Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/vrei4HUUzfURZIRJn879dZrQ-bw.roa
File:                     vrei4HUUzfURZIRJn879dZrQ-bw.roa (raw, json)
Hash identifier:          BU9yaQrK3KOKr/LUMS5JK7DhZs3GAsb2Z2PRF01ZeeU=
Subject key identifier:   BE:B7:A2:E0:75:14:CD:F5:11:64:84:49:9F:CE:FD:75:9A:D0:F9:BC
Certificate issuer:       /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial:       018CD20899441AF893663ADB7C000B27DC31
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/vrei4HUUzfURZIRJn879dZrQ-bw.roa
Signing time:             Thu 04 Jan 2024 01:13:48 +0000
ROA not before:           Thu 04 Jan 2024 01:13:48 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:d2:08:99:44:1a:f8:93:66:3a:db:7c:00:0b:27:dc:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
        Validity
            Not Before: Jan  4 01:13:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=beb7a2e07514cdf5116484499fcefd759ad0f9bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:63:b7:cf:53:cd:cd:46:cd:b2:19:28:0c:b4:
                    c4:84:71:fc:14:ba:9c:44:ed:a7:5c:db:b4:89:bd:
                    19:8f:15:ee:fc:a2:d5:f0:36:a6:b6:bc:f0:af:80:
                    70:11:85:c4:95:37:fa:2e:89:88:a9:6b:f5:30:67:
                    ad:d2:e7:e6:08:e1:cb:48:1d:b6:f7:29:4f:f5:5d:
                    54:98:3d:df:0b:d1:9d:fb:c8:c2:40:44:45:28:d8:
                    6a:a0:31:ec:bc:fd:41:36:79:ca:c2:50:68:3d:49:
                    07:c0:ad:31:6f:b8:85:64:3a:12:d4:5a:44:3e:f4:
                    ef:e8:08:74:58:43:5e:c1:c5:a5:54:43:5b:e0:bc:
                    9c:69:c6:c7:06:d8:4d:5b:5c:2b:2a:f8:87:fd:a5:
                    bc:00:9b:5c:45:b3:f1:85:28:f1:34:00:cc:c4:3d:
                    30:f4:6b:69:66:43:0f:98:8b:63:ce:a7:bf:fe:ad:
                    39:4d:f0:cc:02:53:f7:9b:b3:f7:d5:20:30:30:d6:
                    e0:32:50:5a:e7:d1:3b:d9:d1:b9:23:47:d8:d5:de:
                    8e:cc:f7:58:75:4a:c2:5d:01:f1:78:ec:0a:14:6f:
                    8c:29:1f:59:7d:33:d7:72:99:5e:9b:fc:95:e9:df:
                    7d:6c:de:7c:af:a5:dc:41:88:08:26:78:e9:9a:95:
                    bc:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:B7:A2:E0:75:14:CD:F5:11:64:84:49:9F:CE:FD:75:9A:D0:F9:BC
            X509v3 Authority Key Identifier:
                keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/vrei4HUUzfURZIRJn879dZrQ-bw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         00:0c:81:3c:60:f7:6f:95:fe:c9:6e:29:91:ba:36:77:17:bd:
         da:ae:b2:53:11:a5:5d:ff:07:8e:52:71:54:f8:80:cf:59:3c:
         ef:c5:78:30:1a:0a:54:e1:57:dd:65:ad:38:4b:e8:eb:9e:14:
         e3:dd:ea:1e:5a:55:4f:8c:9f:d1:c1:83:7f:50:f6:78:dc:ee:
         86:7c:77:0a:80:e1:e5:eb:7c:9b:9f:67:72:47:c0:ad:14:40:
         01:ed:12:12:5a:fc:48:69:97:5c:e9:61:ad:59:96:a4:a3:66:
         80:bd:8f:c0:5d:d4:ce:fb:c9:f8:85:6e:42:0a:1f:a9:66:5a:
         57:62:17:6d:c6:bf:4c:d5:05:db:a1:6b:ac:4a:5d:dd:bf:31:
         61:6f:93:2a:9a:e9:72:b3:1f:38:93:cd:c4:ab:b6:58:ee:ef:
         e8:9f:03:19:ce:4e:3f:be:d4:38:f6:10:cb:9c:59:17:10:83:
         10:0c:b8:12:f7:0e:08:ff:b4:ca:ce:6b:a4:42:c5:06:d8:78:
         1f:5c:f0:ea:8f:4f:c9:74:fb:5d:5c:de:fa:9e:0f:a6:79:66:
         17:eb:44:6a:7d:a0:7d:55:99:3e:fe:11:10:0d:ac:4b:30:14:
         1c:f7:79:8a:99:ca:3b:2d:aa:97:2d:ca:69:93:64:e2:cb:a2:
         67:dd:3c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----