Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/uypfvvA9ouwJxhEddBNp7d0Y_i8.roa
File:                     uypfvvA9ouwJxhEddBNp7d0Y_i8.roa (raw, json)
Hash identifier:          ALnJYRaBPMEs835ZRJGXYGeT71eiMaeKC++KBVB0mXw=
Subject key identifier:   BB:2A:5F:BE:F0:3D:A2:EC:09:C6:11:1D:74:13:69:ED:DD:18:FE:2F
Certificate issuer:       /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial:       018CFBA1E67E2D25571C25846262C2D5FE43
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/uypfvvA9ouwJxhEddBNp7d0Y_i8.roa
Signing time:             Fri 12 Jan 2024 03:05:40 +0000
ROA not before:           Fri 12 Jan 2024 03:05:40 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:18c:fba1:2c9b/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:fb:a1:e6:7e:2d:25:57:1c:25:84:62:62:c2:d5:fe:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
        Validity
            Not Before: Jan 12 03:05:40 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=bb2a5fbef03da2ec09c6111d741369eddd18fe2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:dd:54:9e:00:27:21:51:5b:82:bb:18:0d:fd:
                    15:67:c7:e1:e0:52:92:74:bc:a9:86:38:b7:54:8a:
                    97:a0:62:f5:cb:78:8e:e2:87:f8:b5:0f:21:45:ee:
                    f4:63:02:aa:85:58:f1:6a:2d:96:a9:f4:8c:a4:59:
                    47:21:87:1e:e0:4c:69:10:36:cf:cd:9f:47:da:d5:
                    9d:1e:0a:43:97:e0:75:00:73:78:c2:c7:13:14:af:
                    48:7b:5b:3c:88:f9:e9:ed:23:c9:e5:86:1c:94:3d:
                    9b:d9:de:61:25:97:8b:8e:03:bb:05:28:0d:f4:9a:
                    2f:71:ee:ed:80:4e:23:08:aa:61:84:43:26:a7:50:
                    e2:3d:28:b2:1c:06:b2:96:af:70:b8:e6:31:ef:2f:
                    1d:a8:a1:86:ef:e9:5e:e3:18:5d:95:eb:74:57:44:
                    ac:a6:38:9d:50:1e:6c:08:35:ff:87:07:66:8e:a1:
                    87:6d:a5:b9:4b:bd:25:27:5b:56:5d:33:7a:6e:62:
                    01:4e:a3:fb:1c:9b:16:25:8c:ba:b8:e1:c2:1b:89:
                    ff:49:ad:17:0a:fd:73:47:ba:6e:e8:1f:5a:cf:16:
                    c9:1c:e3:67:30:1f:b5:1b:99:a8:fc:28:68:3b:bc:
                    d3:03:a1:4e:db:1e:4f:46:e9:c5:4c:7a:e6:24:6c:
                    a9:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:2A:5F:BE:F0:3D:A2:EC:09:C6:11:1D:74:13:69:ED:DD:18:FE:2F
            X509v3 Authority Key Identifier:
                keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/uypfvvA9ouwJxhEddBNp7d0Y_i8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         87:e5:39:17:20:0b:af:eb:49:6e:29:dd:5c:6d:ca:0c:b3:74:
         9d:b9:55:ba:68:6f:b5:99:52:a7:33:14:ad:67:e4:ae:5d:72:
         2a:f4:a2:e6:3b:e1:01:27:cd:78:95:b5:dd:7b:ea:a7:96:ea:
         da:ec:aa:98:de:20:e6:15:42:d2:02:e6:13:9b:7d:a2:f5:1f:
         28:83:28:63:be:2e:a9:42:9d:fb:f0:4d:c4:a1:81:d1:59:84:
         d8:4b:2e:97:2d:1a:e3:f7:59:a0:95:8e:a3:6d:07:af:50:6f:
         30:f1:bd:ad:2f:d4:4c:af:c2:e5:2b:21:d6:44:47:b0:58:15:
         10:b9:67:b9:3a:a7:55:70:9e:2d:44:c6:77:c1:63:fa:e4:e3:
         51:f3:6c:8b:2b:cc:ed:dd:07:5b:ba:82:14:d4:6f:7c:91:ea:
         f2:93:af:8e:14:2a:c3:00:62:8c:f3:d1:1d:c6:78:ec:fc:c2:
         d4:6a:1f:a1:6a:15:54:12:1c:ea:b8:c4:de:4d:aa:63:a8:6c:
         6c:99:eb:39:e1:d4:0a:3c:7c:51:91:c3:08:42:58:5a:f9:35:
         46:23:b5:c9:76:73:53:09:28:86:26:76:ee:11:35:0e:3f:53:
         bf:75:b7:04:a6:24:45:38:28:a9:db:ba:3e:eb:e2:a4:d3:6b:
         46:dd:0c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----