Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/pmiWyQ0pqFzpt4rXMsNGB6l7dLE.roa
File:                     pmiWyQ0pqFzpt4rXMsNGB6l7dLE.roa (raw, json)
Hash identifier:          uQ4SRAK7sesDiTMk6cQbMgHdM92T5hdJgjD0NIR/sdY=
Subject key identifier:   A6:68:96:C9:0D:29:A8:5C:E9:B7:8A:D7:32:C3:46:07:A9:7B:74:B1
Certificate issuer:       /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial:       018DEBFCC7950786AC910B096DDA1876704E
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/pmiWyQ0pqFzpt4rXMsNGB6l7dLE.roa
Signing time:             Tue 27 Feb 2024 19:13:48 +0000
ROA not before:           Tue 27 Feb 2024 19:13:48 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
                          2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:eb:fc:c7:95:07:86:ac:91:0b:09:6d:da:18:76:70:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
        Validity
            Not Before: Feb 27 19:13:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=a66896c90d29a85ce9b78ad732c34607a97b74b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:18:ec:5b:7c:48:43:d1:6a:71:81:a3:ee:b5:
                    8a:3b:dc:9d:4c:0d:4c:b0:c1:7c:7c:7e:da:b4:58:
                    95:11:f1:58:a1:48:44:d2:57:1e:10:87:00:0a:78:
                    82:0d:1a:92:90:a7:49:f7:fb:56:2d:41:1c:15:76:
                    87:28:c7:a6:5c:2f:e4:a8:15:07:9f:15:c9:ee:f0:
                    d8:af:a1:77:91:fd:f8:a2:5b:c4:bd:ec:d9:17:19:
                    71:e4:ae:fc:e4:4a:5c:8b:04:f8:f4:8d:80:71:e6:
                    73:0d:80:2b:dc:9d:67:6a:71:3a:27:d7:5c:44:95:
                    7d:73:6b:cb:87:d8:25:22:0d:bf:09:ac:16:63:10:
                    1f:09:02:47:53:60:e9:fb:f4:b4:5d:a8:79:2c:02:
                    8e:33:21:6f:08:75:fe:a2:a9:8b:66:f8:8e:24:93:
                    1c:5f:2c:5c:6e:45:dd:2b:90:0e:0d:e9:a8:ed:48:
                    6f:18:99:37:43:a7:e3:f7:ad:77:67:97:1c:d7:ec:
                    ae:d6:52:dd:1a:05:83:0c:aa:9e:cd:b3:48:d3:b4:
                    05:0f:91:f0:59:ca:2d:e9:d5:43:d4:a6:6b:a1:7f:
                    b8:92:d3:93:b8:de:31:32:82:02:26:0f:73:d4:7e:
                    d0:68:9c:55:ca:89:cd:f4:02:44:f6:4f:c2:1d:9a:
                    9c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:68:96:C9:0D:29:A8:5C:E9:B7:8A:D7:32:C3:46:07:A9:7B:74:B1
            X509v3 Authority Key Identifier:
                keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/pmiWyQ0pqFzpt4rXMsNGB6l7dLE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         50:e6:9e:d6:f7:64:8e:1c:0d:b2:15:58:bb:11:8a:11:1d:4a:
         e7:74:db:36:13:bf:da:dc:b9:53:2a:75:07:eb:e7:15:54:cf:
         45:9d:1b:0c:e8:ba:60:bc:ae:81:1d:92:29:ee:80:91:09:2e:
         d2:a0:c3:61:b8:a5:1b:63:12:e2:81:a8:66:1a:a0:c0:d0:0a:
         21:19:98:3f:f1:4f:c1:b8:f6:fe:3c:50:02:c5:2e:ae:aa:4c:
         5a:49:ca:5e:3b:9e:56:a5:c8:1c:1e:39:a2:8a:3e:d4:35:1d:
         dc:16:34:c0:57:4e:d7:5e:1f:55:85:98:37:dd:ef:e9:8b:23:
         52:ea:9c:eb:65:f0:be:27:ef:23:51:1f:97:24:94:62:10:a0:
         86:a2:3a:e5:9d:15:12:6c:d8:9b:01:11:e1:ed:64:a6:fa:23:
         7a:d3:5e:0c:19:9d:cb:bb:71:63:2f:a0:45:60:bb:7b:89:63:
         51:6f:99:98:b0:df:ab:15:5a:b3:d2:58:d6:55:ad:82:4b:de:
         0a:f2:8f:c5:a0:e0:eb:8e:b7:05:26:12:3e:71:ae:e4:28:a1:
         38:d2:a7:fb:ce:94:0a:0c:4b:40:3f:c9:89:7a:2c:c6:4f:8e:
         35:fc:06:96:9e:bc:44:d8:4b:00:57:71:6b:ec:34:92:62:7f:
         aa:10:21:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----