Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/AJEgkIAB3xylD9AgMKaORvi3Um4.roa
File:                     AJEgkIAB3xylD9AgMKaORvi3Um4.roa (raw, json)
Hash identifier:          eqFCpr1RHvnoJzqIBG4sHYTAd6+dL8+rMvJnl665IMw=
Subject key identifier:   00:91:20:90:80:01:DF:1C:A5:0F:D0:20:30:A6:8E:46:F8:B7:52:6E
Certificate issuer:       /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial:       018F7326FBD7BB8A2A22F38112FED629971C
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/AJEgkIAB3xylD9AgMKaORvi3Um4.roa
Signing time:             Mon 13 May 2024 18:11:25 +0000
ROA not before:           Mon 13 May 2024 18:11:25 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:73:26:fb:d7:bb:8a:2a:22:f3:81:12:fe:d6:29:97:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
        Validity
            Not Before: May 13 18:11:25 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=009120908001df1ca50fd02030a68e46f8b7526e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ad:48:c6:fb:63:3e:a5:35:49:71:ed:cb:34:
                    99:e4:5b:61:a1:be:05:85:87:b7:4e:4f:f9:0e:64:
                    15:b8:82:44:af:be:0e:d8:3a:ae:83:64:fc:56:d8:
                    ae:8b:4d:b1:d7:26:29:3e:a2:05:4b:17:42:0b:40:
                    0e:c3:bd:2a:a9:bf:66:83:ad:06:8a:f1:e3:b3:f4:
                    f7:b3:79:fa:2a:8c:b0:72:27:85:88:cb:83:36:cf:
                    87:d3:0c:d6:47:3b:b4:68:52:73:7c:42:2d:4b:99:
                    4d:ce:12:4e:0d:9f:1c:db:61:51:aa:56:03:57:94:
                    da:c5:f4:31:e6:fc:e2:c3:f0:2d:1d:33:e8:bc:30:
                    a7:7a:8e:37:2b:79:2e:aa:ed:f0:58:cb:ce:37:9e:
                    ee:a0:45:05:9f:a3:87:8f:98:2c:b0:fb:42:93:c8:
                    77:ca:52:fa:3b:2a:c2:4c:89:24:1d:36:d2:2d:0f:
                    41:94:63:69:b2:06:76:c8:2d:40:8f:af:b6:1d:06:
                    ba:f9:1b:6e:06:3d:6b:33:e8:7f:b4:06:82:de:6e:
                    57:25:9b:59:80:b3:3e:0e:ce:dd:32:5f:36:64:2f:
                    a9:10:32:c0:04:19:e1:3d:11:36:66:7f:1c:98:08:
                    0d:a3:7d:66:00:64:b5:8a:39:0b:69:0d:85:64:97:
                    a6:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:91:20:90:80:01:DF:1C:A5:0F:D0:20:30:A6:8E:46:F8:B7:52:6E
            X509v3 Authority Key Identifier:
                keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/AJEgkIAB3xylD9AgMKaORvi3Um4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         93:5b:02:2e:aa:11:a1:b8:53:47:d6:33:89:0a:a7:86:d8:eb:
         5a:05:7d:0f:d6:a9:42:c0:71:c8:c3:c6:b3:10:11:f0:65:f4:
         48:b8:36:71:1e:b5:3a:69:2c:55:a2:37:1e:92:ae:34:e6:3c:
         8a:d4:43:f3:8a:ae:31:93:19:99:75:03:d7:b8:4e:5a:3a:17:
         a2:cc:57:ee:66:c1:34:9c:c6:36:ac:c5:ef:62:db:3b:9b:6d:
         42:10:9f:12:52:23:d3:32:4d:36:06:c3:95:e8:8b:f9:53:b7:
         e8:51:cd:48:5e:29:db:a5:7a:5d:7b:22:2a:35:41:9f:ca:6c:
         07:fb:0f:e0:c2:23:74:35:65:51:a4:eb:94:04:c7:6a:8f:7b:
         f5:f7:48:de:ca:e1:c6:3a:44:55:74:bc:9d:8c:0b:c0:d8:f8:
         b5:f9:14:5a:4e:98:b6:07:75:b5:f7:b2:d3:9d:15:4d:a3:fe:
         ac:c5:6e:23:81:9a:e4:49:4b:d9:3b:d6:bd:86:12:f5:36:e5:
         21:0e:02:f1:2b:e0:d4:89:66:3d:88:7c:7c:ac:bf:63:f8:b3:
         3c:38:a4:26:c2:01:40:43:d9:d5:49:24:4b:d8:b2:bb:8a:75:
         86:90:03:5d:12:42:7f:e0:49:3d:b4:ff:29:fc:dd:c4:d4:64:
         91:98:d5:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----