Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/Ne0vXhmRdQODdzQYGOI_BosOJOg.roa
File:                     Ne0vXhmRdQODdzQYGOI_BosOJOg.roa (raw, json)
Hash identifier:          PiwMqdVa+n1VJDvG99mRbkg2/53IeDiOeKC7TRB9IYw=
Subject key identifier:   35:ED:2F:5E:19:91:75:03:83:77:34:18:18:E2:3F:06:8B:0E:24:E8
Certificate issuer:       /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial:       018F419729F130DDAAC5BAC1214BEF34C4D2
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/Ne0vXhmRdQODdzQYGOI_BosOJOg.roa
Signing time:             Sat 04 May 2024 03:12:56 +0000
ROA not before:           Sat 04 May 2024 03:12:56 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:41:97:29:f1:30:dd:aa:c5:ba:c1:21:4b:ef:34:c4:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
        Validity
            Not Before: May  4 03:12:56 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=35ed2f5e199175038377341818e23f068b0e24e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d7:95:ff:67:12:b8:a9:bf:ed:ba:9b:38:8b:
                    90:fa:c4:8f:b4:4e:79:57:1d:59:5a:7c:32:7a:d8:
                    44:45:25:0d:44:5f:76:2a:08:0b:ca:20:1d:45:19:
                    16:0b:2e:c7:22:d8:19:df:8b:b8:62:05:69:c6:c2:
                    3a:f3:50:72:59:61:3b:62:a6:b9:4f:67:8a:e3:49:
                    5b:90:e0:25:69:a5:fc:73:db:9e:bc:5c:30:02:65:
                    96:f6:a8:e5:be:c9:9a:39:05:56:a8:23:d6:09:b9:
                    c3:57:86:01:73:a1:ca:98:43:44:1f:7b:2c:8a:b7:
                    e0:c0:7c:97:dc:a9:25:dc:dd:b0:b9:2d:60:a1:7a:
                    54:87:da:27:75:78:dd:66:3e:4a:2d:53:d5:a2:e7:
                    30:22:af:1b:44:df:28:56:4e:d8:8b:ee:08:d8:24:
                    0a:32:3d:f5:1e:02:12:a6:c3:ad:f5:18:74:72:94:
                    2e:25:f2:b2:63:07:a3:fd:e0:e7:3a:1e:e9:47:30:
                    cb:c1:83:d5:94:f2:69:bb:55:13:10:c8:37:6e:f8:
                    e1:2c:94:5c:8c:b4:bd:50:66:70:90:1c:cf:a0:5d:
                    a1:90:c0:9f:5c:78:4a:98:f9:8c:38:ef:bc:a6:86:
                    cc:32:d1:93:c0:06:55:25:b2:18:42:7a:76:d2:44:
                    cc:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:ED:2F:5E:19:91:75:03:83:77:34:18:18:E2:3F:06:8B:0E:24:E8
            X509v3 Authority Key Identifier:
                keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/Ne0vXhmRdQODdzQYGOI_BosOJOg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         12:e5:19:59:63:49:20:16:49:4d:e5:18:70:87:4c:54:70:28:
         43:a5:a4:0d:0d:f5:ea:94:c7:f6:19:2e:72:ac:57:63:a3:f1:
         c8:43:7d:44:c0:45:f0:f4:6c:06:d1:d7:6d:c0:5e:49:fa:ab:
         90:65:3f:7d:c9:20:94:67:08:22:19:b9:4b:25:2f:fa:31:26:
         36:c1:bd:ab:75:f7:82:28:2f:f8:2b:06:58:44:62:b6:dd:8a:
         3a:ac:79:6e:bb:70:19:cb:5d:38:d3:95:67:bb:0a:d6:d6:99:
         b6:9f:0b:69:79:95:96:90:c2:84:1f:cf:d4:08:59:a2:32:58:
         f2:39:be:7d:f9:a9:59:65:17:2e:b5:1c:d5:2d:93:07:fd:5d:
         80:66:6d:ff:83:23:6c:6a:e7:b2:75:e8:92:7b:f2:78:de:8a:
         5b:f6:de:da:3a:90:bd:c8:8a:25:5b:33:9b:02:02:a1:14:15:
         c7:ca:41:0d:d6:30:b0:85:43:b8:98:d4:e5:29:2d:0a:db:4f:
         93:70:04:81:92:b8:69:e7:1f:0f:cc:44:76:db:4f:cc:63:2e:
         f7:c8:ec:3e:38:20:37:94:1c:ce:57:c6:03:b0:46:e1:88:8b:
         92:8a:f4:5a:cd:b5:c0:42:ad:e6:04:04:8b:c3:9b:da:6b:b9:
         c9:76:67:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----