Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/LDWzwU8ofSPsKsgsNkiCCneS5K0.roa
File:                     LDWzwU8ofSPsKsgsNkiCCneS5K0.roa (raw, json)
Hash identifier:          8t/H3Pw48P4jNUX9x9lW49AcCUQltQdZCsZKIxdHWP0=
Subject key identifier:   2C:35:B3:C1:4F:28:7D:23:EC:2A:C8:2C:36:48:82:0A:77:92:E4:AD
Certificate issuer:       /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial:       018F363075E398AB948014CF9995CC4C045B
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/LDWzwU8ofSPsKsgsNkiCCneS5K0.roa
Signing time:             Wed 01 May 2024 22:04:56 +0000
ROA not before:           Wed 01 May 2024 22:04:56 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
                          2001:67c:64:ffff:0:18f:362f:ec2d/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:36:30:75:e3:98:ab:94:80:14:cf:99:95:cc:4c:04:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
        Validity
            Not Before: May  1 22:04:56 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=2c35b3c14f287d23ec2ac82c3648820a7792e4ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:f2:4b:06:b6:5c:99:68:55:e4:06:17:59:af:
                    da:66:40:78:6c:b4:d3:6e:a3:91:49:c3:67:41:f8:
                    a6:05:a6:f5:cd:0b:50:8b:26:c6:a4:47:4e:e2:0c:
                    f8:99:d6:b7:d7:99:f8:1d:90:de:28:48:a3:d7:ae:
                    3c:59:6a:54:3a:96:b3:ff:a9:1d:f9:76:b0:52:b3:
                    22:2c:92:4d:01:06:7a:41:92:fb:27:3d:3f:05:13:
                    6e:00:61:3f:76:96:81:ef:84:fe:a5:55:5d:ef:6a:
                    86:a5:a4:de:af:c0:0d:bc:fa:1d:da:ab:bb:e8:ed:
                    eb:ae:ba:04:78:9c:4b:f8:f8:50:d0:2c:aa:49:c8:
                    3a:d4:6f:d6:29:94:2c:c6:70:36:55:c8:5c:91:82:
                    07:b8:98:bc:8a:8f:c7:6e:a2:06:bf:e8:84:d3:67:
                    a8:33:51:a2:db:68:ff:29:0d:98:e4:c3:99:b2:a3:
                    5a:1b:1a:da:8a:91:9f:68:18:4d:6d:f9:03:82:40:
                    c0:a0:42:e2:db:b1:46:a8:78:56:56:91:ec:24:a0:
                    09:fa:9c:6b:74:9a:8f:8a:8a:bc:2c:12:9b:d3:2d:
                    45:be:22:a8:4d:5b:f4:65:33:a0:0a:3b:41:2a:14:
                    ff:b1:b6:58:b0:c2:5b:14:e6:9c:7f:86:d7:67:83:
                    a6:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:35:B3:C1:4F:28:7D:23:EC:2A:C8:2C:36:48:82:0A:77:92:E4:AD
            X509v3 Authority Key Identifier:
                keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/LDWzwU8ofSPsKsgsNkiCCneS5K0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         2b:cc:81:90:53:14:ae:6a:24:80:b2:b6:69:5e:b4:09:bb:d7:
         b8:f0:83:04:41:fe:4d:53:6c:2c:f8:c1:bc:b6:3f:8d:50:7d:
         25:33:dd:2f:e8:7e:67:e2:37:00:39:42:66:30:2e:c6:05:9a:
         1f:95:55:35:2e:27:d4:e4:e6:f8:65:04:12:a4:71:f5:bf:cd:
         33:b6:a8:28:48:ca:de:db:33:fe:fc:3c:ec:04:eb:cf:df:9e:
         17:8a:22:73:e9:51:94:f3:4c:dd:ca:76:73:53:7d:12:9a:b8:
         b2:57:95:88:65:a3:ee:26:53:f0:2a:9d:8b:fb:ba:a7:f3:61:
         ee:3b:d0:a3:05:20:90:37:eb:1b:e2:59:34:6d:3c:13:ed:cb:
         0f:de:e6:f1:a9:af:7d:74:e1:21:c1:a5:a1:7a:b2:07:f1:2c:
         bd:5c:7b:e4:7e:3d:61:86:e0:bd:3d:49:7e:44:f2:3f:ba:7f:
         2c:cc:b2:4c:03:c4:59:c2:9d:9b:25:d8:84:eb:4a:1a:20:30:
         7d:90:34:f1:b9:4c:ef:b6:60:fd:3e:e8:6b:24:a6:e8:34:2d:
         01:cc:9d:f8:c2:c1:dc:62:b1:5d:6c:9b:eb:b2:c7:32:40:9a:
         9e:81:e3:fa:92:12:04:39:79:33:2e:0b:d1:e4:a1:f0:76:25:
         6a:22:44:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----