Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/rZm4z6h4eGmpynCSZ09ma6NQr6k.roa
File:                     rZm4z6h4eGmpynCSZ09ma6NQr6k.roa (raw, json)
Hash identifier:          xA/RZ+R7FzR1vY0bZsZu19cJ15e2el7QvvNEM4SssKk=
Subject key identifier:   AD:99:B8:CF:A8:78:78:69:A9:CA:70:92:67:4F:66:6B:A3:50:AF:A9
Certificate issuer:       /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial:       018ECCDC8192A298ABA03A9E053165DEAE75
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/rZm4z6h4eGmpynCSZ09ma6NQr6k.roa
Signing time:             Thu 11 Apr 2024 11:13:06 +0000
ROA not before:           Thu 11 Apr 2024 11:13:06 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:cc:dc:81:92:a2:98:ab:a0:3a:9e:05:31:65:de:ae:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
        Validity
            Not Before: Apr 11 11:13:06 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=ad99b8cfa8787869a9ca7092674f666ba350afa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7f:c6:fa:12:03:6c:4c:ab:01:d4:9a:47:1a:
                    5a:06:c3:d6:e2:10:9e:af:41:41:6d:92:ab:42:14:
                    70:5a:86:0d:cf:74:7a:7d:3d:f7:bd:01:4f:a1:13:
                    a0:c8:f9:2d:8f:a3:4c:5a:07:ee:bd:0c:82:3d:e6:
                    8c:67:a9:2f:07:00:a5:29:8a:f0:9d:32:00:b3:57:
                    f2:ce:bd:31:97:3e:f7:9e:bf:bb:12:46:7d:16:52:
                    04:02:63:2f:a3:51:8e:fb:9b:32:14:0b:f5:34:02:
                    de:f1:ec:79:1c:3e:72:a4:76:27:03:77:14:1a:04:
                    26:e9:98:3e:09:ac:7e:6d:6e:f0:f8:18:e4:46:03:
                    ee:70:ac:b2:b7:26:1e:28:8a:da:78:f6:59:31:b2:
                    e2:3d:70:d0:9d:9b:d9:6d:fe:07:17:17:60:9e:4f:
                    91:89:28:2a:93:9d:20:61:63:e7:c3:83:60:da:90:
                    c8:1f:71:14:c6:37:b4:8e:f8:3a:24:9b:4b:dc:65:
                    dc:0f:65:02:3c:bc:4c:36:8e:b0:3c:f0:c0:55:d6:
                    4b:0e:a8:ba:2f:21:04:c7:f5:b0:42:80:31:94:24:
                    9e:5f:59:8f:29:4a:3e:56:4e:65:6c:a7:dd:3f:01:
                    1b:a1:64:b8:ae:07:83:ca:04:91:75:0c:66:ae:f3:
                    68:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:99:B8:CF:A8:78:78:69:A9:CA:70:92:67:4F:66:6B:A3:50:AF:A9
            X509v3 Authority Key Identifier:
                keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/rZm4z6h4eGmpynCSZ09ma6NQr6k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         78:a8:ea:9a:90:93:16:f1:1e:f9:37:39:a3:0d:37:ea:64:22:
         bf:8a:a3:a7:67:a3:e7:31:d2:d4:da:df:ce:16:6e:d9:03:29:
         d6:42:61:2f:f5:56:7f:38:8c:3c:cc:e0:48:88:c7:57:7e:64:
         0e:3a:72:8e:d9:68:0d:39:5f:72:83:42:35:d2:8d:59:95:69:
         9b:d0:61:14:f9:ad:21:03:b9:5e:06:12:e3:25:76:8e:81:e9:
         dd:14:1d:0e:3d:aa:7b:ec:19:a3:69:27:18:5d:37:5f:c7:b5:
         d9:65:2c:cb:fe:5e:ab:0b:82:68:76:ec:12:df:4e:e0:f4:59:
         2a:7a:8a:23:2a:b9:f2:d4:d0:f2:3f:e8:d3:f7:c9:f0:36:dc:
         46:4b:a6:c1:61:a0:0c:b2:f5:20:83:10:89:57:42:b2:0b:23:
         55:12:66:6a:cd:43:10:4c:b4:ed:2f:00:c6:34:c0:13:6e:7e:
         f1:75:15:3d:56:5a:72:16:94:17:b1:62:e9:05:d1:2b:bb:85:
         96:7d:95:84:8f:f4:a4:70:e1:69:43:e8:e9:96:72:6c:b4:93:
         e2:f4:82:4d:aa:8b:84:c7:81:e6:c6:59:68:a2:8a:f4:31:81:
         81:86:ea:f6:3d:24:84:a8:6e:ea:59:89:e1:a5:6b:ef:b0:d7:
         df:8a:4c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----