Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/qu7aDjKYBQGkR-Q93abPRiDQdK0.roa
File:                     qu7aDjKYBQGkR-Q93abPRiDQdK0.roa (raw, json)
Hash identifier:          +HWhDEiXsN2naO9FkxkMIeiajXsLV5D6brhUq92edhk=
Subject key identifier:   AA:EE:DA:0E:32:98:05:01:A4:47:E4:3D:DD:A6:CF:46:20:D0:74:AD
Certificate issuer:       /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial:       018DDC1AEBF3CBDF7903AEA7C98DE6695803
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/qu7aDjKYBQGkR-Q93abPRiDQdK0.roa
Signing time:             Sat 24 Feb 2024 17:12:48 +0000
ROA not before:           Sat 24 Feb 2024 17:12:48 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:dc:1a:eb:f3:cb:df:79:03:ae:a7:c9:8d:e6:69:58:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
        Validity
            Not Before: Feb 24 17:12:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=aaeeda0e32980501a447e43ddda6cf4620d074ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:03:f0:21:1d:7e:fb:45:d5:df:49:65:94:37:
                    8a:9c:bf:b0:75:dd:b6:3a:7f:ba:63:42:32:dc:d8:
                    57:2c:d0:0c:8c:42:08:ed:13:1c:8d:c0:e4:76:72:
                    97:75:58:1d:e6:33:c4:07:32:91:55:5a:e3:01:63:
                    72:86:bb:cc:29:92:b2:0e:0c:d3:65:fd:a7:4e:bf:
                    a0:0e:b8:31:fa:d7:ec:b0:43:46:a0:b3:7f:04:95:
                    87:ed:bf:33:0d:16:87:b7:e9:42:95:99:23:61:22:
                    b2:f9:fb:04:00:05:5a:d1:75:3c:68:8e:ef:73:77:
                    15:a6:53:98:b2:57:8f:05:82:8e:c2:ba:88:fb:ad:
                    fd:18:31:3c:0e:31:3a:bf:8f:68:71:14:74:2c:f5:
                    42:79:57:7f:a5:0d:28:48:13:f3:1d:68:41:3d:af:
                    a2:6d:2b:a5:49:aa:4c:e1:8d:47:cf:70:29:9e:e0:
                    26:16:33:07:88:5e:18:f0:4e:9b:3d:d7:4e:90:74:
                    df:51:0c:87:20:1a:ff:07:20:2f:6e:a9:72:a7:6f:
                    42:31:73:53:c9:66:42:fa:38:cc:26:f4:b3:20:66:
                    6a:97:6a:50:12:cf:65:7b:9a:b6:be:f8:8a:a6:bf:
                    94:1a:dd:ae:01:80:b4:dd:21:cb:16:d9:e5:0f:dd:
                    8b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:EE:DA:0E:32:98:05:01:A4:47:E4:3D:DD:A6:CF:46:20:D0:74:AD
            X509v3 Authority Key Identifier:
                keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/qu7aDjKYBQGkR-Q93abPRiDQdK0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         55:ec:fc:47:0c:69:f6:d6:da:e2:ae:c0:0b:37:e6:b3:a1:2c:
         b4:f9:e5:ba:2e:d2:27:7c:ab:1a:50:39:88:4c:84:b2:ef:8f:
         e6:5d:be:de:d2:8b:76:61:99:19:cc:80:8c:3f:5a:57:c7:ce:
         a5:02:eb:fd:e5:19:c9:fb:98:b2:ac:98:f7:b4:13:96:4f:c9:
         22:6a:c8:b3:3b:43:52:8d:b4:c4:d9:5b:2c:b7:06:96:77:b2:
         d5:dc:3d:8e:2c:da:15:5c:0c:e1:ab:63:f5:4d:a8:4d:3d:78:
         2a:2a:a7:35:0c:b1:e5:c7:af:a8:f8:06:25:71:32:c7:a8:66:
         96:15:fd:9f:1b:75:d3:01:8c:ab:14:73:a5:ed:a4:42:2c:46:
         8d:d6:6c:8e:ae:b6:a7:8c:53:78:85:a4:78:ca:a7:60:ee:b9:
         8e:c7:71:59:6b:96:17:ad:00:60:96:34:cf:7f:8c:1d:0e:b3:
         4b:9d:98:92:0f:a0:a1:23:35:b6:c5:12:1c:be:9f:4b:d5:64:
         0a:51:9f:8e:c9:84:ec:4e:32:45:1c:02:36:3b:d3:9d:7f:21:
         87:5c:02:23:d7:40:a2:16:ee:3f:33:a3:89:0c:9b:b6:ba:7e:
         e0:43:57:2c:c2:cb:e7:4b:3b:04:3b:1c:3d:2b:e0:80:90:71:
         45:7b:f8:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----