Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/CdYVAbWEBSX_n2SZVv06hMyTFTw.roa
File:                     CdYVAbWEBSX_n2SZVv06hMyTFTw.roa (raw, json)
Hash identifier:          S7fQCQcYz4Zc3SWT4A4SzA4A2qfQRuE/yfog20+cryc=
Subject key identifier:   09:D6:15:01:B5:84:05:25:FF:9F:64:99:56:FD:3A:84:CC:93:15:3C
Certificate issuer:       /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial:       018F97A01FC8A8903A4E451DAC66391E9E05
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/CdYVAbWEBSX_n2SZVv06hMyTFTw.roa
Signing time:             Mon 20 May 2024 20:10:04 +0000
ROA not before:           Mon 20 May 2024 20:10:04 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18f:9689:3f54/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:97:a0:1f:c8:a8:90:3a:4e:45:1d:ac:66:39:1e:9e:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
        Validity
            Not Before: May 20 20:10:04 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=09d61501b5840525ff9f649956fd3a84cc93153c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:21:be:a6:d0:96:6d:7d:ba:8e:79:a9:dd:d9:
                    68:a6:12:7c:90:b4:46:6e:09:5f:e3:06:cf:31:ba:
                    58:8d:16:0c:2a:2b:a0:14:66:5d:98:82:b7:81:21:
                    84:cd:95:c8:18:3b:02:57:bd:b2:0a:65:9e:0c:56:
                    5a:87:1c:73:b6:ab:fe:82:d0:a2:ca:c2:67:de:90:
                    ce:0c:7c:66:ef:7b:fa:91:44:0f:75:e7:8f:a1:a8:
                    8d:23:d5:e5:07:58:94:8f:dd:25:fa:9e:09:41:e3:
                    2a:ec:44:21:d3:95:4f:3b:fc:72:28:89:78:00:e3:
                    a4:b4:e4:75:74:2e:e7:be:f8:35:69:fe:ec:40:5b:
                    27:40:6d:27:c6:41:07:53:eb:77:b4:81:ce:49:f1:
                    aa:93:cc:c9:65:b3:e3:2e:19:c9:58:9c:aa:67:f2:
                    aa:6c:dd:b8:dc:74:ad:5c:8b:a5:e7:dd:c0:86:22:
                    06:7d:10:13:08:e2:37:7c:b5:2a:1b:38:d5:3e:c5:
                    81:2c:7a:a1:13:be:5d:4a:4e:3b:94:21:06:30:a6:
                    ec:f3:ad:2e:08:c5:a7:e9:9c:fb:94:da:b1:d9:59:
                    71:39:14:96:a2:fd:b5:10:95:db:0b:99:08:63:6f:
                    28:44:05:2a:92:5f:b8:01:c6:ff:21:ae:86:0a:96:
                    b9:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:D6:15:01:B5:84:05:25:FF:9F:64:99:56:FD:3A:84:CC:93:15:3C
            X509v3 Authority Key Identifier:
                keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/CdYVAbWEBSX_n2SZVv06hMyTFTw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         ae:a5:27:ce:ad:80:d8:94:8e:b0:f2:5b:fd:cc:58:fd:31:79:
         d4:d4:63:07:74:3c:56:41:21:6a:07:dd:1c:8a:f0:46:d5:d9:
         dc:61:59:38:35:da:fc:01:36:c2:8b:28:63:04:f0:50:46:5c:
         74:1d:e3:89:1e:51:02:8b:a2:52:97:61:8d:2e:04:25:a5:b4:
         96:65:d1:44:82:32:e4:8a:99:05:26:66:e2:65:e0:67:16:99:
         0a:92:86:c6:be:20:f9:b0:e0:a5:c0:cc:d2:b9:38:4f:e9:02:
         f4:8b:d4:9c:c4:84:d2:1b:46:24:e0:45:89:78:c0:02:78:6c:
         12:1a:5f:ca:b5:d5:85:42:b8:9f:5b:46:0d:1f:67:f5:31:e1:
         8a:63:44:ae:86:7d:6b:cb:2c:31:f3:2e:85:dd:6d:9e:1e:e5:
         9d:8b:12:48:51:b5:bb:d1:d2:b0:cb:b1:ac:d3:3c:1a:40:9e:
         a4:52:94:a4:97:65:5a:b1:5a:c2:7c:9b:50:06:40:d7:b9:87:
         83:bd:42:f4:b3:f7:81:01:e1:e4:29:a1:dc:f9:14:0e:bc:90:
         88:1a:f8:3e:5d:b0:ba:64:69:a4:7f:e3:82:0b:ca:6e:1c:71:
         8e:6d:c4:33:9e:39:61:57:73:7c:c4:96:cd:9c:72:2b:6a:ed:
         8c:9c:2a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----