Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/F548nbQiubMcc6CjOJswzR3lH2I.roa
File:                     F548nbQiubMcc6CjOJswzR3lH2I.roa (raw, json)
Hash identifier:          sf7hAUK8b4OJNqRYA2srsvdRDcmsOb/KGjBYAkIfqP4=
Subject key identifier:   17:9E:3C:9D:B4:22:B9:B3:1C:73:A0:A3:38:9B:30:CD:1D:E5:1F:62
Certificate issuer:       /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial:       018F29424FFCAD1EBE679B9EBB65C6440282
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/F548nbQiubMcc6CjOJswzR3lH2I.roa
Signing time:             Mon 29 Apr 2024 09:49:22 +0000
ROA not before:           Mon 29 Apr 2024 09:49:22 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:29:42:4f:fc:ad:1e:be:67:9b:9e:bb:65:c6:44:02:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
        Validity
            Not Before: Apr 29 09:49:22 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=179e3c9db422b9b31c73a0a3389b30cd1de51f62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4c:56:ae:7f:99:c6:9d:6e:19:a9:d6:aa:8b:
                    a9:2b:9e:f8:9b:80:d2:3d:97:0c:4f:ab:71:0d:5f:
                    85:97:3e:12:c4:90:11:b3:dc:2d:18:e1:10:f5:cf:
                    a4:8b:fe:17:cd:61:63:56:93:d8:2d:21:3d:3b:55:
                    21:20:90:c7:0c:37:15:e1:41:f3:bb:10:88:f7:13:
                    8b:05:58:92:73:0f:6a:de:64:da:45:93:06:be:4e:
                    93:0a:45:b2:37:a3:60:13:37:49:61:6e:a1:08:23:
                    48:04:1a:62:d3:35:66:2b:59:10:80:5a:41:6a:13:
                    ff:0e:2e:db:fa:c1:0c:bb:58:ac:96:e8:c2:e0:92:
                    c6:f4:f5:7e:7c:64:70:66:45:8c:0e:e9:7e:1e:3b:
                    b7:b6:20:82:dc:2d:de:6a:19:98:f8:e9:8a:99:3a:
                    cd:5f:e4:af:36:3b:8f:62:2e:4c:67:ea:0e:91:a9:
                    2e:9d:10:31:9a:60:44:e2:42:76:57:d9:f1:4c:74:
                    62:a3:78:87:07:0e:c4:34:a2:26:ac:c7:ef:77:58:
                    73:2e:29:f3:d4:87:c6:ad:db:bc:8c:f5:be:7e:59:
                    c2:1b:e4:ea:92:5d:26:34:c4:e1:5e:da:7f:d6:b4:
                    77:d2:e9:9f:0e:a6:df:71:5c:fd:83:d1:bf:90:1a:
                    43:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:9E:3C:9D:B4:22:B9:B3:1C:73:A0:A3:38:9B:30:CD:1D:E5:1F:62
            X509v3 Authority Key Identifier:
                keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/F548nbQiubMcc6CjOJswzR3lH2I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         c0:a6:6d:34:3a:7d:98:c9:61:cc:9d:f9:8e:f0:1a:eb:3b:13:
         55:8b:eb:b2:49:5b:82:87:7d:72:d0:3f:d2:90:f6:37:95:f2:
         ea:2d:14:81:ac:f1:1d:46:18:33:88:67:68:23:3a:6b:a8:38:
         77:45:91:56:a0:7a:ff:f6:ed:ad:2c:05:7e:de:7c:82:47:64:
         a7:36:9c:34:10:5f:b4:48:3c:dd:cf:2b:a7:8d:4c:2a:73:d8:
         6e:42:62:5b:6c:0b:63:ac:bf:ab:5b:70:98:03:6e:b5:d1:f2:
         5e:95:4a:92:01:17:65:ff:fa:46:1c:4e:d5:18:52:23:cb:49:
         e3:5a:2a:cc:2a:85:93:1c:b1:49:f9:21:4c:f7:57:8f:2e:a7:
         48:1e:e6:f0:84:58:72:6d:4f:03:17:9a:96:f6:f9:61:c5:db:
         8e:16:13:ac:8e:03:0c:c0:44:92:2f:6e:66:c2:88:f5:8c:2e:
         5e:65:6e:42:2e:e4:d6:38:84:9b:b1:6d:12:f9:ab:17:15:fd:
         fb:c7:f9:a2:ad:a1:56:0d:1d:3d:cb:22:46:0d:8d:60:53:c0:
         3b:b4:a0:e3:6e:17:ce:e1:93:ed:6f:98:77:6e:40:31:c5:c1:
         9b:36:0f:53:e1:16:69:07:98:13:63:f1:53:f7:01:27:df:b2:
         e9:2b:fc:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----