Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/K2JXrp2J5e2-V7X_MsOnsxmbw1E.roa
File:                     K2JXrp2J5e2-V7X_MsOnsxmbw1E.roa (raw, json)
Hash identifier:          jAYl8QrT2Omt3uw3NZ32xdrDm0/3yADmZF9jFbBLI8k=
Subject key identifier:   2B:62:57:AE:9D:89:E5:ED:BE:57:B5:FF:32:C3:A7:B3:19:9B:C3:51
Certificate issuer:       /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial:       018F80376924D5E49D9E5C53775A1C0AB172
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/K2JXrp2J5e2-V7X_MsOnsxmbw1E.roa
Signing time:             Thu 16 May 2024 07:04:25 +0000
ROA not before:           Thu 16 May 2024 07:04:25 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18f:8037:3e38/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:80:37:69:24:d5:e4:9d:9e:5c:53:77:5a:1c:0a:b1:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
        Validity
            Not Before: May 16 07:04:25 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=2b6257ae9d89e5edbe57b5ff32c3a7b3199bc351
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:90:5d:3f:ed:5b:8b:e6:80:f4:96:56:89:05:
                    0f:56:36:11:4d:cc:dc:fc:9c:a8:8c:f2:25:a5:27:
                    2a:5f:51:5d:93:59:04:65:fc:89:83:6d:5c:64:8a:
                    85:3a:2e:61:4e:5e:28:d0:14:1c:a7:b4:b5:ac:b6:
                    81:0b:e6:d7:a4:c4:a0:06:c5:b3:57:9d:e5:10:3d:
                    94:3b:be:37:e6:79:42:e5:7b:ca:28:0d:94:84:9e:
                    ee:1f:68:a5:43:7c:43:a7:91:aa:bf:29:bd:9b:12:
                    c1:fd:c9:98:7f:6d:59:b2:c4:c8:50:62:dd:9f:86:
                    dc:42:2e:fb:6f:db:15:2e:ee:1c:ba:d1:27:1c:22:
                    f8:f0:26:08:ea:fd:be:aa:f4:e6:81:df:79:af:ba:
                    0e:10:6a:1a:a8:59:26:21:31:85:52:96:42:a8:84:
                    2f:c7:72:18:54:8a:02:dd:09:fa:3a:0c:6a:df:3e:
                    55:f7:31:b0:4f:28:07:be:8b:2e:f5:86:63:77:18:
                    0a:c8:d5:e1:71:62:b4:43:1a:14:86:98:2a:c0:eb:
                    5d:7a:08:3a:ca:9f:99:a1:22:ef:c3:01:af:59:8b:
                    cf:b8:43:58:44:0b:fc:8a:77:a9:a3:01:08:8a:f3:
                    be:e5:4e:7c:8e:92:11:fc:a6:01:bc:b3:b7:83:c7:
                    61:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:62:57:AE:9D:89:E5:ED:BE:57:B5:FF:32:C3:A7:B3:19:9B:C3:51
            X509v3 Authority Key Identifier:
                keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/K2JXrp2J5e2-V7X_MsOnsxmbw1E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         c9:05:49:b5:eb:3d:d7:28:d8:bd:79:2d:6b:b8:bd:2a:dc:60:
         f4:82:ab:ee:06:cb:4e:62:25:60:2c:36:0e:3c:15:7f:e3:56:
         20:80:87:b6:2c:4b:31:e6:14:0e:1d:0e:47:ee:32:de:07:b3:
         cb:33:aa:bf:29:d0:3a:7d:07:17:d0:0d:0d:7c:c1:fc:8e:be:
         3d:c5:a0:bb:c7:25:c2:7d:2e:6a:f6:e6:1e:bf:db:96:a1:6f:
         4f:18:cf:70:0b:b8:91:a3:1e:39:d2:a4:22:01:fe:42:76:69:
         f3:9a:65:a4:67:d5:6f:33:ab:4a:63:2a:a6:b2:64:61:c4:a5:
         0b:76:35:a0:eb:5d:75:6a:e8:5d:20:5d:56:c1:f8:00:f0:1d:
         bc:20:6b:d7:83:0d:ab:af:d8:8b:83:20:bb:c8:d3:a7:e2:04:
         bc:a2:f5:5c:12:18:08:b9:19:17:bd:74:6a:1a:02:c1:13:ee:
         fb:a5:41:68:ed:e1:9c:32:30:35:66:5a:35:59:1a:1a:02:45:
         f2:ac:4d:90:fb:6a:dd:9f:fb:1e:89:fb:60:e1:e6:7e:76:5e:
         a3:bb:fc:f6:a6:34:d9:bd:fb:aa:d8:bf:b5:3b:2f:7f:81:ef:
         3c:6f:34:77:a6:68:cb:42:e7:d6:44:2f:8f:52:ed:ff:98:59:
         10:48:6b:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----