Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/BT5Tc_nsO2kQwayy6rLW8SbW2oU.roa
File:                     BT5Tc_nsO2kQwayy6rLW8SbW2oU.roa (raw, json)
Hash identifier:          omGXYLJpxqMV8QuoiFsCr59808CNqD3hRDiYULXyf/Q=
Subject key identifier:   05:3E:53:73:F9:EC:3B:69:10:C1:AC:B2:EA:B2:D6:F1:26:D6:DA:85
Certificate issuer:       /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial:       018F8A8A3879FC1AC097C74EE8EB8D16F51A
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/BT5Tc_nsO2kQwayy6rLW8SbW2oU.roa
Signing time:             Sat 18 May 2024 07:11:04 +0000
ROA not before:           Sat 18 May 2024 07:11:04 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8a:8a:38:79:fc:1a:c0:97:c7:4e:e8:eb:8d:16:f5:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
        Validity
            Not Before: May 18 07:11:04 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=053e5373f9ec3b6910c1acb2eab2d6f126d6da85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c4:39:74:bb:f8:98:86:18:a0:c6:87:f7:98:
                    47:84:9b:36:7a:84:fd:5c:a6:41:8a:ed:de:a3:2c:
                    81:3e:fb:8a:17:bf:9f:5e:28:7e:70:84:41:02:c7:
                    a1:12:4b:45:9f:b7:f7:d3:d9:f1:d5:a2:8c:d8:44:
                    48:ae:38:c3:cc:59:8a:4c:d9:7d:05:1f:67:27:d0:
                    f4:e1:31:a0:9b:83:50:8d:1d:a2:68:21:8a:e9:fc:
                    85:e7:70:d9:c1:d3:05:4f:c7:2d:3c:53:ca:69:24:
                    d3:5c:1d:26:02:9f:02:9c:80:50:7a:80:a3:5b:ad:
                    7d:d0:16:64:c1:ad:ea:9c:9c:b4:58:7e:7f:49:95:
                    5b:3b:b5:3b:75:36:cd:ec:51:7a:21:58:8d:f8:f4:
                    6f:5c:87:3e:e6:d2:66:b6:f9:25:d5:be:f8:9d:79:
                    38:bc:8a:f2:d5:f9:e1:d8:48:fd:68:36:8b:50:e9:
                    be:e3:9f:5a:71:a4:88:f4:bc:45:9d:f2:9f:41:e0:
                    d7:7a:ed:b4:23:2c:b1:9e:d4:f3:07:d2:8d:d0:e1:
                    29:8c:de:61:4a:9a:61:2d:d6:7d:19:e0:ab:90:fa:
                    16:b9:1d:26:55:56:28:16:1c:1f:43:f4:59:dc:ef:
                    99:81:bd:6d:3c:5b:8a:15:1f:5a:00:06:d0:f1:dc:
                    d2:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:3E:53:73:F9:EC:3B:69:10:C1:AC:B2:EA:B2:D6:F1:26:D6:DA:85
            X509v3 Authority Key Identifier:
                keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/BT5Tc_nsO2kQwayy6rLW8SbW2oU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         12:4e:4b:c8:01:c5:e5:13:ca:bf:87:61:3c:f3:b8:a6:fd:20:
         41:95:56:2b:6b:32:9b:41:30:4d:29:90:04:2e:e9:95:f5:75:
         5a:1d:be:70:11:d3:78:24:5a:d3:9a:b6:38:c2:4d:3d:03:13:
         ff:a6:bb:4a:e2:9b:3e:44:bc:b6:4f:52:f8:39:61:c5:0e:61:
         ef:fe:9f:4c:a3:f7:fd:83:72:6c:33:ee:3a:84:10:10:22:35:
         42:05:05:48:86:2a:51:37:06:40:f1:ca:13:bd:51:67:33:27:
         15:50:d3:07:2d:79:28:57:d6:a8:93:34:93:81:fd:31:d0:09:
         14:b2:12:40:88:33:b3:10:ca:49:54:3f:ea:e5:19:db:6e:f3:
         c7:d7:df:5a:1d:24:3d:90:49:1f:b1:ea:89:1c:26:b3:35:da:
         a2:7e:2e:2e:13:d4:aa:eb:05:af:ab:c7:ea:c4:56:c0:40:02:
         5f:94:7f:c6:3d:43:5c:41:e4:d1:d3:ed:6d:fb:20:ed:38:7e:
         10:32:a6:92:28:fa:df:a0:52:9c:8d:06:be:4e:f5:ac:72:d3:
         b0:a1:11:ca:a8:01:38:41:e7:ca:cd:73:75:58:2d:51:b9:04:
         bc:84:38:f1:00:11:4c:0d:d6:b1:64:8a:65:9e:40:26:e6:10:
         29:b3:b9:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----