Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/1TP5WVNO7GLcPyRIju-mSrol2os.roa
File:                     1TP5WVNO7GLcPyRIju-mSrol2os.roa (raw, json)
Hash identifier:          2aEqf9vx6a8ryormZOCldo5pvK3DJzpZjVi5H15+BPM=
Subject key identifier:   D5:33:F9:59:53:4E:EC:62:DC:3F:24:48:8E:EF:A6:4A:BA:25:DA:8B
Certificate issuer:       /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial:       018F528AC3502B3244CA4981E42281822F6E
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/1TP5WVNO7GLcPyRIju-mSrol2os.roa
Signing time:             Tue 07 May 2024 10:12:56 +0000
ROA not before:           Tue 07 May 2024 10:12:56 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:52:8a:c3:50:2b:32:44:ca:49:81:e4:22:81:82:2f:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
        Validity
            Not Before: May  7 10:12:56 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=d533f959534eec62dc3f24488eefa64aba25da8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:39:53:77:8b:a1:2b:99:32:f7:af:89:56:14:
                    ac:5a:09:f0:d4:f1:25:23:cb:ae:78:09:89:64:6d:
                    04:4f:6d:44:f3:b4:ee:ca:1a:23:d7:fa:85:43:78:
                    85:46:f4:ee:d9:56:d7:24:bf:40:33:5d:54:b1:07:
                    eb:e9:7e:4d:28:67:43:dd:d8:5a:a0:4f:61:36:27:
                    05:0b:73:bd:c3:97:5d:9e:f1:46:05:86:a9:df:2e:
                    2b:2c:52:0a:7f:b4:c0:98:3f:13:01:96:a3:5a:ad:
                    55:ff:f3:29:13:3a:10:9d:dc:86:6f:09:c7:5b:da:
                    21:04:4a:06:2f:34:eb:2f:61:0d:06:bd:35:59:8a:
                    d0:3b:a5:7e:13:46:9f:77:db:79:68:db:37:6d:41:
                    16:fe:14:46:5a:87:10:33:85:cf:e6:a5:2e:26:ae:
                    d8:2e:99:61:b4:82:5c:d6:0d:97:e3:38:16:a8:92:
                    96:d4:2d:42:7c:78:20:c1:1b:d5:d8:83:c1:ca:d2:
                    de:91:88:96:81:1e:d3:a7:64:11:89:46:62:1b:c2:
                    07:a7:5d:d3:aa:79:9a:0b:c6:8f:5f:ef:1c:df:9f:
                    89:d8:02:14:26:f6:27:33:21:97:a7:49:f8:9d:bf:
                    1b:7c:bd:56:9e:71:44:89:5e:98:35:e2:87:d9:a4:
                    a9:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:33:F9:59:53:4E:EC:62:DC:3F:24:48:8E:EF:A6:4A:BA:25:DA:8B
            X509v3 Authority Key Identifier:
                keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/1TP5WVNO7GLcPyRIju-mSrol2os.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         78:c5:23:dd:59:cf:5e:85:5f:d4:9f:81:aa:97:89:49:50:f2:
         85:d1:d1:ba:2f:0e:14:ec:a4:51:ed:0e:e9:6c:6c:47:6c:e9:
         98:24:0d:ac:c8:25:df:7a:d4:33:be:59:a7:49:f0:fc:1b:4f:
         2b:03:db:90:2b:0e:ba:1a:b0:db:b2:2c:db:11:c3:17:7a:f8:
         51:e6:01:6f:c5:81:87:4d:d5:6e:ec:e4:5e:41:01:84:1f:ec:
         79:39:cd:a2:e6:c1:08:96:ee:0d:82:55:94:9a:01:f7:26:07:
         90:8b:16:66:f4:94:4e:dc:5b:93:8b:49:62:df:59:a1:49:3a:
         ee:0a:46:59:b3:52:aa:90:9b:db:ba:3a:c5:bd:0d:35:bb:ee:
         3d:18:a9:23:e4:46:01:6f:87:09:fd:45:c2:8b:a6:46:86:13:
         ed:c2:f6:86:a6:24:3f:1a:ae:0d:12:36:25:8d:9b:e0:b8:b1:
         f0:27:2b:f3:c4:4f:54:5b:49:85:84:4b:6b:fc:db:d7:09:a7:
         34:70:64:fe:36:c4:7e:10:13:e1:f8:7b:b2:75:1c:c3:e3:d7:
         a4:72:f4:31:12:41:56:fa:cb:b5:94:1b:7d:63:08:4c:bc:44:
         d8:7c:df:46:e5:5a:bc:52:57:71:83:3e:59:df:5f:1c:41:60:
         6e:53:8a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----