Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/NOy6EBgyeR-XEk-XIkUxo9ks7Ik.roa
File:                     NOy6EBgyeR-XEk-XIkUxo9ks7Ik.roa (raw, json)
Hash identifier:          qFkhDpreMG8jVh1EduAvUnN9p+vLr5rM9nfAXdvOd1A=
Subject key identifier:   34:EC:BA:10:18:32:79:1F:97:12:4F:97:22:45:31:A3:D9:2C:EC:89
Certificate issuer:       /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial:       018F182ADC2CADA0A727A66A9C7A89175D3F
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/NOy6EBgyeR-XEk-XIkUxo9ks7Ik.roa
Signing time:             Fri 26 Apr 2024 02:10:13 +0000
ROA not before:           Fri 26 Apr 2024 02:10:13 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:18:2a:dc:2c:ad:a0:a7:27:a6:6a:9c:7a:89:17:5d:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
        Validity
            Not Before: Apr 26 02:10:13 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=34ecba101832791f97124f97224531a3d92cec89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b9:e0:41:db:a6:da:e6:dc:92:46:07:81:28:
                    bc:73:d7:dc:26:04:49:56:a6:ea:6d:b5:b8:a4:5f:
                    55:af:d3:41:a0:b0:15:c1:34:ce:33:d0:7e:fc:2f:
                    5c:52:3b:d6:45:30:d6:34:24:a5:36:df:06:1c:ab:
                    18:b3:41:a6:ce:ed:08:c1:6f:94:30:af:2f:86:6f:
                    a8:ec:f8:79:d6:f1:92:61:9b:79:c0:19:27:fb:a8:
                    1a:dc:c0:17:85:48:dc:d6:04:7e:b3:50:39:93:f9:
                    d8:5b:67:cb:f9:80:22:20:09:13:4f:8c:4f:9c:55:
                    07:04:b6:15:ad:50:4b:d4:a1:66:29:d4:3b:08:fa:
                    80:76:f9:68:6d:0a:6a:86:19:98:54:8b:03:72:af:
                    c0:1b:32:3e:85:22:0b:53:69:9c:2e:b5:47:70:b7:
                    48:c6:d2:36:6a:7a:6e:7c:7a:a0:ca:b7:f7:8d:e2:
                    a6:2b:e4:ee:f9:5c:d0:96:41:fd:72:bf:2b:63:b8:
                    95:da:03:5e:f8:64:fd:07:20:34:ee:80:68:9f:a1:
                    6d:29:f9:63:60:51:a6:c7:c7:93:d6:a3:dd:2d:e7:
                    c3:1b:e3:3a:94:69:b2:8e:1c:d7:65:a8:d6:6b:a6:
                    17:9e:87:cd:94:7d:e9:58:4c:db:72:8b:a0:05:ab:
                    25:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:EC:BA:10:18:32:79:1F:97:12:4F:97:22:45:31:A3:D9:2C:EC:89
            X509v3 Authority Key Identifier:
                keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/NOy6EBgyeR-XEk-XIkUxo9ks7Ik.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64:ffff:0:18f:543:9e41/128

    Signature Algorithm: sha256WithRSAEncryption
         36:04:be:15:a0:fb:fb:7b:89:e3:4c:31:e6:ea:e9:1b:e8:d1:
         8f:d0:10:0e:b8:4a:27:ad:f4:29:f2:d4:08:c4:fa:d9:9c:9c:
         58:f6:40:d2:7a:bf:62:99:7a:46:c5:14:0a:e1:46:9b:4a:dd:
         92:e9:6f:b0:d3:a7:1f:3e:82:bb:a9:6e:9d:ea:24:fb:a6:48:
         03:93:c5:22:26:0e:d0:17:6b:68:15:59:8d:40:9d:cd:de:b6:
         a8:d2:2e:1d:d0:6e:2a:56:7d:d3:c3:6c:6f:ad:6e:eb:3a:0a:
         68:7c:64:6f:cf:4a:75:62:a1:77:ed:5c:16:b9:4b:23:fb:32:
         2c:7e:5b:c4:b0:e5:1b:5b:09:d6:65:22:d9:45:28:73:b7:4a:
         19:84:d7:c9:29:36:33:99:52:62:ce:f5:f1:51:f3:63:46:ed:
         b7:ab:7f:ec:9a:95:73:fe:20:1e:25:ac:4a:84:6a:35:09:b8:
         79:4c:91:5e:c5:2b:88:95:15:3d:13:17:bb:79:8a:e7:67:5d:
         1a:01:72:dd:09:b7:8a:56:0b:4f:03:79:20:cf:27:e7:c8:1a:
         89:f4:6d:09:cf:e5:6c:36:02:74:78:62:cb:e1:5f:91:08:41:
         29:5e:b2:dc:6d:b9:e4:db:03:f2:f9:bb:6c:ac:6a:c1:c7:26:
         58:17:29:3f
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAY8YKtwsraCnJ6ZqnHqJF10/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyYmVjNDFiZDJmM2IxNzlkZTA5NTE0MzA2NTMwYmQzZmJh
YzcwN2IwHhcNMjQwNDI2MDIxMDEzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNGVjYmExMDE4MzI3OTFmOTcxMjRmOTcyMjQ1MzFhM2Q5MmNlYzg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbngQdum2ubckkYHgSi8c9fcJgRJ
VqbqbbW4pF9Vr9NBoLAVwTTOM9B+/C9cUjvWRTDWNCSlNt8GHKsYs0Gmzu0IwW+U
MK8vhm+o7Ph51vGSYZt5wBkn+6ga3MAXhUjc1gR+s1A5k/nYW2fL+YAiIAkTT4xP
nFUHBLYVrVBL1KFmKdQ7CPqAdvlobQpqhhmYVIsDcq/AGzI+hSILU2mcLrVHcLdI
xtI2anpufHqgyrf3jeKmK+Tu+VzQlkH9cr8rY7iV2gNe+GT9ByA07oBon6FtKflj
YFGmx8eT1qPdLefDG+M6lGmyjhzXZajWa6YXnofNlH3pWEzbcougBaslSQIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFDTsuhAYMnkflxJPlyJFMaPZLOyJMB8GA1UdIwQY
MBaAFLK+xBvS87F53glRQwZTC9P7rHB7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYt
ZDEyZjAzOWRiMmM5LzEvTk95NkVCZ3llUi1YRWstWElrVXhvOWtzN0lrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYtZDEyZjAzOWRiMmM5
LzEvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAMBAIAATAGAwQDwQAYMBkE
AgACMBMDEQAgAQZ8AGT//wAAAY8FQ55BMA0GCSqGSIb3DQEBCwUAA4IBAQA2BL4V
oPv7e4njTDHm6ukb6NGP0BAOuEonrfQp8tQIxPrZnJxY9kDSer9imXpGxRQK4Uab
St2S6W+w06cfPoK7qW6d6iT7pkgDk8UiJg7QF2toFVmNQJ3N3rao0i4d0G4qVn3T
w2xvrW7rOgpofGRvz0p1YqF37VwWuUsj+zIsflvEsOUbWwnWZSLZRShzt0oZhNfJ
KTYzmVJizvXxUfNjRu23q3/smpVz/iAeJaxKhGo1Cbh5TJFexSuIlRU9Exe7eYrn
Z10aAXLdCbeKVgtPA3kgzyfnyBqJ9G0Jz+VsNgJ0eGLL4V+RCEEpXrLcbbnk2wPy
+btsrGrBxyZYFyk/
-----END CERTIFICATE-----