Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/JjqY5ciYGxEGMXljuZI_1l_BbmQ.roa
File:                     JjqY5ciYGxEGMXljuZI_1l_BbmQ.roa (raw, json)
Hash identifier:          zxICidgSrr+7jHAkx9q647U+UtfzTxzU49HVrbpFGYo=
Subject key identifier:   26:3A:98:E5:C8:98:1B:11:06:31:79:63:B9:92:3F:D6:5F:C1:6E:64
Certificate issuer:       /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial:       018F87F8DD2766C9A4D675343662F32FE967
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/JjqY5ciYGxEGMXljuZI_1l_BbmQ.roa
Signing time:             Fri 17 May 2024 19:13:04 +0000
ROA not before:           Fri 17 May 2024 19:13:04 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:f8:dd:27:66:c9:a4:d6:75:34:36:62:f3:2f:e9:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
        Validity
            Not Before: May 17 19:13:04 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=263a98e5c8981b1106317963b9923fd65fc16e64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:1b:f4:a9:9c:97:24:5e:32:3f:65:6f:4c:2a:
                    21:28:e0:63:e9:26:ca:75:ef:d5:1d:1a:c4:2b:09:
                    78:59:6e:09:95:e9:66:d2:33:14:ef:38:c6:a7:6f:
                    c6:60:35:c7:89:6c:22:b5:02:ab:5f:9d:da:17:ad:
                    14:5a:1d:78:a6:e6:aa:4a:7d:bd:0f:ef:1b:8f:44:
                    ac:b7:65:98:fb:49:6d:2d:a8:a7:b7:e3:a1:6b:7d:
                    ca:e7:24:80:d6:b9:e6:4d:27:8d:64:af:f0:c4:a4:
                    1e:dd:3f:2e:65:13:86:9f:6f:a2:eb:25:07:ea:eb:
                    93:d3:38:07:7f:24:d7:ab:b1:1c:8f:5f:09:c8:81:
                    3c:28:bf:f8:5d:34:d4:a3:36:a4:7e:e2:b7:ac:1f:
                    30:ec:07:57:a8:7e:10:df:21:40:66:32:50:ca:05:
                    61:cd:64:81:76:9e:d1:7a:46:dc:f7:28:56:08:77:
                    0f:de:0f:6a:b4:e4:24:50:74:24:fa:77:c4:e7:63:
                    46:75:8d:55:26:dd:8a:31:3b:c1:db:c9:f3:8b:d6:
                    00:05:12:ab:dc:45:a6:88:64:80:ca:a3:72:ef:91:
                    6b:89:a7:44:14:a8:8f:ae:99:56:92:34:40:9e:3a:
                    da:e1:6d:db:89:0b:76:9e:ef:37:4f:44:b4:9a:5f:
                    4e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:3A:98:E5:C8:98:1B:11:06:31:79:63:B9:92:3F:D6:5F:C1:6E:64
            X509v3 Authority Key Identifier:
                keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/JjqY5ciYGxEGMXljuZI_1l_BbmQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         87:f1:9c:da:bb:9a:75:9b:3d:f5:d0:1f:89:85:5a:ec:c8:da:
         04:e0:cc:f3:5f:41:4f:3b:58:1f:1b:3e:86:8f:be:70:6a:79:
         58:61:fd:5b:7b:22:c6:71:16:e7:67:7b:b6:19:50:fb:b6:1f:
         56:e9:46:48:31:6c:01:5d:e8:6b:89:88:de:0d:36:0b:75:d1:
         f0:3d:3f:ea:ea:95:85:0e:1e:31:d9:e3:3b:e5:7e:b5:ce:c5:
         56:c1:8e:a2:0e:89:05:84:07:d4:d1:c3:4b:ac:d4:86:2c:77:
         42:56:e2:ca:eb:d5:cc:29:ca:a2:47:c6:75:0d:87:cc:72:4c:
         0a:a8:c6:12:1c:15:4c:18:0b:5c:22:a9:c7:7b:56:42:20:9f:
         ed:08:5b:8a:d6:f4:e1:f4:27:e9:3d:b6:98:6f:92:f2:56:d5:
         b4:20:f7:fb:86:03:cb:b4:0e:58:e6:53:58:35:ea:97:48:03:
         3c:39:14:8f:6a:39:a9:15:e8:c5:fd:79:20:41:38:21:86:0b:
         fb:36:1d:3e:aa:77:74:37:85:11:5f:80:2a:f7:8f:72:37:91:
         e5:bf:24:42:c2:aa:00:8f:f8:5b:bd:81:c4:a0:9c:3f:12:42:
         83:09:70:f7:68:3d:87:a7:63:3c:a0:ed:7c:3a:ae:4f:d0:cd:
         49:e3:64:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----