Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/FXlO6AB35uSMfZQ6_stBU-BabSU.roa
File:                     FXlO6AB35uSMfZQ6_stBU-BabSU.roa (raw, json)
Hash identifier:          J5OHiYbhZ/8lpiI6P+na12tnp9Kc1/s/M/8hMKFxTpo=
Subject key identifier:   15:79:4E:E8:00:77:E6:E4:8C:7D:94:3A:FE:CB:41:53:E0:5A:6D:25
Certificate issuer:       /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial:       018F4B3C579A4DD8B5A3036BA612164B8657
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/FXlO6AB35uSMfZQ6_stBU-BabSU.roa
Signing time:             Mon 06 May 2024 00:09:56 +0000
ROA not before:           Mon 06 May 2024 00:09:56 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4b:3c:57:9a:4d:d8:b5:a3:03:6b:a6:12:16:4b:86:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
        Validity
            Not Before: May  6 00:09:56 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=15794ee80077e6e48c7d943afecb4153e05a6d25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:72:e8:b6:fe:af:bc:46:d1:33:08:da:6e:09:
                    34:81:50:cb:c9:83:b4:34:2a:78:08:14:0e:0a:49:
                    a7:b3:24:76:cf:a8:d6:d4:80:0f:41:f1:eb:1b:bf:
                    ff:11:49:d2:ce:24:63:f0:1d:af:58:1c:47:b7:b1:
                    7a:ff:3e:01:89:52:42:85:f4:c2:f3:56:14:44:a2:
                    76:bd:33:5f:b4:41:de:54:71:98:4c:a5:4c:2a:b3:
                    88:ac:ab:6e:ea:58:f0:5b:62:19:1c:48:ff:b1:a5:
                    bc:e9:be:af:23:24:61:6c:21:7a:b3:c0:5a:e9:e1:
                    41:ca:0c:f2:77:d6:0a:57:d2:19:58:50:6a:06:e6:
                    a4:3a:2a:51:0a:52:ce:a7:63:ef:42:c8:53:dc:65:
                    18:69:23:ba:53:b5:2e:3d:c5:69:b6:5c:67:c3:ed:
                    e3:c1:f9:8c:55:28:51:93:fd:f6:73:e9:8f:37:a5:
                    3d:f0:2b:07:2f:0a:a5:e6:95:67:86:f9:0a:1e:47:
                    94:03:6e:49:7d:1a:56:52:5d:b2:fd:d3:fa:67:3b:
                    b5:9e:e9:bd:7f:ce:46:4d:d9:6f:69:ed:81:41:d6:
                    da:19:37:4f:ce:0b:bd:0e:df:b7:6f:9e:8e:38:62:
                    68:7c:87:aa:0c:81:d9:85:ed:8e:41:50:16:ff:07:
                    52:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:79:4E:E8:00:77:E6:E4:8C:7D:94:3A:FE:CB:41:53:E0:5A:6D:25
            X509v3 Authority Key Identifier:
                keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/FXlO6AB35uSMfZQ6_stBU-BabSU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         b1:e4:e8:31:98:7f:b5:37:c4:44:4b:b4:d0:1d:d9:a2:91:9a:
         10:1c:d8:f2:9c:55:d5:19:59:01:92:76:cc:f3:79:b5:93:7c:
         26:2a:9f:58:de:50:d6:79:a9:8a:5e:ee:59:8f:92:52:c0:87:
         12:2e:8f:e9:73:3c:33:ad:be:91:ab:fb:cd:31:0c:a3:50:c7:
         1e:ad:74:d8:ec:ad:a5:53:12:13:07:27:80:e9:f9:89:4d:c7:
         2b:50:4f:73:fd:38:fe:24:87:ab:e9:4e:d1:34:43:c2:b0:05:
         c1:54:2b:86:6b:11:a2:82:73:84:e3:ff:83:cc:54:10:2f:74:
         bd:26:89:ae:e2:b8:4d:13:42:76:5b:93:4e:30:60:b0:a1:18:
         26:ab:28:5d:5d:66:e1:5b:18:57:85:bf:be:6b:d0:0c:8d:53:
         1b:aa:1b:5b:45:fa:15:4b:11:38:4e:32:00:cb:9a:55:49:e7:
         86:39:cd:6d:13:22:b3:06:a9:7b:7f:09:a6:09:99:0f:02:15:
         b4:7a:ff:56:33:8a:81:d7:49:2e:56:7b:42:76:fe:43:b0:09:
         42:49:ea:f8:38:d1:9c:98:e5:8b:c5:77:81:50:1e:f1:77:41:
         15:2c:89:f2:ba:13:bf:0d:7f:c5:fc:76:be:76:b2:a0:a3:ae:
         01:73:03:a5
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY9LPFeaTdi1owNrphIWS4ZXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyYmVjNDFiZDJmM2IxNzlkZTA5NTE0MzA2NTMwYmQzZmJh
YzcwN2IwHhcNMjQwNTA2MDAwOTU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNTc5NGVlODAwNzdlNmU0OGM3ZDk0M2FmZWNiNDE1M2UwNWE2ZDI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHLotv6vvEbRMwjabgk0gVDLyYO0
NCp4CBQOCkmnsyR2z6jW1IAPQfHrG7//EUnSziRj8B2vWBxHt7F6/z4BiVJChfTC
81YURKJ2vTNftEHeVHGYTKVMKrOIrKtu6ljwW2IZHEj/saW86b6vIyRhbCF6s8Ba
6eFBygzyd9YKV9IZWFBqBuakOipRClLOp2PvQshT3GUYaSO6U7UuPcVptlxnw+3j
wfmMVShRk/32c+mPN6U98CsHLwql5pVnhvkKHkeUA25JfRpWUl2y/dP6Zzu1num9
f85GTdlvae2BQdbaGTdPzgu9Dt+3b56OOGJofIeqDIHZhe2OQVAW/wdSmwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBV5TugAd+bkjH2UOv7LQVPgWm0lMB8GA1UdIwQY
MBaAFLK+xBvS87F53glRQwZTC9P7rHB7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYt
ZDEyZjAzOWRiMmM5LzEvRlhsTzZBQjM1dVNNZlpRNl9zdEJVLUJhYlNVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYtZDEyZjAzOWRiMmM5
LzEvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBALHk6DGYf7U3xERLtNAd
2aKRmhAc2PKcVdUZWQGSdszzebWTfCYqn1jeUNZ5qYpe7lmPklLAhxIuj+lzPDOt
vpGr+80xDKNQxx6tdNjsraVTEhMHJ4Dp+YlNxytQT3P9OP4kh6vpTtE0Q8KwBcFU
K4ZrEaKCc4Tj/4PMVBAvdL0mia7iuE0TQnZbk04wYLChGCarKF1dZuFbGFeFv75r
0AyNUxuqG1tF+hVLEThOMgDLmlVJ54Y5zW0TIrMGqXt/CaYJmQ8CFbR6/1YzioHX
SS5We0J2/kOwCUJJ6vg40ZyY5YvFd4FQHvF3QRUsifK6E78Nf8X8dr52sqCjrgFz
A6U=
-----END CERTIFICATE-----