Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ocP7zPxS8GmwtG8evzs2B_w20OU.roa
File:                     ocP7zPxS8GmwtG8evzs2B_w20OU.roa (raw, json)
Hash identifier:          vp8Q17F6I35/7O/39fkE6VZZhXJ8V87VrNmSFjDXKrk=
Subject key identifier:   A1:C3:FB:CC:FC:52:F0:69:B0:B4:6F:1E:BF:3B:36:07:FC:36:D0:E5
Certificate issuer:       /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial:       018CCED35F0ACE488AF696399A3A344D7705
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ocP7zPxS8GmwtG8evzs2B_w20OU.roa
Signing time:             Wed 03 Jan 2024 10:16:48 +0000
ROA not before:           Wed 03 Jan 2024 10:16:48 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ce:d3:5f:0a:ce:48:8a:f6:96:39:9a:3a:34:4d:77:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
        Validity
            Not Before: Jan  3 10:16:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=a1c3fbccfc52f069b0b46f1ebf3b3607fc36d0e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:b5:b0:bb:96:4b:02:97:48:3a:a7:c3:dc:89:
                    f5:d0:03:77:d5:74:6c:70:40:4c:d9:e7:f1:e6:70:
                    2f:68:3b:b3:ac:37:df:d5:a0:90:24:b1:c9:38:77:
                    67:09:e3:3b:7c:46:c2:00:09:62:42:ee:c7:af:32:
                    e8:55:a1:85:c1:05:36:b6:d8:48:45:e5:71:8c:e5:
                    9d:69:5e:41:31:d0:67:1a:ca:b0:60:20:d4:86:95:
                    ef:b4:88:9f:42:ab:fe:91:8a:e9:aa:5c:0b:47:50:
                    df:26:ee:87:83:2f:05:2a:3d:3e:0d:ae:86:e6:6b:
                    b7:89:3a:eb:94:ae:49:c1:bb:b0:2e:83:24:e3:69:
                    73:e4:bd:7d:cb:bc:1c:08:0b:e9:c9:7c:38:17:fb:
                    05:b3:d7:be:49:62:77:1a:74:b0:3d:99:c6:7c:8b:
                    9d:26:17:db:71:a9:f6:3e:a2:07:ad:a6:92:4c:51:
                    c0:aa:da:28:6f:25:9f:a4:99:71:97:71:22:1d:58:
                    ed:c1:18:17:86:11:bc:13:34:de:09:f4:aa:ab:45:
                    10:40:f1:2f:96:d6:93:10:50:02:a6:07:61:9a:9d:
                    ad:b0:4b:6d:d5:1c:a5:43:88:6a:7d:1e:80:f2:15:
                    47:a2:b4:97:f2:e8:57:8e:af:e7:c2:3d:a3:d0:b9:
                    16:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:C3:FB:CC:FC:52:F0:69:B0:B4:6F:1E:BF:3B:36:07:FC:36:D0:E5
            X509v3 Authority Key Identifier:
                keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ocP7zPxS8GmwtG8evzs2B_w20OU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         50:61:79:53:2c:56:fd:48:b7:7c:f5:b9:f4:05:64:98:5f:67:
         81:3d:49:90:6e:ec:04:63:89:85:e5:16:bb:93:bd:ba:a4:df:
         b1:83:f5:d9:40:2f:d4:62:d8:06:6d:fd:e3:a1:57:c2:f9:63:
         3d:8c:d5:f7:8e:dc:a5:08:98:1b:91:40:e0:ae:6c:62:70:22:
         cf:d3:ee:dd:52:5b:2b:69:6d:6e:53:5f:8c:4d:c6:3d:04:be:
         82:43:38:e1:c2:6f:06:cf:be:24:cc:c9:0e:c3:a7:c9:ad:d7:
         6d:c9:ef:13:36:ba:ca:57:f6:b3:57:d6:79:63:f0:d3:b4:a1:
         22:72:87:b6:d6:13:54:76:92:37:e9:fb:47:23:44:35:ec:cf:
         b4:69:8a:7a:36:a7:2c:0e:c9:83:b9:2b:62:25:72:59:68:0e:
         5b:6d:3d:1a:c6:cf:66:e0:0b:8e:92:f4:56:13:cd:94:6c:b6:
         f6:b8:a5:fb:01:cf:5c:38:75:38:22:60:b2:cb:a9:2a:b7:67:
         94:f8:a9:9b:d9:51:27:f5:32:1e:29:d2:1f:8e:90:9b:c1:03:
         b4:a1:9f:d5:bc:6c:51:87:6d:2a:f2:81:bd:e3:f0:21:cc:85:
         84:69:b5:6c:7d:4c:10:81:51:47:52:25:df:e7:ab:d3:13:2a:
         a9:ce:ed:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----