Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/Eqdq0V5S63PC5d1uVAjmNJCDF38.roa
File:                     Eqdq0V5S63PC5d1uVAjmNJCDF38.roa (raw, json)
Hash identifier:          In85gBx1N4zwp52XoG5tlDtyZXSzcTVjKotBVjS/uBk=
Subject key identifier:   12:A7:6A:D1:5E:52:EB:73:C2:E5:DD:6E:54:08:E6:34:90:83:17:7F
Certificate issuer:       /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial:       018EF78F4759C1D7F29BB60051338A953FF0
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/Eqdq0V5S63PC5d1uVAjmNJCDF38.roa
Signing time:             Fri 19 Apr 2024 18:12:25 +0000
ROA not before:           Fri 19 Apr 2024 18:12:25 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:f7:8f:47:59:c1:d7:f2:9b:b6:00:51:33:8a:95:3f:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
        Validity
            Not Before: Apr 19 18:12:25 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=12a76ad15e52eb73c2e5dd6e5408e6349083177f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:47:1b:30:14:0e:92:06:28:73:4c:04:d7:73:
                    19:75:8d:62:a4:65:16:4d:06:51:20:16:7d:8e:13:
                    c2:29:f5:35:89:37:ad:75:40:0d:01:fe:ef:8e:3c:
                    62:76:4d:95:41:fc:1d:41:3f:6b:27:fd:a6:e6:9a:
                    04:1b:72:63:0c:eb:b3:30:1a:98:ca:b2:39:7e:27:
                    3a:08:39:89:ef:78:df:69:bc:bf:8e:3e:82:e9:4c:
                    53:f5:a5:28:99:07:e0:a4:9f:56:a2:7a:91:7a:5e:
                    f4:7e:54:af:fb:d6:c5:5c:71:95:7e:16:d3:44:24:
                    6c:8e:e5:eb:18:25:02:33:b6:ac:e7:d5:76:8b:87:
                    83:28:bc:d9:63:c4:1b:9a:36:0f:91:74:d0:94:4d:
                    a7:ac:18:72:b5:14:53:be:39:1b:fb:b4:ae:47:0e:
                    6b:3d:18:c8:c7:e8:ef:26:19:79:82:cb:cc:4f:5d:
                    10:ae:ef:4f:32:12:8a:5e:9a:90:cd:85:67:9b:22:
                    18:db:e6:a0:e8:b0:fa:8f:6d:32:d4:22:25:3a:ca:
                    12:56:d9:43:3c:39:0b:7b:13:96:d6:9f:bd:34:d4:
                    62:ce:85:41:20:d4:b3:92:43:1f:00:8b:42:77:e0:
                    61:9c:1c:6a:f9:76:0b:00:07:1a:50:51:8b:47:2d:
                    0c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:A7:6A:D1:5E:52:EB:73:C2:E5:DD:6E:54:08:E6:34:90:83:17:7F
            X509v3 Authority Key Identifier:
                keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/Eqdq0V5S63PC5d1uVAjmNJCDF38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2d:c2:87:05:6e:bf:29:13:c5:1a:28:6b:4a:5b:d0:7a:03:57:
         e2:ce:31:19:11:e1:53:93:b6:0a:f6:25:23:4a:b2:ab:c3:7e:
         05:96:f8:89:1e:d3:77:23:00:ee:ab:84:9c:80:1a:5b:2f:46:
         4e:0b:cd:5d:75:3a:59:29:be:97:cc:c4:3b:96:35:4a:83:82:
         a8:23:74:36:f1:8c:27:46:52:86:0f:d6:2d:61:b9:13:6a:bf:
         4d:b3:73:15:56:25:01:e8:68:1c:14:39:53:63:70:8e:60:98:
         e0:f6:da:fb:ad:2d:f0:41:4b:5d:40:04:ad:65:8f:3c:cb:01:
         e7:eb:a8:c9:15:96:7b:5a:37:75:44:87:6a:f4:04:d0:ca:1c:
         d7:70:c9:0f:42:74:02:f5:cd:b3:34:56:ce:3e:9a:e2:66:72:
         71:3e:43:81:11:b6:7e:a7:22:7d:7a:1b:73:87:03:1a:d4:b3:
         26:49:42:cf:df:d9:44:c8:38:a3:26:95:12:8a:af:fc:9b:ef:
         e8:b4:f6:00:c3:b0:aa:2c:fe:02:73:d5:68:85:a3:61:91:62:
         b2:49:f9:c7:d3:ba:2c:d4:c8:db:91:d1:ab:c6:fe:11:1a:2b:
         10:5a:41:74:21:01:09:f9:4a:2f:90:61:38:ff:3f:b4:b5:2f:
         8c:9c:b4:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----