37:51:9f:de:3b:ce:95:53:ff:
                    c7:c1:43:cd:2f:cd:bf:c6:9d:ad:08:6c:1e:c0:5b:
                    b9:9e:a4:d1:87:8d:b8:4b:f7:53:9a:40:39:fa:ef:
                    a6:df:9f:da:37:64:79:da:07:50:9d:42:c1:04:ba:
                    28:26:2c:6d:1c:60:39:d0:40:25:07:5e:91:65:57:
                    fe:2e:10:52:93:5e:68:48:b9:54:5a:70:6a:48:5e:
                    23:55:fc:5c:90:91:0b:90:9d:71:28:da:55:53:55:
                    dc:dc:0d:aa:95:4d:55:c3:12:b6:31:c5:06:6b:43:
                    4c:9d:fd:3a:33:21:6c:93:b7:c7:94:cc:80:6f:fc:
                    7e:ba:7c:66:a4:a2:6d:b3:21:67:7c:87:8e:4d:4a:
                    3f:6c:90:fa:d2:52:d1:79:76:28:68:34:d6:42:e8:
                    37:6b:c6:fa:2d:2f:c9:51:9f:74:22:26:4a:a7:60:
                    82:b3:02:07:a6:e2:7c:31:6b:30:0f:31:58:1f:3d:
                    44:e9:3a:ab:67:af:9b:06:a9:a5:e6:fa:84:7b:01:
                    c6:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:42:9C:7F:32:14:1B:A8:95:C4:27:68:E0:0A:99:AF:ED:9A:8E:BA
            X509v3 Authority Key Identifier:
                keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/jUKcfzIUG6iVxCdo4AqZr-2ajro.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         27:bf:98:b8:2f:59:a2:fe:aa:24:9e:71:d5:ef:e2:dd:75:40:
         80:9f:4b:78:c9:ec:ee:5f:01:1d:65:66:79:80:1e:26:6b:39:
         37:ad:f0:e4:0e:eb:b0:eb:de:fe:dd:9c:ec:0d:2f:a1:94:d2:
         7e:64:00:72:24:3e:1e:65:0b:a8:89:32:38:e8:09:43:e7:d6:
         ca:8c:74:5f:09:b7:75:06:8d:9a:85:0b:e8:e8:0d:74:de:64:
         c6:e8:6b:5f:7a:55:7f:d9:85:37:ef:b1:7c:81:7f:16:ee:88:
         ec:fa:03:c4:a9:1c:17:46:f1:5c:05:1b:5a:87:0e:fa:dc:6a:
         6a:94:10:d9:ce:02:84:10:53:00:99:26:6c:94:e3:12:e8:53:
         cb:79:5a:98:68:4e:a1:83:69:a1:1a:ab:9f:6b:f7:14:a9:b9:
         af:36:bd:b5:f5:5e:6b:24:8f:d9:91:9f:32:bf:29:9b:7a:d4:
         7b:ed:73:c4:5f:e6:c3:18:0f:5a:3d:d8:44:a7:49:16:98:4d:
         08:a6:89:0b:22:2b:f6:06:62:05:d1:92:0c:b2:8c:63:c4:a4:
         39:57:35:b9:02:94:17:08:99:03:ac:f4:97:53:62:5c:35:03:
         76:19:62:f3:ea:b2:f1:9f:22:84:a3:e4:3f:06:c4:9f:99:e7:
         d3:69:70:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----