Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/jqUf4dOOanb2KlSoey1JEFEODAc.roa
File:                     jqUf4dOOanb2KlSoey1JEFEODAc.roa (raw, json)
Hash identifier:          5NJFrkehA9+GXhd5KIAblecGYHHf/EgVYzPtxL+RoDs=
Subject key identifier:   8E:A5:1F:E1:D3:8E:6A:76:F6:2A:54:A8:7B:2D:49:10:51:0E:0C:07
Certificate issuer:       /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial:       018EAFA6482586258F8228A09664EB0F2A61
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/jqUf4dOOanb2KlSoey1JEFEODAc.roa
Signing time:             Fri 05 Apr 2024 19:04:53 +0000
ROA not before:           Fri 05 Apr 2024 19:04:53 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18e:afa5:e245/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:af:a6:48:25:86:25:8f:82:28:a0:96:64:eb:0f:2a:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
        Validity
            Not Before: Apr  5 19:04:53 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=8ea51fe1d38e6a76f62a54a87b2d4910510e0c07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c6:40:76:ec:da:9f:2c:5d:fe:f4:09:54:37:
                    ba:9f:fe:85:14:a1:94:2f:22:42:90:a3:b8:61:e7:
                    ff:99:8f:e4:34:34:45:91:4f:2d:49:d7:95:28:1b:
                    01:a4:6d:37:f2:21:fe:fe:45:01:de:66:8f:0b:68:
                    4a:4a:f9:d0:36:52:2a:9b:49:dd:f0:60:07:01:fe:
                    d9:27:38:1f:53:6d:e8:af:7b:77:08:67:ae:69:7d:
                    ad:1c:07:68:3a:ab:18:71:65:4f:d5:b9:aa:a6:db:
                    ea:40:2a:65:2a:6b:83:85:f0:8f:91:16:bf:eb:70:
                    0e:9d:d5:24:74:0b:20:1a:b9:56:56:e0:74:da:6f:
                    07:86:cd:58:f7:80:ea:f1:26:96:fb:e2:e8:18:ba:
                    58:2f:76:b5:fd:e5:2e:da:74:ce:d7:97:bc:cd:70:
                    c6:22:72:2a:49:c4:70:6b:b2:a3:32:8d:c7:fb:18:
                    7b:ad:c1:e7:52:f3:b7:4d:20:41:f2:9c:32:db:85:
                    c7:bb:8a:f6:f7:b3:13:3b:03:d5:8b:4a:4d:d7:7d:
                    e9:04:d6:3e:56:c4:cd:10:57:57:02:43:e5:e5:ce:
                    02:5e:45:b9:42:32:78:81:cb:12:bd:9e:f7:43:ef:
                    08:76:c4:4b:98:a1:4e:6b:eb:ff:a2:92:a4:b6:ce:
                    a7:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:A5:1F:E1:D3:8E:6A:76:F6:2A:54:A8:7B:2D:49:10:51:0E:0C:07
            X509v3 Authority Key Identifier:
                keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/jqUf4dOOanb2KlSoey1JEFEODAc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         33:f5:b7:5a:f4:8d:d5:ef:bb:15:e9:fd:1a:12:e6:14:12:d2:
         2e:b6:f0:96:9f:db:a0:eb:2b:c5:b0:c2:84:52:ed:ff:dd:95:
         46:78:bb:95:9c:59:42:94:a2:dc:8e:2c:f2:6c:53:40:e2:cc:
         66:2b:82:c7:40:88:91:74:ed:d1:fb:c1:90:32:3c:17:82:39:
         fe:44:a8:4a:b6:23:b6:1f:66:e5:c8:9b:a5:04:bd:22:08:c3:
         a1:76:a5:1e:1c:eb:ce:78:f7:57:62:dd:25:ab:67:2a:5c:58:
         3b:70:e7:37:35:67:b1:27:d7:03:43:5f:34:b6:8a:73:db:32:
         71:96:5e:11:c2:b5:df:50:8c:bd:4b:9a:18:2c:16:0e:5a:75:
         5d:c5:3e:d7:7a:44:fd:77:ee:e4:64:1f:a0:30:06:33:cf:25:
         69:4f:ab:5a:86:f2:40:c6:1a:ed:a5:35:73:cc:c6:04:59:bf:
         c1:d0:e2:a4:80:2d:57:2c:d1:d6:43:6d:bb:f2:49:94:1d:e8:
         7a:24:05:24:49:5f:c2:d1:5c:0b:49:5f:aa:eb:7f:6a:af:7c:
         91:69:35:b9:f5:88:50:b8:eb:c1:4b:8b:2b:5c:71:de:7f:ff:
         e0:4d:b8:a3:4c:44:7b:01:5b:f1:7f:31:a7:29:d9:79:ba:d0:
         5f:f8:6d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----