Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/lCxylkiDvFjpuHF9kFeoCuDHkfo.roa
File:                     lCxylkiDvFjpuHF9kFeoCuDHkfo.roa (raw, json)
Hash identifier:          pyaVrTfRDWMMfNEMCkghlajm3PntUn6/fHPPcxbygKg=
Subject key identifier:   94:2C:72:96:48:83:BC:58:E9:B8:71:7D:90:57:A8:0A:E0:C7:91:FA
Certificate issuer:       /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial:       018E396ACF6B3E718AD8C54A4365F4F30618
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/lCxylkiDvFjpuHF9kFeoCuDHkfo.roa
Signing time:             Wed 13 Mar 2024 20:04:44 +0000
ROA not before:           Wed 13 Mar 2024 20:04:44 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
                          2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
                          2001:67c:64:ffff:0:18e:396a:6944/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:39:6a:cf:6b:3e:71:8a:d8:c5:4a:43:65:f4:f3:06:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
        Validity
            Not Before: Mar 13 20:04:44 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=942c72964883bc58e9b8717d9057a80ae0c791fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9f:b8:30:8a:82:cb:69:f0:6a:21:7c:27:08:
                    d9:30:68:38:f6:19:f0:1f:ec:cc:31:51:01:aa:54:
                    d8:c0:53:df:59:6e:c8:9a:eb:f3:33:2a:a6:48:df:
                    fe:7b:52:7a:43:f5:33:43:c3:e5:ee:c8:22:ea:54:
                    7b:7d:cb:b8:64:0d:86:08:96:51:11:c6:bb:84:20:
                    fe:f5:26:17:7b:bc:17:7c:4e:ff:0b:9a:d3:22:47:
                    d2:68:5d:ef:af:9a:92:6a:6e:60:8a:27:73:44:32:
                    bd:29:ab:57:45:ed:c9:ae:3f:e8:f4:dd:fb:d4:20:
                    a9:6a:d1:16:f4:4c:be:0a:f8:55:ae:84:6a:41:12:
                    4f:f8:5e:8b:ba:c3:81:17:f5:28:14:49:4b:78:5f:
                    d6:2a:b0:db:e6:5a:4b:5d:98:17:44:33:10:08:d1:
                    1e:89:cf:f3:1e:d1:bb:a3:54:2a:5d:23:d3:57:62:
                    26:03:8e:11:f3:b6:a4:29:69:99:fa:6a:85:56:94:
                    b3:49:64:86:7f:ad:39:a3:5e:d1:49:d9:d2:7e:99:
                    78:8c:4c:70:14:d2:cf:92:42:92:92:ca:3e:5c:8d:
                    41:f4:ec:47:d0:e8:81:99:84:e1:27:69:19:39:89:
                    2f:8a:c3:75:1c:4d:af:31:bf:db:13:ce:3f:46:28:
                    44:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:2C:72:96:48:83:BC:58:E9:B8:71:7D:90:57:A8:0A:E0:C7:91:FA
            X509v3 Authority Key Identifier:
                keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/lCxylkiDvFjpuHF9kFeoCuDHkfo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         16:04:b0:f3:71:a8:55:43:1a:7d:73:97:64:78:be:01:59:30:
         24:3b:19:f6:b2:a4:ad:4c:e8:b1:6f:96:d0:1e:14:9f:bf:d6:
         5c:3c:81:16:19:bd:79:5a:eb:6f:91:57:69:d6:d3:73:2a:30:
         3a:2b:82:fe:7b:ba:0a:f4:d8:21:7c:d0:77:d2:26:33:d3:15:
         f4:4b:7d:9a:0a:52:37:54:53:e1:83:a6:d2:f1:7e:bf:9b:09:
         47:d1:dd:2c:a1:d0:90:b5:f8:42:ba:83:b5:1f:bf:05:5a:f7:
         6d:07:37:a3:9b:6c:34:6a:68:ef:9a:3f:bd:6c:46:62:51:6d:
         98:03:4d:92:da:a3:ff:07:81:78:89:a5:ad:df:fb:13:3f:2b:
         54:0b:3b:11:7d:9b:6a:1c:10:2a:5f:57:93:93:11:dc:6b:cb:
         c7:8b:59:e5:c9:89:12:b1:b9:bf:0e:99:02:a8:a5:2c:f2:68:
         6b:5b:a7:72:6d:c5:43:c9:d0:1a:39:ff:da:80:9a:c4:41:85:
         97:56:0a:0f:4e:8d:91:18:02:92:ee:88:33:7d:d0:37:fe:8d:
         49:8d:45:67:94:8c:d4:a3:c6:19:53:a7:a7:9e:95:0c:1d:44:
         c1:4d:f8:13:41:ce:76:00:8d:78:a5:0b:1c:49:10:10:fc:27:
         0b:7e:a3:a9
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY45as9rPnGK2MVKQ2X08wYYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMzEzMjAwNDQ0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NDJjNzI5NjQ4ODNiYzU4ZTliODcxN2Q5MDU3YTgwYWUwYzc5MWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwp+4MIqCy2nwaiF8JwjZMGg49hnw
H+zMMVEBqlTYwFPfWW7ImuvzMyqmSN/+e1J6Q/UzQ8Pl7sgi6lR7fcu4ZA2GCJZR
Eca7hCD+9SYXe7wXfE7/C5rTIkfSaF3vr5qSam5giidzRDK9KatXRe3Jrj/o9N37
1CCpatEW9Ey+CvhVroRqQRJP+F6LusOBF/UoFElLeF/WKrDb5lpLXZgXRDMQCNEe
ic/zHtG7o1QqXSPTV2ImA44R87akKWmZ+mqFVpSzSWSGf605o17RSdnSfpl4jExw
FNLPkkKSkso+XI1B9OxH0OiBmYThJ2kZOYkvisN1HE2vMb/bE84/RihEMwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJQscpZIg7xY6bhxfZBXqArgx5H6MB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvbEN4eWxraUR2RmpwdUhGOWtGZW9DdURIa2ZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABYEsPNxqFVDGn1zl2R4
vgFZMCQ7GfaypK1M6LFvltAeFJ+/1lw8gRYZvXla62+RV2nW03MqMDorgv57ugr0
2CF80HfSJjPTFfRLfZoKUjdUU+GDptLxfr+bCUfR3Syh0JC1+EK6g7UfvwVa920H
N6ObbDRqaO+aP71sRmJRbZgDTZLao/8HgXiJpa3f+xM/K1QLOxF9m2ocECpfV5OT
Edxry8eLWeXJiRKxub8OmQKopSzyaGtbp3JtxUPJ0Bo5/9qAmsRBhZdWCg9OjZEY
ApLuiDN90Df+jUmNRWeUjNSjxhlTp6eelQwdRMFN+BNBznYAjXilCxxJEBD8Jwt+
o6k=
-----END CERTIFICATE-----