Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/94aGRgE1a4N4052jYnCIL488eM4.roa
File:                     94aGRgE1a4N4052jYnCIL488eM4.roa (raw, json)
Hash identifier:          qunFM00q89vcdAZ9kS+JykqyVUDVpUKeFZ4L7pjD+24=
Subject key identifier:   F7:86:86:46:01:35:6B:83:78:D3:9D:A3:62:70:88:2F:8F:3C:78:CE
Certificate issuer:       /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial:       018F8676827B86B31E9C978B2DAEA6F39E46
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/94aGRgE1a4N4052jYnCIL488eM4.roa
Signing time:             Fri 17 May 2024 12:11:04 +0000
ROA not before:           Fri 17 May 2024 12:11:04 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:76:82:7b:86:b3:1e:9c:97:8b:2d:ae:a6:f3:9e:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
        Validity
            Not Before: May 17 12:11:04 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=f786864601356b8378d39da36270882f8f3c78ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:58:2f:16:41:a9:f3:11:9a:17:c5:f3:56:b5:
                    ee:54:77:02:c4:0f:0c:15:e7:ed:e6:39:46:3e:4a:
                    8b:95:64:0d:df:8a:96:3f:8b:ad:79:78:e3:63:cb:
                    05:0c:b9:c4:3e:b4:5f:5c:97:eb:27:21:cc:aa:34:
                    5f:69:1d:83:c2:9d:32:5b:4f:3d:0f:24:12:32:13:
                    d4:9c:2b:19:a1:40:22:2c:5a:1d:74:a7:10:ae:c1:
                    0e:c6:75:3a:ae:0e:3f:a9:c7:60:d3:24:4e:13:7d:
                    ae:c1:0e:c6:9d:58:12:e7:ba:ff:cd:61:99:c5:a0:
                    2c:e7:15:ff:54:17:59:d4:2d:c3:82:70:1f:6e:19:
                    8e:0f:6f:a3:08:7a:f9:f3:77:31:fc:95:0c:f2:7d:
                    07:cf:29:8b:ce:18:08:f0:32:e4:30:12:02:31:47:
                    a1:fb:44:c8:1c:f6:23:c9:8c:17:db:94:9b:45:35:
                    f8:86:92:c6:a3:62:a3:a2:29:31:e4:41:48:b8:44:
                    91:3d:e4:a9:13:80:63:10:a2:60:cb:6b:fb:e3:72:
                    c7:c0:55:2d:09:72:78:30:cd:fc:96:fa:d8:78:60:
                    18:7d:cd:00:4d:cf:a9:2f:c2:3c:80:a6:2a:64:0f:
                    dc:54:ba:02:de:81:4e:23:4a:c3:a7:14:ae:5c:85:
                    78:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:86:86:46:01:35:6B:83:78:D3:9D:A3:62:70:88:2F:8F:3C:78:CE
            X509v3 Authority Key Identifier:
                keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/94aGRgE1a4N4052jYnCIL488eM4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         27:37:15:de:ce:97:a3:fb:d7:e7:11:6d:60:7b:13:42:01:fd:
         ef:fe:5a:82:5c:60:a2:04:11:d7:3d:d9:e3:da:cc:57:49:0c:
         58:fc:ba:85:de:71:76:af:cb:4a:c5:0b:6d:44:15:e6:45:f4:
         ce:4e:27:61:ea:6d:a2:87:aa:95:ae:86:14:e4:7e:44:8c:8f:
         61:ad:dd:af:1d:c3:9a:a9:04:23:9b:10:fa:c3:bd:3e:ad:89:
         28:e7:2c:36:75:d7:cb:8a:8d:02:ce:b8:90:71:a0:ed:ff:9a:
         b4:1e:39:6d:05:20:1e:a2:b0:c6:0b:f2:d5:78:d1:8e:a3:9a:
         dd:2a:cb:a3:7c:39:6f:95:03:29:b8:dc:75:84:96:cf:a6:01:
         f8:5b:cc:cc:ad:47:8c:39:2c:3e:49:a4:24:e5:81:dc:ce:48:
         70:8a:57:fe:c6:2a:a3:c1:ff:6d:0a:cd:c4:0c:d8:7b:16:1e:
         0f:2c:a7:4f:c1:68:44:dc:7d:ee:32:d1:0e:b8:88:82:10:1a:
         bb:19:e6:13:98:31:75:3e:16:78:01:c0:71:18:e9:b0:94:5f:
         9f:ce:5b:f5:cb:a7:ee:fd:90:cf:41:86:90:ed:63:c0:da:f2:
         14:1a:65:b0:c7:84:16:87:01:55:a9:60:54:bb:77:87:25:24:
         4e:2d:15:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----