Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/9t0d6CakWnYx8204AbG_4Nd9FIA.roa
File:                     9t0d6CakWnYx8204AbG_4Nd9FIA.roa (raw, json)
Hash identifier:          ZOWhMXn3RR/DIWhb2rXOVQ+SsMAP01AM+d+9qb+8PMs=
Subject key identifier:   F6:DD:1D:E8:26:A4:5A:76:31:F3:6D:38:01:B1:BF:E0:D7:7D:14:80
Certificate issuer:       /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial:       018F562FAF311F87FC584AD9F00EB1CD596B
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/9t0d6CakWnYx8204AbG_4Nd9FIA.roa
Signing time:             Wed 08 May 2024 03:11:56 +0000
ROA not before:           Wed 08 May 2024 03:11:56 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:56:2f:af:31:1f:87:fc:58:4a:d9:f0:0e:b1:cd:59:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
        Validity
            Not Before: May  8 03:11:56 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=f6dd1de826a45a7631f36d3801b1bfe0d77d1480
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:1f:dc:1a:b4:1b:d5:93:d8:ed:dd:e1:56:7c:
                    ef:0e:83:27:a0:02:35:33:48:60:91:bf:1a:ba:98:
                    af:c6:0a:45:af:b2:82:d6:e4:44:45:49:1b:7d:ac:
                    9b:b8:03:cf:ac:a1:01:5f:61:18:1f:1b:9a:af:e2:
                    93:31:4a:ad:67:e8:65:85:10:c3:ba:76:0a:95:ff:
                    e5:d7:dd:d8:71:a4:ee:25:59:0e:b3:d4:cc:cc:aa:
                    8d:a6:16:01:07:54:32:20:19:e5:a7:a5:2e:32:61:
                    15:1c:f0:1c:0d:45:29:df:f8:c9:5d:98:8f:e8:3e:
                    1e:34:8b:7c:5b:ef:f6:c5:10:aa:8c:10:08:b6:c5:
                    d7:e0:c8:05:7d:6b:04:e1:8c:f6:f6:c1:51:a5:7e:
                    eb:c3:e8:31:56:24:38:26:38:a4:7c:e6:ec:11:a6:
                    89:47:5f:3d:8e:89:5b:79:79:00:af:66:e9:15:f1:
                    2a:ed:63:34:86:61:cf:26:81:64:d8:5d:08:cc:02:
                    62:8e:07:e1:d7:b4:3c:d4:39:5d:ee:76:1d:ec:17:
                    3e:27:ea:dd:34:0c:c6:6e:d6:f3:ec:7b:92:dc:a7:
                    2e:68:cf:e4:31:89:55:6e:6f:2a:b5:84:af:bf:6b:
                    a5:fa:01:3e:b4:c8:c5:1f:06:36:7e:1c:2b:b4:46:
                    17:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:DD:1D:E8:26:A4:5A:76:31:F3:6D:38:01:B1:BF:E0:D7:7D:14:80
            X509v3 Authority Key Identifier:
                keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/9t0d6CakWnYx8204AbG_4Nd9FIA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         56:42:6c:45:07:81:a2:d8:b3:6f:5b:aa:59:54:6e:39:d9:3f:
         f6:73:6e:80:37:cf:e0:c3:16:dd:ba:25:2a:a7:3a:86:a5:74:
         3e:00:36:fd:e3:a9:dc:4a:05:e3:79:03:ad:e5:14:b0:86:bd:
         cd:6b:77:26:47:df:f7:19:2f:dc:5a:16:57:1c:4b:55:d4:0d:
         9e:00:06:d4:1a:3d:22:fd:f4:89:7b:64:f4:9d:bb:cc:04:cd:
         01:26:be:d9:db:e4:61:41:b6:ef:97:6b:2d:bd:b8:af:d5:43:
         8d:ba:40:5b:0a:5b:3b:73:55:64:59:74:dd:99:7f:07:30:a1:
         a6:6b:13:88:8a:35:b5:f8:bf:9e:9b:b1:ec:94:03:55:8b:91:
         75:dd:05:c3:1b:d9:02:21:72:1e:b3:9f:e9:5e:07:a4:29:79:
         bb:dc:72:5f:38:48:40:c1:83:9f:94:f1:31:2e:22:f0:47:02:
         13:74:5a:0a:7a:20:38:40:7c:01:f9:51:c4:9a:07:b7:7f:91:
         6e:c9:77:5c:9a:d8:b6:2d:3a:f4:4c:81:77:53:a2:3d:f8:6d:
         7f:4d:08:08:16:93:bb:32:7b:e1:ba:68:2e:e8:23:d7:93:e1:
         7f:09:9e:ef:bf:fb:35:fe:76:e8:e7:44:ee:55:10:77:9c:73:
         b0:b3:bc:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----