Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/vxvpZ-R4XPlxh_pcZZfhrZQgQyM.roa
File:                     vxvpZ-R4XPlxh_pcZZfhrZQgQyM.roa (raw, json)
Hash identifier:          JBF2OEntcMfWwN9n243+aHt61IcXuEZXpE0xc1h/ehE=
Subject key identifier:   BF:1B:E9:67:E4:78:5C:F9:71:87:FA:5C:65:97:E1:AD:94:20:43:23
Certificate issuer:       /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial:       018C9A06AE21CFA67F1D0CE30AC7240DBFCB
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/vxvpZ-R4XPlxh_pcZZfhrZQgQyM.roa
Signing time:             Sun 24 Dec 2023 04:12:58 +0000
ROA not before:           Sun 24 Dec 2023 04:12:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:9a:06:ae:21:cf:a6:7f:1d:0c:e3:0a:c7:24:0d:bf:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
        Validity
            Not Before: Dec 24 04:12:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=bf1be967e4785cf97187fa5c6597e1ad94204323
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:7a:af:cb:f4:38:0a:d6:d3:e4:56:8f:d1:e7:
                    ad:95:30:7f:02:d1:c9:e5:9a:a8:7e:4b:fd:33:96:
                    51:3f:3b:27:f2:01:04:45:68:26:2b:5e:4e:6f:54:
                    94:64:d2:53:7f:b0:a1:3c:04:03:5a:a7:8f:f8:d0:
                    6e:37:99:f7:2c:fb:85:e9:c2:a6:b9:de:05:7a:d3:
                    2d:57:56:16:75:61:09:86:39:b2:2a:9e:1a:a3:d1:
                    c8:59:0d:54:e8:4d:de:74:82:68:45:7b:5a:10:70:
                    91:8e:9c:01:76:97:93:aa:e1:05:60:f1:75:dc:67:
                    97:b0:55:d2:54:e1:b7:ec:8f:f0:e9:de:97:3a:8d:
                    d0:f6:6b:1e:6a:91:0c:67:dc:6a:22:24:7e:30:98:
                    bb:ba:fb:26:64:24:c4:cd:9f:09:3c:a2:8a:d2:06:
                    d7:b1:94:79:4d:66:2c:df:ff:75:c5:91:74:cc:3a:
                    79:82:4e:8c:cb:f4:0f:07:cb:d0:03:5a:11:09:fb:
                    78:74:e9:54:33:e9:78:c3:42:07:9b:a9:a2:19:8d:
                    76:30:b4:4b:e6:42:73:33:44:75:d0:80:99:46:c8:
                    18:ba:4d:17:79:1d:70:b7:86:c3:7e:26:32:5f:b8:
                    51:a9:5e:be:a0:62:14:8a:64:70:c5:4f:58:fc:78:
                    96:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:1B:E9:67:E4:78:5C:F9:71:87:FA:5C:65:97:E1:AD:94:20:43:23
            X509v3 Authority Key Identifier:
                keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/vxvpZ-R4XPlxh_pcZZfhrZQgQyM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         5f:b1:1c:49:f9:6e:fc:42:c3:b4:b3:02:76:fe:b1:70:49:c4:
         a2:3a:27:78:ec:0b:97:bb:13:bb:a5:67:62:6a:ad:80:d0:36:
         ac:de:eb:0b:1c:80:5c:24:99:a7:46:17:78:f4:82:65:e3:8e:
         77:7a:9d:ba:b8:08:20:39:4c:b7:c9:1c:b7:69:f5:fe:6b:0f:
         38:38:46:ed:3e:54:7a:c8:f5:9e:55:2e:8f:9a:bd:86:7a:c0:
         48:a6:4a:fd:b9:52:19:5b:a4:7a:f9:20:f6:b3:01:14:9d:30:
         86:cb:ca:c1:74:46:2a:6a:87:4e:4f:90:f5:1f:31:2d:60:ab:
         bb:7a:56:dc:b9:95:fa:67:91:2a:12:1c:cf:e8:74:da:63:63:
         0f:29:3e:0f:77:9b:bb:29:7e:ae:3d:a7:54:68:a1:d9:1b:52:
         9e:2e:2d:7e:9b:ab:cc:e4:45:48:2b:1c:ef:24:22:13:eb:61:
         54:0c:ba:1b:a0:75:bc:eb:d1:52:98:25:b3:d7:92:47:c9:53:
         07:1a:b2:5b:e7:3a:20:56:1b:c8:76:a4:8b:fb:ca:91:5c:b1:
         7a:36:17:23:4a:09:2e:21:dd:27:29:e5:d3:de:a1:15:d5:84:
         20:be:53:cc:00:cb:89:a5:96:f3:44:5b:96:76:e3:75:d8:35:
         97:9d:df:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----