Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/zw_ItIT-nm_bFEqqdpc8hRdnA-0.roa
File:                     zw_ItIT-nm_bFEqqdpc8hRdnA-0.roa (raw, json)
Hash identifier:          DRICtitRkSCFojjj0IceONcArKcnUlrAhGc2E6m9MPU=
Subject key identifier:   CF:0F:C8:B4:84:FE:9E:6F:DB:14:4A:AA:76:97:3C:85:17:67:03:ED
Certificate issuer:       /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial:       018E6ACC6B1F094CD31E396F52810853C9B7
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/zw_ItIT-nm_bFEqqdpc8hRdnA-0.roa
Signing time:             Sat 23 Mar 2024 10:12:45 +0000
ROA not before:           Sat 23 Mar 2024 10:12:45 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
                          2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:6a:cc:6b:1f:09:4c:d3:1e:39:6f:52:81:08:53:c9:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
        Validity
            Not Before: Mar 23 10:12:45 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=cf0fc8b484fe9e6fdb144aaa76973c85176703ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ad:ad:c0:f3:25:d6:cc:17:e8:b7:08:a4:f4:
                    b9:b6:90:68:7b:18:89:40:b5:04:fa:ba:d5:85:46:
                    82:30:d8:7a:e5:a1:28:94:e7:ec:fc:ed:2e:93:1e:
                    3a:66:71:8a:b4:af:ad:7c:c3:c7:06:ae:36:1c:09:
                    8f:1c:27:88:d5:55:f8:9f:33:f7:b1:94:8a:04:9f:
                    51:33:9e:54:9d:ef:ef:d0:10:58:9c:f4:6c:71:a4:
                    98:f7:d1:f1:35:d7:98:09:3a:43:ef:70:bb:49:11:
                    45:db:c4:c6:40:bd:d5:b9:82:05:3b:0c:68:d8:9b:
                    e2:2d:ad:d5:89:27:2d:2e:eb:7a:b8:85:41:92:25:
                    e0:d0:58:25:26:0b:00:88:30:2d:df:eb:da:ad:41:
                    5b:5e:58:af:6b:5f:c1:ff:0c:5c:4a:5a:7c:89:93:
                    c5:c7:34:6f:f0:f8:c7:49:ec:b1:da:fd:f4:90:c6:
                    36:3c:38:f5:84:4e:09:a9:f4:86:41:d5:3c:22:0e:
                    d3:a7:59:94:1d:be:f1:b3:93:79:0c:5d:42:29:ee:
                    38:5c:1a:f5:09:6c:e8:36:5a:5e:91:a2:6d:58:0b:
                    48:40:43:93:31:04:8b:ad:b4:13:49:87:4d:ba:e3:
                    07:6c:f6:ba:56:a4:53:24:a2:7c:f7:f8:b4:16:b1:
                    8a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:0F:C8:B4:84:FE:9E:6F:DB:14:4A:AA:76:97:3C:85:17:67:03:ED
            X509v3 Authority Key Identifier:
                keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/zw_ItIT-nm_bFEqqdpc8hRdnA-0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         2d:04:2b:5c:a1:b3:c6:7e:78:84:d5:05:fb:cc:b6:35:cb:e8:
         41:49:83:f7:55:9f:1e:4a:19:c3:2d:be:fe:2a:53:fd:ea:35:
         e6:f7:8e:af:99:0c:04:43:73:07:4e:2a:a0:66:f0:a1:bb:63:
         0b:3b:be:ec:e8:be:f3:96:38:03:49:17:15:94:56:fe:35:20:
         70:18:32:34:9c:6a:c1:d6:c7:3b:bf:73:18:fb:d0:4a:31:55:
         7a:8f:04:0b:a9:0e:f7:d4:65:cb:47:22:c2:4d:ab:fe:75:9b:
         0f:8d:21:6f:a7:27:76:09:0d:fb:d7:c6:4e:b9:de:6c:78:6c:
         80:ca:a3:23:25:89:9a:12:48:93:ce:d4:36:fa:04:91:29:55:
         d1:5a:d5:0e:5a:61:c2:8a:7d:d7:71:41:77:a5:9f:eb:81:da:
         fe:d9:ce:57:67:d6:ec:e3:df:da:89:f4:e4:7b:83:ce:91:36:
         c5:2a:ce:16:b6:e5:55:2d:42:12:ca:f9:9c:e6:f7:5c:62:ee:
         2d:52:e2:6e:17:21:32:98:1c:cd:54:a8:09:e7:b5:a7:cf:45:
         ce:d8:52:ec:cd:5d:92:b5:9f:91:fd:ad:49:e2:c2:fe:34:91:
         4a:c2:dc:d3:cf:1b:b1:da:91:6e:59:fa:4a:8f:46:2a:f9:65:
         f8:2c:aa:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----