Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/rtjUV7qBGK8l-5R63IcHNRy_uGI.roa
File:                     rtjUV7qBGK8l-5R63IcHNRy_uGI.roa (raw, json)
Hash identifier:          qBi/IUSZ+qLjhfBKYE6tyJsH34eFqYu+2c4e18xoQPo=
Subject key identifier:   AE:D8:D4:57:BA:81:18:AF:25:FB:94:7A:DC:87:07:35:1C:BF:B8:62
Certificate issuer:       /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial:       018DC4BAA193526549562B9004FC129DE0C9
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/rtjUV7qBGK8l-5R63IcHNRy_uGI.roa
Signing time:             Tue 20 Feb 2024 04:16:21 +0000
ROA not before:           Tue 20 Feb 2024 04:16:21 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
                          2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:c4:ba:a1:93:52:65:49:56:2b:90:04:fc:12:9d:e0:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
        Validity
            Not Before: Feb 20 04:16:21 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=aed8d457ba8118af25fb947adc8707351cbfb862
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:c7:a7:3a:b0:23:0f:94:0e:bb:54:8a:41:8d:
                    d3:8b:f3:b9:6b:85:4d:08:70:86:c0:cb:b0:af:77:
                    72:63:09:48:6a:78:23:95:3d:60:27:80:bd:f3:bf:
                    6c:f1:dd:f0:82:1a:2e:0d:ba:18:65:1f:83:45:ee:
                    0f:99:13:0a:60:0f:ad:a6:39:16:b7:da:fb:5a:72:
                    cf:58:db:68:83:0d:47:e6:9a:1c:61:eb:1f:1c:33:
                    82:13:6c:d0:12:5a:e2:ce:56:6c:0d:ae:66:2f:4f:
                    e0:43:09:76:3d:39:43:7d:21:31:d9:77:ec:95:da:
                    2a:a3:2c:eb:4d:96:bb:2d:03:87:0d:bf:01:0c:5a:
                    d0:69:ed:0c:af:c1:fa:1a:23:1b:e8:54:24:9b:37:
                    a0:8e:47:bf:b5:71:3c:13:f9:4b:78:5b:18:5f:42:
                    bd:20:d2:1e:59:f2:d9:c3:97:eb:1e:c1:25:64:e0:
                    6d:03:81:3c:c4:60:7f:d2:8c:a1:e3:36:c3:31:39:
                    04:8d:f4:bb:d9:d1:a0:91:cf:a7:6c:c6:45:84:7f:
                    78:b4:e9:e8:d9:43:ff:8b:9a:cb:e6:0b:66:5f:2c:
                    35:8b:47:a4:b2:c1:6a:cc:58:42:6a:c5:74:e7:0d:
                    e2:dc:ed:21:3a:72:50:11:dc:63:bc:6a:01:95:f8:
                    24:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:D8:D4:57:BA:81:18:AF:25:FB:94:7A:DC:87:07:35:1C:BF:B8:62
            X509v3 Authority Key Identifier:
                keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/rtjUV7qBGK8l-5R63IcHNRy_uGI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         0d:6e:6d:7a:4e:ed:41:e5:86:56:2a:e7:23:a9:34:fc:2f:c2:
         34:c7:2c:e2:18:13:7d:fc:9d:7c:b8:8d:35:fa:8f:30:65:15:
         14:15:46:e4:47:2f:8d:3d:57:40:58:8f:ad:ce:7b:92:d7:50:
         76:f2:9f:57:18:b8:ea:72:46:41:7e:8d:55:ad:b5:76:18:27:
         d6:5c:0d:3d:7c:69:ee:fd:47:a8:a3:ea:f0:7e:2b:16:9d:ee:
         d3:a3:b6:44:e0:2b:65:b9:ad:d9:52:3d:93:f2:7b:bb:f5:c4:
         ef:78:59:aa:62:26:30:9f:11:b7:ef:19:1f:c5:8f:07:66:bc:
         67:a7:f4:8b:d2:df:02:48:5a:67:31:48:b0:9f:50:e4:bb:92:
         cb:67:58:c0:fe:8c:2b:b6:4b:e5:d2:7b:94:71:21:d1:d3:8d:
         3b:0f:e5:7f:d2:6d:7b:28:8f:b4:38:60:5d:5a:34:1c:57:fb:
         5a:d3:ed:b8:24:a6:07:38:b6:dc:b5:99:c0:22:a1:40:52:6a:
         ae:bc:5d:e4:37:90:d8:ed:8e:50:0b:17:1a:95:cc:df:c4:7b:
         7d:b7:dd:72:31:07:1f:84:39:ab:7d:b0:8b:bc:82:cb:de:76:
         f2:4c:7f:35:4a:72:23:15:65:c4:15:d0:1c:9d:87:f7:02:3d:
         b7:57:5e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----