Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/w728VUj4SX69bi25Y4-G0fNqox4.roa
File:                     w728VUj4SX69bi25Y4-G0fNqox4.roa (raw, json)
Hash identifier:          N0bOL+/iUWGqHt2A+2LiUdwvsO3V9ijSg/VxtZto09A=
Subject key identifier:   C3:BD:BC:55:48:F8:49:7E:BD:6E:2D:B9:63:8F:86:D1:F3:6A:A3:1E
Certificate issuer:       /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial:       018CC07230D399F3242C528FF2EE41EEDC23
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/w728VUj4SX69bi25Y4-G0fNqox4.roa
Signing time:             Sun 31 Dec 2023 15:15:58 +0000
ROA not before:           Sun 31 Dec 2023 15:15:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c0:72:30:d3:99:f3:24:2c:52:8f:f2:ee:41:ee:dc:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
        Validity
            Not Before: Dec 31 15:15:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c3bdbc5548f8497ebd6e2db9638f86d1f36aa31e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:86:81:de:17:8d:56:51:ac:12:87:25:42:79:
                    11:8a:3a:1e:10:fd:01:dd:10:4d:3f:a5:f0:d0:c3:
                    5c:b0:50:d5:ff:d4:61:7d:bc:97:17:00:87:f6:92:
                    8e:da:83:0a:b3:01:1f:03:ff:d9:40:c6:40:21:8a:
                    23:8d:fa:95:ad:02:e3:43:b6:90:bf:e6:28:f0:50:
                    69:bc:98:92:45:36:ee:d1:e4:f9:da:c7:a1:02:0c:
                    20:e1:fe:3e:5e:c1:cf:e3:14:12:0f:67:cf:36:7e:
                    86:35:d2:13:95:97:11:3d:19:a0:cc:58:80:33:5a:
                    d1:73:04:cf:28:5d:b1:d3:34:67:26:fa:5a:e9:05:
                    a9:ef:c0:fe:2c:06:aa:25:e7:ce:1e:d6:ad:32:97:
                    3a:5a:66:39:a0:87:a2:14:00:f0:44:e7:bf:2b:52:
                    44:d4:13:b7:fc:f9:87:f8:1e:8a:0f:1c:dc:2b:85:
                    64:60:e5:59:10:4c:28:5d:e6:1f:93:ee:8b:5f:10:
                    7d:4e:0a:75:a4:a1:68:de:e1:fb:8b:a8:28:94:31:
                    b2:b2:52:92:ad:ed:f6:d7:a9:00:a6:6b:93:c5:fc:
                    b8:e5:1e:91:c1:95:5c:63:56:90:09:f1:f1:5e:14:
                    d4:9b:24:76:62:9c:08:fb:8f:dc:fd:60:e7:21:d8:
                    3e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:BD:BC:55:48:F8:49:7E:BD:6E:2D:B9:63:8F:86:D1:F3:6A:A3:1E
            X509v3 Authority Key Identifier:
                keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/w728VUj4SX69bi25Y4-G0fNqox4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         3a:7e:1e:1e:e5:15:0d:19:21:53:be:e1:8c:ee:c5:24:e7:db:
         49:a3:46:1d:35:02:4c:59:cd:ad:63:e4:84:a9:11:ad:d2:56:
         bd:63:8a:be:56:17:5b:f0:8f:4e:43:e6:d0:93:25:66:91:66:
         c5:6e:6b:2d:aa:d8:f6:d8:6d:0d:7f:51:46:0e:8d:19:19:3f:
         48:08:79:76:e5:09:a2:e6:1e:23:55:d3:ab:57:46:ca:59:5f:
         d8:4a:cc:6c:42:7c:9d:3f:72:d0:68:f5:bf:a8:fa:c8:9f:01:
         22:ba:42:8b:d9:a1:25:3d:94:79:2d:02:04:1c:d2:15:a1:28:
         f9:19:96:82:e2:a7:58:39:89:74:a8:46:d0:17:4f:32:78:bc:
         1f:d2:d9:cf:ad:b5:9d:19:85:4f:fc:0d:dd:9d:00:84:a1:61:
         b6:94:3a:31:8c:78:b3:51:07:69:f3:5a:bc:51:b4:ab:2f:6b:
         c6:4d:c4:eb:5f:19:d4:b5:c8:b4:a0:25:5b:2e:04:b9:a5:8f:
         29:c7:3e:56:a1:63:13:fa:0c:22:a6:6c:70:53:99:99:8b:c0:
         90:cc:0a:1e:5d:14:38:ee:c0:1b:c9:18:17:cf:29:ad:69:5e:
         45:c3:58:d7:22:74:98:78:76:e2:5b:95:4f:a4:79:48:c5:44:
         f7:bd:6e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----