Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/1-JsrzeOyWfSSRtlqWSeLW_qjUp8.roa
File:                     1-JsrzeOyWfSSRtlqWSeLW_qjUp8.roa (raw, json)
Hash identifier:          sugnlaVYUd0dz79sXHmfwenL6BAdrI1Gjd6gLjFuAvc=
Subject key identifier:   F8:9B:2B:CD:E3:B2:59:F4:92:46:D9:6A:59:27:8B:5B:FA:A3:52:9F
Certificate issuer:       /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial:       018F23564368E3839A283B614A0D89B79FEB
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/1-JsrzeOyWfSSRtlqWSeLW_qjUp8.roa
Signing time:             Sun 28 Apr 2024 06:13:26 +0000
ROA not before:           Sun 28 Apr 2024 06:13:26 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:23:56:43:68:e3:83:9a:28:3b:61:4a:0d:89:b7:9f:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
        Validity
            Not Before: Apr 28 06:13:26 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=f89b2bcde3b259f49246d96a59278b5bfaa3529f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b4:a4:46:ea:2f:e4:03:80:87:18:62:98:da:
                    8c:df:ca:91:87:eb:ad:b4:7f:85:e7:8c:f3:bc:11:
                    89:f1:d3:bf:62:c4:09:b8:b7:fb:cd:c9:56:bc:95:
                    e9:12:46:e3:05:47:63:09:64:81:30:36:22:04:52:
                    bf:26:62:2c:b0:f1:d1:66:ce:27:f1:41:c9:90:60:
                    a8:00:fc:7e:07:53:1d:b0:3f:ad:25:f9:ec:69:84:
                    f2:c4:77:e7:3b:a4:71:27:3f:e3:7f:f1:c9:32:c2:
                    c9:cd:90:cc:69:af:65:c0:87:a5:b8:bf:f4:f1:62:
                    d1:74:3c:3a:a2:39:95:ae:00:c3:4a:77:1b:51:15:
                    9e:36:2f:1f:73:fb:3d:a1:34:2a:26:40:c1:56:9f:
                    20:ec:51:2a:2c:b6:0e:dd:d9:d0:71:a3:1d:b5:25:
                    e8:5c:f8:8e:3b:c5:26:86:7c:a8:6b:46:d1:0d:dc:
                    27:ba:22:d5:c1:48:7e:e0:29:42:54:83:78:2f:e1:
                    1d:65:9b:62:54:9c:99:86:a0:13:f0:75:dd:41:6d:
                    23:f0:e5:43:32:5c:a3:43:e8:3b:ac:47:4e:3c:ff:
                    db:30:88:bc:af:16:a3:ff:ac:e5:0b:91:2a:4a:1a:
                    59:aa:1e:b5:1e:4b:09:80:23:83:12:57:ef:5c:23:
                    99:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:9B:2B:CD:E3:B2:59:F4:92:46:D9:6A:59:27:8B:5B:FA:A3:52:9F
            X509v3 Authority Key Identifier:
                keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/1-JsrzeOyWfSSRtlqWSeLW_qjUp8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64:ffff:0:18f:543:9e41/128

    Signature Algorithm: sha256WithRSAEncryption
         d1:cf:49:18:8b:08:c5:06:10:b8:d3:e0:b9:c1:a5:49:d0:fd:
         06:fd:b2:cd:9c:5b:98:c1:0f:56:56:5f:97:0a:14:9e:68:d0:
         62:73:e3:59:35:a8:20:ea:ae:8d:fb:72:1b:4e:55:69:18:77:
         01:6f:98:4e:c1:10:20:41:37:60:f9:d7:a4:53:40:b4:a8:b1:
         9e:ef:14:30:a4:3c:12:ea:39:bb:14:1a:ce:ad:cb:4e:76:05:
         34:c9:77:f7:72:aa:6a:3c:93:c6:b5:11:11:d5:a7:6e:d3:a6:
         bf:a3:84:5b:1b:13:a4:5b:db:84:f5:9b:4a:66:cc:88:99:16:
         8e:c1:f8:94:7c:ac:5a:66:1e:ea:d9:8b:f4:22:c0:9e:12:02:
         3d:7a:61:73:98:43:84:fb:e9:e1:97:a7:67:5f:d1:fa:48:59:
         ef:c5:32:fc:8b:08:c7:bd:9c:81:b6:38:e4:97:fb:c9:9c:fa:
         95:6f:24:32:96:de:e5:f3:ef:27:eb:09:3a:6b:f8:d2:39:58:
         20:94:38:53:bf:70:bb:73:f1:fe:71:88:a8:97:f3:e0:c5:22:
         79:c2:f4:b1:e7:5a:e9:6f:ff:b8:8f:7c:5c:c3:d4:1f:0c:4a:
         d9:b7:c7:48:5d:fc:03:32:f6:7f:7c:99:64:35:53:6a:17:7e:
         36:60:ae:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----