Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/pRHotrezNKeaqJrvAvYg5DhsGq4.roa
File:                     pRHotrezNKeaqJrvAvYg5DhsGq4.roa (raw, json)
Hash identifier:          VaOO98BnveLLAyVnyc8ynHJf8Tde4uevwsNPGQMhS8I=
Subject key identifier:   A5:11:E8:B6:B7:B3:34:A7:9A:A8:9A:EF:02:F6:20:E4:38:6C:1A:AE
Certificate issuer:       /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial:       018CB81032532BEE5BB8CC3B5D0B2F1B7808
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/pRHotrezNKeaqJrvAvYg5DhsGq4.roa
Signing time:             Sat 30 Dec 2023 00:11:58 +0000
ROA not before:           Sat 30 Dec 2023 00:11:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:b8:10:32:53:2b:ee:5b:b8:cc:3b:5d:0b:2f:1b:78:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
        Validity
            Not Before: Dec 30 00:11:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a511e8b6b7b334a79aa89aef02f620e4386c1aae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d0:ad:b9:4f:8a:5d:50:8d:ff:04:30:c1:b1:
                    56:b7:0d:21:31:6c:d2:5d:52:44:b8:e6:2d:41:f9:
                    f1:38:49:5f:bd:da:89:a2:83:27:af:8b:96:ad:25:
                    e8:d9:d5:29:ed:33:02:e9:aa:d2:b8:95:d2:8c:56:
                    f5:55:54:ca:89:3e:3a:e0:79:05:62:c8:93:10:ac:
                    52:d4:33:5f:5d:2d:6a:d5:a4:13:a1:27:e7:7e:b9:
                    0c:56:a0:c2:7a:f2:4e:cf:2d:4f:13:85:dc:69:2d:
                    fb:d4:47:5f:8f:5d:19:14:bc:ed:d5:25:6d:36:e9:
                    cf:b1:f1:a6:85:36:22:2a:1b:2e:7d:90:ed:8e:f3:
                    dc:63:58:f3:21:e3:c1:31:f1:84:f1:bb:40:c2:3d:
                    fc:71:75:56:99:a5:bb:78:8a:5d:49:8d:9e:d4:fd:
                    ff:e3:db:0e:42:9e:f7:ac:98:cc:a1:10:cf:22:a7:
                    4d:a8:d9:4a:7a:a2:c3:d4:81:41:fc:04:86:cc:57:
                    a0:d6:34:39:0a:73:2d:c8:0e:f4:d9:3f:58:e0:b0:
                    0d:d8:b7:d0:a4:54:8b:28:15:fb:39:fc:0d:55:d5:
                    19:63:0d:56:dd:f0:e8:d9:fb:9f:34:cd:48:ef:3e:
                    26:ff:a6:ff:f8:ca:fd:d0:28:60:18:6d:a1:07:94:
                    fb:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:11:E8:B6:B7:B3:34:A7:9A:A8:9A:EF:02:F6:20:E4:38:6C:1A:AE
            X509v3 Authority Key Identifier:
                keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/pRHotrezNKeaqJrvAvYg5DhsGq4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         07:f5:de:f7:56:20:0b:0b:01:ba:74:ab:9c:3a:11:5f:4e:54:
         c3:25:c6:3b:eb:c4:14:44:3f:b8:ac:35:e6:8a:48:b7:f0:06:
         e7:74:d5:ae:92:5b:46:10:ba:43:51:f4:67:b2:6d:29:98:a0:
         4f:e9:4d:47:2b:20:f9:e8:6b:98:a4:16:1d:a4:c9:ff:ef:83:
         43:7a:17:88:c8:e3:a6:cd:e8:d4:ca:10:86:3c:39:9b:75:66:
         ac:ab:d6:fc:65:65:2f:14:cd:6e:4c:64:c9:1f:55:4a:b5:a4:
         68:b7:c1:25:e2:5d:4f:5c:7d:8d:3f:4c:a5:a4:80:c8:25:ec:
         d5:9e:de:71:14:d4:21:5a:d0:9a:34:04:be:ce:ca:ee:93:40:
         58:ec:48:5a:af:a3:6b:97:4d:4c:cc:16:ec:89:91:5c:12:86:
         89:eb:15:c7:48:c0:d0:d0:c6:dd:11:bf:65:8b:14:c3:5f:c7:
         50:33:ff:47:f1:26:ea:f5:4d:ff:ec:fb:53:93:d9:3e:7b:f7:
         e0:3e:5a:a8:26:8e:8d:85:77:52:ae:18:13:6a:8f:aa:ec:dc:
         65:1a:40:09:58:3c:19:de:6e:86:b1:43:40:ad:e2:97:a0:b4:
         2d:4f:84:65:4b:c0:30:d8:88:54:71:3e:ff:45:67:bd:01:6f:
         17:a5:12:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----