Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/7XmSajH6Y3DJ6l0jr2qWe-DHUec.roa
File:                     7XmSajH6Y3DJ6l0jr2qWe-DHUec.roa (raw, json)
Hash identifier:          DflNnN4HF+7hEta5+eBgLP8Nd+LP1AgS9vLWud9ZORM=
Subject key identifier:   ED:79:92:6A:31:FA:63:70:C9:EA:5D:23:AF:6A:96:7B:E0:C7:51:E7
Certificate issuer:       /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial:       018F57B11F40FE8D1BE7DB57FDEE0FB88CDD
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/7XmSajH6Y3DJ6l0jr2qWe-DHUec.roa
Signing time:             Wed 08 May 2024 10:12:56 +0000
ROA not before:           Wed 08 May 2024 10:12:56 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:57:b1:1f:40:fe:8d:1b:e7:db:57:fd:ee:0f:b8:8c:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
        Validity
            Not Before: May  8 10:12:56 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=ed79926a31fa6370c9ea5d23af6a967be0c751e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ac:59:c5:b0:b4:bd:6c:c3:93:6a:d6:82:e2:
                    ec:cd:45:32:91:d2:ed:59:a2:6d:c7:9a:5b:08:d2:
                    02:be:bc:b0:32:e6:73:bb:b8:82:a0:f3:6c:57:5c:
                    67:f1:9b:ce:23:59:c7:b8:49:d9:07:c0:04:3d:05:
                    3e:81:96:ed:1d:f7:94:9e:bb:96:9f:f8:f9:1e:e7:
                    23:38:36:a3:d6:a0:16:aa:52:21:d7:06:e5:97:ef:
                    d3:44:f7:ee:35:0f:23:ed:77:54:ea:b6:07:8e:6e:
                    88:70:1e:81:95:19:7f:a8:88:b9:ac:33:23:6b:0d:
                    08:b9:2f:cf:7a:79:8d:29:54:ef:c2:f1:a2:5a:f8:
                    2c:a4:e1:b7:32:d0:a6:61:27:21:60:3a:42:12:7e:
                    52:81:39:36:82:c1:17:96:5d:28:16:26:40:89:0f:
                    c1:c4:68:81:00:03:3a:56:9e:e4:1b:18:e2:ea:8a:
                    c2:21:cf:15:74:72:81:f6:0e:3f:ec:21:48:22:12:
                    50:93:6d:af:6a:e2:01:13:c0:58:81:06:06:d3:49:
                    27:22:a6:08:26:a0:36:e2:01:33:9a:c4:f0:7b:9d:
                    fa:72:50:d6:5a:f0:63:c1:41:4c:34:83:79:7b:71:
                    02:d4:c3:01:7b:3e:bb:d5:1b:fb:c7:5f:f2:81:9d:
                    74:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:79:92:6A:31:FA:63:70:C9:EA:5D:23:AF:6A:96:7B:E0:C7:51:E7
            X509v3 Authority Key Identifier:
                keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/7XmSajH6Y3DJ6l0jr2qWe-DHUec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         98:b6:5d:3c:3c:69:ed:7a:a2:ea:37:ef:06:90:16:bd:1c:f9:
         46:21:61:82:8a:5a:af:74:81:81:3a:2c:9d:8f:38:81:c4:f1:
         5c:65:2e:61:1f:ba:d3:65:b7:26:bf:4e:ae:0b:e6:fc:50:d4:
         2c:0c:79:7a:f1:b5:e0:e0:90:5a:07:cd:31:13:af:b7:f0:2f:
         6d:f7:2e:b1:c9:2c:c5:40:99:a7:00:90:64:f5:d0:fb:db:4a:
         34:9c:f8:46:93:93:78:a7:74:a5:17:4f:0a:4f:67:38:9a:b8:
         e1:ea:1e:47:2e:8c:89:8a:1d:2e:62:72:77:ff:f4:78:8c:42:
         30:d2:73:5e:1d:11:87:d7:a9:3f:eb:08:c8:a9:89:fd:8a:0e:
         ed:69:1a:1f:06:eb:74:05:22:85:58:a4:8f:de:ac:aa:ae:b5:
         bc:37:63:0d:69:ed:aa:d2:35:a8:0a:09:1c:de:c8:8b:78:30:
         ad:4d:ee:c7:a6:34:ba:ee:dc:c6:df:2a:d4:1d:fa:24:bb:ad:
         c2:15:9a:96:c5:45:23:68:93:b5:06:c7:66:32:61:2e:d8:39:
         99:07:8b:f1:78:c8:f5:9c:b0:c8:7e:93:b9:b2:ce:cb:68:ff:
         69:03:d4:cd:2e:57:89:91:07:d7:76:46:c4:29:ec:d4:74:b5:
         ea:e3:51:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----