Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/uCR1s94KBz6_OxwpKgXwW1rppU8.roa
File:                     uCR1s94KBz6_OxwpKgXwW1rppU8.roa (raw, json)
Hash identifier:          FWPgfOjdrRBbLE9TjkJqZu8+Fnt4DPzFDBbap1Rpr50=
Subject key identifier:   B8:24:75:B3:DE:0A:07:3E:BF:3B:1C:29:2A:05:F0:5B:5A:E9:A5:4F
Certificate issuer:       /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial:       018D300504373A1942FD12B81550E65E2EF5
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/uCR1s94KBz6_OxwpKgXwW1rppU8.roa
Signing time:             Mon 22 Jan 2024 07:14:11 +0000
ROA not before:           Mon 22 Jan 2024 07:14:11 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:30:05:04:37:3a:19:42:fd:12:b8:15:50:e6:5e:2e:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
        Validity
            Not Before: Jan 22 07:14:11 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=b82475b3de0a073ebf3b1c292a05f05b5ae9a54f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:65:b8:20:67:ff:cb:2a:82:73:5c:99:90:25:
                    1f:ce:69:49:35:af:9c:6f:3a:cd:fb:34:b5:62:12:
                    cc:42:50:57:ef:e7:b8:06:9c:bc:d0:45:0e:56:06:
                    31:e0:0e:86:02:ef:59:25:d6:01:04:23:4d:33:07:
                    c5:0f:c3:ef:cd:a8:b7:25:31:ee:e1:42:e4:24:48:
                    86:05:b3:1f:46:23:fb:ef:1f:f9:ac:ee:69:34:b9:
                    3e:6c:09:7b:58:d3:91:6f:b3:3e:4a:bf:61:cf:f0:
                    24:96:c2:09:ef:e9:66:ed:a5:d6:db:99:3d:e9:c3:
                    30:d6:91:3b:c5:b9:61:15:b0:d0:3d:9f:ec:45:7d:
                    17:1a:4b:cf:cc:9e:65:82:9b:52:0b:ff:e9:b5:bc:
                    99:b7:e6:7c:57:cf:54:4a:c5:e4:f3:a5:84:f6:b4:
                    70:d1:b3:8e:ce:30:4c:3d:7e:9e:96:6e:85:7c:93:
                    69:50:c5:d6:a0:ed:94:a9:6c:c7:52:83:4c:04:7f:
                    cd:28:7b:04:2c:5b:ee:eb:16:89:2c:42:79:22:52:
                    3f:50:04:3f:a9:98:12:f1:2e:7e:9a:52:a2:d6:8a:
                    17:4e:6e:5c:4e:c3:69:ff:04:f8:ff:81:77:82:39:
                    a1:80:43:3f:d8:e4:0b:c8:4c:54:d0:94:6f:7a:3b:
                    8f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:24:75:B3:DE:0A:07:3E:BF:3B:1C:29:2A:05:F0:5B:5A:E9:A5:4F
            X509v3 Authority Key Identifier:
                keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/uCR1s94KBz6_OxwpKgXwW1rppU8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         0a:ab:9c:22:c2:d5:43:e7:50:9a:a5:de:67:4b:fe:a0:70:a9:
         44:c2:c6:88:49:e2:db:90:b2:18:5e:aa:67:ae:97:c7:ce:e4:
         0a:a6:6d:3a:e9:66:fd:0d:d7:ad:e7:38:45:f4:33:05:d2:b0:
         ac:ae:6e:4e:9e:a0:c6:47:82:69:31:d0:0d:56:3f:08:53:7c:
         a7:12:cf:82:6d:ee:3d:5e:2e:a3:9b:ac:fa:b8:1b:d8:3e:f4:
         b9:0a:a0:d3:aa:f2:b1:e5:a3:02:76:7d:b5:dd:e8:ad:91:7c:
         e8:3b:7d:7c:3f:b4:09:c1:eb:6c:de:9f:ae:ae:16:13:54:62:
         a7:8d:a3:8a:7d:bc:f1:42:25:c2:24:74:4f:a0:29:e5:e3:28:
         ae:1f:23:1f:84:17:f6:3e:b8:42:9f:ab:36:37:3c:be:e8:cd:
         80:31:68:68:9b:d3:18:aa:1b:b7:be:8f:03:2a:8b:bb:2c:07:
         b2:27:4c:8c:4e:77:29:c2:97:5d:0e:d5:d5:8e:d9:aa:5c:70:
         6b:91:ca:8e:91:93:ed:18:70:64:da:6b:57:37:e8:ec:0a:05:
         54:50:54:2b:93:98:45:9f:97:73:67:bf:c0:9a:9d:bd:af:80:
         66:7e:28:cc:65:9d:06:d4:7b:68:8f:06:18:6b:e7:f9:fe:48:
         1c:f0:02:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----