Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/xBCvssZHrpceBCwKzQwy-KZN6FY.roa
File:                     xBCvssZHrpceBCwKzQwy-KZN6FY.roa (raw, json)
Hash identifier:          V3kaTYusq7xylxhTe7WYDG5oDNNXKOEA2m72/mBFb3c=
Subject key identifier:   C4:10:AF:B2:C6:47:AE:97:1E:04:2C:0A:CD:0C:32:F8:A6:4D:E8:56
Certificate issuer:       /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial:       018E250EE2DD0165E9DC1DDA679474E3FAA7
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/xBCvssZHrpceBCwKzQwy-KZN6FY.roa
Signing time:             Sat 09 Mar 2024 21:11:56 +0000
ROA not before:           Sat 09 Mar 2024 21:11:56 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
                          2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:25:0e:e2:dd:01:65:e9:dc:1d:da:67:94:74:e3:fa:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
        Validity
            Not Before: Mar  9 21:11:56 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=c410afb2c647ae971e042c0acd0c32f8a64de856
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:86:8f:3c:73:39:22:9b:92:f3:76:61:4a:3c:
                    79:4e:fa:d8:0d:3e:6e:ea:a5:c7:fa:ac:00:fa:dd:
                    0c:91:d7:e8:4a:35:45:e1:69:dd:20:2a:93:4e:5f:
                    87:bf:b1:2c:ac:3d:f4:07:42:71:80:21:77:fc:2c:
                    2a:81:1e:d8:c4:e3:e1:6c:8d:c3:42:5f:92:5d:54:
                    ed:59:e3:e0:d7:21:b0:db:ab:45:c3:09:67:c2:ae:
                    10:1f:9b:ed:8d:20:1b:d6:01:31:d4:8b:7a:4e:8c:
                    ae:03:67:61:6d:4f:9a:f9:13:9e:61:95:42:3a:e7:
                    f9:00:49:34:19:33:ca:3f:cf:6d:42:cc:06:0f:48:
                    f5:fe:46:9c:5a:2f:88:81:65:c0:9f:ca:58:ac:b8:
                    9a:57:68:f5:8c:da:53:0a:6d:c4:f1:b7:af:89:01:
                    04:5b:d0:9e:8e:8e:f1:20:01:12:25:6e:56:5f:e7:
                    4b:ca:cf:6b:c9:11:44:1c:87:f5:14:e2:72:28:98:
                    4a:2c:03:5a:ae:10:1c:56:b9:61:28:b2:2c:95:d8:
                    c9:30:22:e4:c8:82:44:e8:1e:83:db:00:28:f9:7c:
                    1c:3f:d9:b4:43:17:52:52:bd:73:76:9d:1d:1a:ba:
                    99:10:22:69:b0:e1:38:82:e9:4f:13:88:60:b6:59:
                    05:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:10:AF:B2:C6:47:AE:97:1E:04:2C:0A:CD:0C:32:F8:A6:4D:E8:56
            X509v3 Authority Key Identifier:
                keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/xBCvssZHrpceBCwKzQwy-KZN6FY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         88:3d:6d:1d:9c:08:22:f0:4a:06:02:34:ed:b7:87:b7:1f:57:
         84:6b:0e:48:3c:c2:9e:8c:e8:ff:94:71:62:bf:01:df:1a:cb:
         22:cd:c0:0f:ab:2a:a0:ac:d4:4c:d5:9c:a6:06:d2:de:40:2b:
         b8:e9:33:f7:9d:57:60:5e:0b:00:97:d7:ca:dd:c4:ee:ad:9c:
         04:ab:77:4d:fb:70:f1:ab:ab:77:e4:5d:de:34:97:7f:5b:30:
         53:cc:fa:8d:18:f1:80:31:d2:fc:31:eb:6c:c9:48:f9:82:1b:
         10:5d:f5:d3:c6:b6:f7:28:e4:be:f0:4e:69:2c:ef:6b:34:90:
         41:8c:64:84:89:6b:2a:44:83:a7:31:91:2b:22:a5:27:fc:83:
         c0:19:c0:0b:ce:0f:a8:11:b4:e0:3b:35:e3:d4:09:66:d9:76:
         1e:18:2d:6a:d1:9b:33:05:22:46:6b:e8:7f:a3:6f:9a:a6:0c:
         79:6c:fc:a0:9d:aa:e5:de:5e:55:14:10:c8:f2:6e:00:e5:76:
         48:ca:63:26:26:37:be:e7:24:27:1e:e1:de:e0:ac:cc:d0:97:
         f8:f4:98:2a:64:91:aa:59:6d:53:57:d5:7b:74:5a:ec:b4:7b:
         10:f3:3c:98:28:79:5d:5e:fb:37:33:37:40:37:3c:94:79:6b:
         8d:80:74:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----