Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/lCOYySdeyGDYU3cYpVf4_cXPALs.roa
File:                     lCOYySdeyGDYU3cYpVf4_cXPALs.roa (raw, json)
Hash identifier:          cy4FtPvHSzoa7ySPRw2yU/h+40WB6joNv7KYDS3Qa48=
Subject key identifier:   94:23:98:C9:27:5E:C8:60:D8:53:77:18:A5:57:F8:FD:C5:CF:00:BB
Certificate issuer:       /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial:       018DD18FF31B27C30F56B0DA9EEC9D60E782
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/lCOYySdeyGDYU3cYpVf4_cXPALs.roa
Signing time:             Thu 22 Feb 2024 16:04:48 +0000
ROA not before:           Thu 22 Feb 2024 16:04:48 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
                          2001:67c:64:ffff:0:18d:d18f:8513/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:d1:8f:f3:1b:27:c3:0f:56:b0:da:9e:ec:9d:60:e7:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
        Validity
            Not Before: Feb 22 16:04:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=942398c9275ec860d8537718a557f8fdc5cf00bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:0b:2b:1b:2f:31:e4:54:1f:ac:34:29:4b:f3:
                    ae:b8:c1:18:2e:2e:2e:48:aa:70:03:3c:27:e4:a5:
                    6c:7c:fe:97:9c:0b:3d:10:8f:d4:1e:b0:98:d1:44:
                    a0:a2:ef:19:de:5b:7c:09:99:3e:c0:f1:a2:52:09:
                    39:78:7c:4e:03:26:8b:09:28:c0:9f:06:c9:91:d5:
                    36:6a:9e:6f:bc:65:2b:dd:00:84:12:a3:3d:76:0d:
                    72:b9:20:e4:28:10:8e:12:ec:b5:de:ee:70:5a:17:
                    71:2c:6c:4c:34:2a:3b:c3:ad:b9:5c:77:eb:f3:d0:
                    01:89:8d:7b:52:76:c1:9f:d7:1e:9f:31:7e:90:a4:
                    ac:9a:04:0e:cd:2f:94:3b:2e:dd:5c:25:36:ae:a4:
                    64:60:44:65:a2:4a:7a:5a:aa:de:8e:d4:ac:f0:99:
                    85:8e:2e:c8:0c:15:ce:be:28:ff:63:7c:66:7e:f1:
                    1e:77:15:d5:25:77:d3:05:f7:fc:44:78:a5:d5:5d:
                    b2:0f:0c:9a:2b:11:bf:55:75:dd:9a:3a:1a:37:2a:
                    ed:ef:ba:c9:cf:ec:d7:6b:39:a8:72:46:fd:53:09:
                    5a:68:3e:73:46:2f:f7:30:db:26:2f:32:70:70:cd:
                    a5:be:84:40:b7:2b:e4:d5:3e:0e:42:e5:14:57:20:
                    90:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:23:98:C9:27:5E:C8:60:D8:53:77:18:A5:57:F8:FD:C5:CF:00:BB
            X509v3 Authority Key Identifier:
                keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/lCOYySdeyGDYU3cYpVf4_cXPALs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         78:43:a4:ad:db:01:75:60:6a:b6:36:d0:99:40:53:a8:95:7b:
         16:b9:be:db:68:8d:1e:32:74:e4:24:5b:bc:4a:9c:f5:c2:68:
         f0:4f:d8:66:8d:eb:2e:77:d7:0b:f2:2e:b7:f4:8a:50:c5:80:
         61:c8:91:30:81:53:b6:06:4d:da:ff:a1:2c:f7:b3:c5:0e:8a:
         d8:f8:79:5e:c4:e5:8e:eb:d8:58:db:9b:0f:ff:fc:c3:df:76:
         22:17:cc:51:08:bb:31:75:c0:af:61:f4:b8:1f:6f:36:06:98:
         76:59:2b:21:ad:aa:40:74:49:0c:1a:3b:d4:19:91:12:96:4d:
         52:28:f3:3e:21:8a:b1:0a:4d:54:bb:b0:76:45:0c:c6:c1:40:
         d1:a4:05:fb:b6:3a:65:85:35:7d:d3:42:3e:44:85:61:49:32:
         9b:b9:bb:14:ac:3d:9f:e7:3a:e5:12:b8:75:bb:44:3f:1d:1d:
         45:92:46:1b:87:a2:a9:5a:4a:6d:a8:5b:0c:f5:96:19:8b:08:
         9d:17:15:c3:9a:18:37:1b:10:d2:0c:23:89:bd:63:5d:16:cb:
         68:cd:c5:03:c3:bd:25:af:5d:3f:98:94:3f:73:cd:53:40:07:
         03:1f:50:37:41:2b:29:c6:c4:a1:21:c7:cc:5b:34:63:a4:2f:
         61:07:98:b4
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY3Rj/MbJ8MPVrDanuydYOeCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMjIyMTYwNDQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NDIzOThjOTI3NWVjODYwZDg1Mzc3MThhNTU3ZjhmZGM1Y2YwMGJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAsrGy8x5FQfrDQpS/OuuMEYLi4u
SKpwAzwn5KVsfP6XnAs9EI/UHrCY0USgou8Z3lt8CZk+wPGiUgk5eHxOAyaLCSjA
nwbJkdU2ap5vvGUr3QCEEqM9dg1yuSDkKBCOEuy13u5wWhdxLGxMNCo7w625XHfr
89ABiY17UnbBn9cenzF+kKSsmgQOzS+UOy7dXCU2rqRkYERlokp6WqrejtSs8JmF
ji7IDBXOvij/Y3xmfvEedxXVJXfTBff8RHil1V2yDwyaKxG/VXXdmjoaNyrt77rJ
z+zXazmockb9UwlaaD5zRi/3MNsmLzJwcM2lvoRAtyvk1T4OQuUUVyCQxQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJQjmMknXshg2FN3GKVX+P3FzwC7MB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvbENPWXlTZGV5R0RZVTNjWXBWZjRfY1hQQUxzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHhDpK3bAXVgarY20JlA
U6iVexa5vttojR4ydOQkW7xKnPXCaPBP2GaN6y531wvyLrf0ilDFgGHIkTCBU7YG
Tdr/oSz3s8UOitj4eV7E5Y7r2Fjbmw///MPfdiIXzFEIuzF1wK9h9LgfbzYGmHZZ
KyGtqkB0SQwaO9QZkRKWTVIo8z4hirEKTVS7sHZFDMbBQNGkBfu2OmWFNX3TQj5E
hWFJMpu5uxSsPZ/nOuUSuHW7RD8dHUWSRhuHoqlaSm2oWwz1lhmLCJ0XFcOaGDcb
ENIMI4m9Y10Wy2jNxQPDvSWvXT+YlD9zzVNABwMfUDdBKynGxKEhx8xbNGOkL2EH
mLQ=
-----END CERTIFICATE-----