Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/olVuBl3W7jljb2YzRzHW59V8W14.roa
File:                     olVuBl3W7jljb2YzRzHW59V8W14.roa (raw, json)
Hash identifier:          F/ZQULRr+UWyzIYnyyU3Wpe6ZbSM6lFx/LUr84UWl4s=
Subject key identifier:   A2:55:6E:06:5D:D6:EE:39:63:6F:66:33:47:31:D6:E7:D5:7C:5B:5E
Certificate issuer:       /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial:       018EE6D16827CD366E1360B547E01A7A946E
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/olVuBl3W7jljb2YzRzHW59V8W14.roa
Signing time:             Tue 16 Apr 2024 12:11:07 +0000
ROA not before:           Tue 16 Apr 2024 12:11:07 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:e6:d1:68:27:cd:36:6e:13:60:b5:47:e0:1a:7a:94:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
        Validity
            Not Before: Apr 16 12:11:07 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=a2556e065dd6ee39636f66334731d6e7d57c5b5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:94:98:46:aa:56:6e:a1:2d:77:15:bb:f4:1b:
                    a3:21:7a:04:d7:b3:d3:bc:e6:13:3c:27:f3:36:de:
                    12:be:50:ff:ae:5c:bf:7a:e5:8d:be:9c:aa:ed:e0:
                    81:75:b4:92:68:3e:b7:ed:91:02:bb:ef:e0:d6:d9:
                    44:3f:35:5b:27:91:f7:0c:f5:1a:32:78:ca:ac:ca:
                    f3:30:f3:2f:a5:0f:82:69:0f:2f:a3:a6:9f:53:8b:
                    23:0e:3d:60:ea:c8:b3:2e:24:2c:9a:e7:00:c8:b9:
                    64:53:82:68:f5:1c:52:9e:e1:dd:6d:b9:97:45:c3:
                    a7:4f:48:44:87:81:b0:6e:5a:51:b1:f4:9e:db:6e:
                    3b:2c:9e:56:07:fc:cd:fc:c6:52:72:f1:54:fd:6e:
                    b7:91:ad:6c:b3:e1:6e:2d:31:8b:c1:d0:3e:57:b7:
                    fa:cd:26:17:13:e2:2e:6e:82:92:4b:a0:f6:09:c2:
                    80:cb:f1:56:ae:df:1c:ff:9e:8f:9e:d0:a6:6f:e8:
                    1b:93:6b:46:61:52:5a:42:f1:c2:0e:2d:9d:62:9a:
                    b6:e8:ca:97:82:1c:85:20:95:c8:ac:a5:a3:e1:af:
                    0d:82:35:4f:ec:45:9a:d7:90:dc:11:73:b1:d2:19:
                    04:3c:b6:33:d4:3c:93:66:d5:90:c2:19:6c:a4:d9:
                    dd:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:55:6E:06:5D:D6:EE:39:63:6F:66:33:47:31:D6:E7:D5:7C:5B:5E
            X509v3 Authority Key Identifier:
                keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/olVuBl3W7jljb2YzRzHW59V8W14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         52:7f:67:43:2d:4b:c8:11:43:5e:27:45:0b:ee:f8:21:51:c3:
         a3:5d:79:e3:ec:6a:a5:9a:ab:3e:5b:ac:42:10:7c:f8:ef:25:
         84:8b:79:26:41:d0:cf:f0:7b:fc:15:b3:55:ec:d5:39:4e:51:
         4b:12:4f:69:04:21:bf:b2:e6:d0:b1:bd:72:6c:c7:a9:f1:67:
         ba:68:22:41:22:d6:9c:6f:47:a3:7b:b8:c1:60:91:3e:a1:1b:
         14:ed:05:4d:52:59:0d:4f:5c:b7:63:d1:a2:5a:57:af:21:07:
         87:79:37:f8:4a:98:1c:b3:1c:05:d4:68:a7:d8:43:08:be:a6:
         b4:5b:81:02:cb:28:83:4e:55:f4:86:e0:3d:44:66:b2:d8:2c:
         67:6d:d2:2f:22:07:4b:3e:b9:a4:e7:34:6a:f8:8a:f7:2b:dc:
         ed:3e:63:40:7d:00:2b:ff:ba:69:32:50:40:32:04:1b:ba:d3:
         1a:10:4e:ab:d0:a1:55:9c:b9:59:09:92:3b:2b:24:ee:6b:b9:
         58:c2:04:d8:34:d3:87:e7:9d:5a:6e:6d:14:dd:dc:df:c0:e6:
         d4:9c:a6:90:f3:09:81:0f:33:45:09:fb:34:10:ca:95:51:47:
         88:19:0e:44:3e:c1:69:3d:2e:8a:f5:73:38:cb:6f:bf:80:db:
         71:a0:fd:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----