Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/tcsRUFTD8fIDCnSARrdfjeaM1tI.roa
File:                     tcsRUFTD8fIDCnSARrdfjeaM1tI.roa (raw, json)
Hash identifier:          GhjNu1J1p2o+52FcjmHo30gp0qiERe4j4aP0RqbvDLk=
Subject key identifier:   B5:CB:11:50:54:C3:F1:F2:03:0A:74:80:46:B7:5F:8D:E6:8C:D6:D2
Certificate issuer:       /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial:       018D3ED263715D742E5F4E533A7470EF5ADA
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/tcsRUFTD8fIDCnSARrdfjeaM1tI.roa
Signing time:             Thu 25 Jan 2024 04:13:11 +0000
ROA not before:           Thu 25 Jan 2024 04:13:11 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:3e:d2:63:71:5d:74:2e:5f:4e:53:3a:74:70:ef:5a:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
        Validity
            Not Before: Jan 25 04:13:11 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=b5cb115054c3f1f2030a748046b75f8de68cd6d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:78:e1:43:05:b6:f7:f9:f8:fa:4a:f6:93:fe:
                    e9:f3:17:8e:04:a9:33:a6:fa:3b:89:15:58:29:49:
                    9a:33:9d:bb:18:d9:50:9e:8f:5e:0e:01:86:ef:c8:
                    a2:fe:f8:91:96:32:99:99:78:7a:d8:bc:bd:e9:74:
                    89:de:96:53:bd:32:5d:49:4c:f0:8d:65:d8:11:8a:
                    dc:96:94:a1:90:c0:22:cb:15:f5:ed:4f:a7:d6:22:
                    95:62:ab:23:d6:cd:90:1c:65:c1:1a:bd:12:4b:b5:
                    ff:3f:7f:86:ba:60:e8:9c:77:73:03:57:20:b2:14:
                    f3:8f:cc:01:ee:d4:be:95:da:9f:23:70:fa:a8:08:
                    03:b6:65:8e:eb:11:95:de:ee:de:64:9b:ea:fb:52:
                    f8:21:04:9a:d8:1e:0e:93:ba:3a:5f:f0:64:de:2d:
                    a6:c8:3c:2f:04:51:bc:6e:f2:ea:cf:fc:96:23:d1:
                    e2:2f:3a:03:ea:4b:9c:de:f9:aa:17:6c:d4:5b:69:
                    fc:e2:97:83:4e:41:6c:eb:c0:d9:f3:0e:b4:81:12:
                    ea:96:54:60:3a:56:f5:c9:27:f4:e2:94:35:e4:fb:
                    52:9f:46:92:f0:5f:03:b3:29:46:9f:89:a1:98:e8:
                    b1:ba:2a:bf:7d:00:86:a3:4e:ba:a8:3f:4a:f4:fa:
                    63:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:CB:11:50:54:C3:F1:F2:03:0A:74:80:46:B7:5F:8D:E6:8C:D6:D2
            X509v3 Authority Key Identifier:
                keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/tcsRUFTD8fIDCnSARrdfjeaM1tI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         06:80:5e:83:f1:34:e6:eb:7f:7a:04:c9:e1:3a:29:a8:0a:a2:
         59:39:5c:d4:2e:d7:4d:f4:32:d7:1d:ee:97:cc:fa:e1:b7:40:
         06:01:7f:4b:97:d7:f5:9e:ed:10:ce:27:79:17:b4:1f:f6:5a:
         f2:4b:52:47:9d:76:78:4c:ed:b1:a0:94:b5:96:d4:39:27:d7:
         8b:4b:b1:92:c3:17:5c:61:d5:fc:ea:9a:f7:e6:7e:07:d9:a9:
         76:0b:3d:8a:6b:60:e5:a7:08:20:13:96:bf:06:73:4a:09:ff:
         2a:85:78:f5:c2:e1:06:94:5e:e0:0d:36:33:bc:ec:16:42:e7:
         ff:8c:ae:56:bf:c6:df:c5:07:d2:32:89:7e:48:a3:00:ef:70:
         ae:73:16:ad:08:80:04:95:e1:0f:70:49:f1:5f:e2:b9:b1:27:
         a5:a9:96:fc:9a:1e:61:34:69:53:b4:ff:22:53:d6:05:f5:7b:
         79:cb:f9:f5:a9:c7:3c:3d:87:87:a3:5f:ff:cc:1d:d1:7b:72:
         b8:bd:00:c6:c4:18:d9:b1:02:62:d1:b6:e0:74:57:e2:a8:77:
         b8:4a:ce:fb:72:c5:8e:ae:73:55:5e:cc:49:ca:58:29:e7:17:
         55:98:70:3d:89:1a:4c:62:04:e4:be:ce:2c:cc:06:8a:79:58:
         a9:f6:d4:ea
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY0+0mNxXXQuX05TOnRw71raMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMTI1MDQxMzExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNWNiMTE1MDU0YzNmMWYyMDMwYTc0ODA0NmI3NWY4ZGU2OGNkNmQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHjhQwW29/n4+kr2k/7p8xeOBKkz
pvo7iRVYKUmaM527GNlQno9eDgGG78ii/viRljKZmXh62Ly96XSJ3pZTvTJdSUzw
jWXYEYrclpShkMAiyxX17U+n1iKVYqsj1s2QHGXBGr0SS7X/P3+GumDonHdzA1cg
shTzj8wB7tS+ldqfI3D6qAgDtmWO6xGV3u7eZJvq+1L4IQSa2B4Ok7o6X/Bk3i2m
yDwvBFG8bvLqz/yWI9HiLzoD6kuc3vmqF2zUW2n84peDTkFs68DZ8w60gRLqllRg
Olb1ySf04pQ15PtSn0aS8F8DsylGn4mhmOixuiq/fQCGo066qD9K9Ppj3wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLXLEVBUw/HyAwp0gEa3X43mjNbSMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvdGNzUlVGVEQ4ZklEQ25TQVJyZGZqZWFNMXRJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAaAXoPxNObrf3oEyeE6
KagKolk5XNQu1030Mtcd7pfM+uG3QAYBf0uX1/We7RDOJ3kXtB/2WvJLUkeddnhM
7bGglLWW1Dkn14tLsZLDF1xh1fzqmvfmfgfZqXYLPYprYOWnCCATlr8Gc0oJ/yqF
ePXC4QaUXuANNjO87BZC5/+Mrla/xt/FB9IyiX5IowDvcK5zFq0IgASV4Q9wSfFf
4rmxJ6WplvyaHmE0aVO0/yJT1gX1e3nL+fWpxzw9h4ejX//MHdF7cri9AMbEGNmx
AmLRtuB0V+Kod7hKzvtyxY6uc1VezEnKWCnnF1WYcD2JGkxiBOS+zizMBop5WKn2
1Oo=
-----END CERTIFICATE-----