Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/oH9hZ_z4Rd0jrEQxHzWE43rYOdY.roa
File:                     oH9hZ_z4Rd0jrEQxHzWE43rYOdY.roa (raw, json)
Hash identifier:          9h9gjJ/9uUJi2IdV09mGps1gDzw/zl5eVOFxCgFVLco=
Subject key identifier:   A0:7F:61:67:FC:F8:45:DD:23:AC:44:31:1F:35:84:E3:7A:D8:39:D6
Certificate issuer:       /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial:       018CFF842B5D84C78EA652CF4D9FF2D52448
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/oH9hZ_z4Rd0jrEQxHzWE43rYOdY.roa
Signing time:             Fri 12 Jan 2024 21:11:41 +0000
ROA not before:           Fri 12 Jan 2024 21:11:41 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ff:84:2b:5d:84:c7:8e:a6:52:cf:4d:9f:f2:d5:24:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
        Validity
            Not Before: Jan 12 21:11:41 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=a07f6167fcf845dd23ac44311f3584e37ad839d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9e:a4:07:93:6e:76:af:05:d2:e9:ae:d6:e5:
                    ca:fa:e1:fb:45:a0:04:6a:4d:aa:03:08:ad:5b:e2:
                    07:bb:a7:e2:aa:43:98:bc:c4:81:31:51:12:f7:dd:
                    95:6e:07:be:18:02:3f:01:70:24:4e:66:61:9e:37:
                    95:11:4b:db:ac:df:1f:d7:d7:de:a6:45:39:9c:e5:
                    2e:a0:75:ff:de:40:69:5a:a0:f7:b2:9b:71:82:a5:
                    2d:f8:02:f7:2d:41:f9:d5:a1:ee:71:37:09:2d:86:
                    49:7f:10:3e:c1:2f:8a:48:1f:27:ce:df:23:77:76:
                    b4:e9:d2:09:ea:48:33:57:0b:cc:3d:b5:38:58:e6:
                    3c:1d:5f:04:52:6d:09:86:a9:c1:03:c6:ab:a0:dc:
                    a6:e8:b4:75:db:50:9b:ba:23:3b:41:7e:1f:64:ea:
                    42:b1:4b:92:b8:7a:b6:f5:2f:71:0a:78:18:79:26:
                    22:e4:83:20:97:b6:ce:d1:19:84:bc:d7:45:e7:47:
                    f7:13:e7:27:c3:94:f1:6b:9a:3c:70:cf:f8:fe:d8:
                    08:d2:46:b3:67:9b:ac:cb:53:0d:f9:44:86:17:f2:
                    6b:e7:3c:c3:dd:ff:20:9f:49:9d:78:e8:9d:47:b0:
                    3f:e7:2e:a0:d5:63:3a:c9:2c:33:c5:0f:f3:04:a8:
                    c3:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:7F:61:67:FC:F8:45:DD:23:AC:44:31:1F:35:84:E3:7A:D8:39:D6
            X509v3 Authority Key Identifier:
                keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/oH9hZ_z4Rd0jrEQxHzWE43rYOdY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         19:bb:8e:b1:76:04:50:0b:de:6a:c4:ae:f3:18:45:50:a3:eb:
         40:f2:cc:87:ea:e3:82:a8:d5:ed:2a:f5:39:42:9c:e2:31:66:
         0c:de:d4:eb:e3:6d:ff:0e:29:f1:97:e8:54:3e:c7:c0:9f:7f:
         98:55:28:2c:26:20:0b:46:23:6a:31:42:8f:11:a2:1f:ff:14:
         dc:5f:37:91:e4:f9:a2:62:bf:9e:df:20:fd:2f:78:06:07:1d:
         0a:4c:49:4e:5c:8d:e8:e9:5b:0d:e5:e5:2d:47:00:3e:9e:4f:
         f4:1b:a1:e9:58:26:88:fd:d0:a3:50:59:78:1a:a8:14:fa:da:
         d8:6d:c2:0f:8c:44:1f:74:fa:1d:24:45:c3:06:94:02:25:af:
         1a:61:8b:47:f2:c5:d6:41:a0:15:ee:32:b1:18:eb:78:a0:ce:
         1e:70:f2:63:34:18:39:d0:a2:c0:0d:a1:82:d7:88:22:eb:f7:
         a6:e4:c1:1f:46:1f:f8:89:c7:37:51:b6:14:74:33:d2:cb:af:
         99:6d:d5:55:20:af:56:d4:1d:37:d6:40:69:49:ba:57:19:ea:
         5f:8f:87:fd:87:09:7b:c5:88:e2:f5:e5:7c:0a:16:dd:e4:12:
         7b:65:07:5e:88:77:17:f4:5c:c2:1c:56:22:13:49:a0:be:77:
         d3:05:f9:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----