Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/PTrJbmNxOcp-D9xI2GaW19Qfj6U.roa
File:                     PTrJbmNxOcp-D9xI2GaW19Qfj6U.roa (raw, json)
Hash identifier:          xvnCTprxaaoppU1tsFvhOdXwzshrTtCAobX2AVMSJhA=
Subject key identifier:   3D:3A:C9:6E:63:71:39:CA:7E:0F:DC:48:D8:66:96:D7:D4:1F:8F:A5
Certificate issuer:       /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial:       018F16753D0365A6D4FCD189B0AE8B1FF9D8
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/PTrJbmNxOcp-D9xI2GaW19Qfj6U.roa
Signing time:             Thu 25 Apr 2024 18:12:13 +0000
ROA not before:           Thu 25 Apr 2024 18:12:13 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:16:75:3d:03:65:a6:d4:fc:d1:89:b0:ae:8b:1f:f9:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
        Validity
            Not Before: Apr 25 18:12:13 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=3d3ac96e637139ca7e0fdc48d86696d7d41f8fa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e1:7f:5c:ea:51:ae:02:96:88:93:00:28:61:
                    52:6d:55:7e:6e:a5:be:b3:86:5e:41:75:4d:9e:2a:
                    19:a6:36:20:f0:df:d6:f2:2a:a8:9a:c8:7e:cc:fb:
                    b1:ea:87:55:2e:00:6c:b2:e4:fa:9f:a2:3b:49:28:
                    64:79:ec:90:2a:5e:06:1a:af:f7:68:5a:12:65:99:
                    36:a2:db:cf:2f:1b:05:d9:5f:f7:0e:73:1f:50:21:
                    91:87:ab:ce:d4:24:76:61:71:2c:5d:c5:c0:7d:a8:
                    cc:b3:a4:b5:7a:42:b2:e2:61:cb:b0:89:d9:08:e4:
                    c2:69:9c:79:fb:f8:0d:e0:b6:3d:21:0e:d4:14:83:
                    fa:3e:b9:69:28:73:6d:d1:61:06:f1:ad:a3:23:bf:
                    2e:0b:fd:36:e6:ad:91:fd:59:6b:e8:a3:55:40:5c:
                    96:6a:fa:7b:59:a6:89:77:41:c5:47:ff:8f:2a:e7:
                    e0:6f:3e:be:a4:ba:56:fc:34:25:50:f0:3c:d3:99:
                    1d:19:5f:74:48:0c:f8:e7:6d:cc:7c:04:37:53:fd:
                    f9:21:1b:5e:e5:53:90:7e:ca:f2:a9:67:3a:ed:0c:
                    e3:25:31:a1:f8:a4:c3:64:95:dc:23:1d:32:d7:b5:
                    a1:1e:8b:86:42:5c:12:b6:d3:a6:42:14:15:8f:f1:
                    0c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:3A:C9:6E:63:71:39:CA:7E:0F:DC:48:D8:66:96:D7:D4:1F:8F:A5
            X509v3 Authority Key Identifier:
                keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/PTrJbmNxOcp-D9xI2GaW19Qfj6U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64:ffff:0:18f:543:9e41/128

    Signature Algorithm: sha256WithRSAEncryption
         2a:1f:ab:4c:c5:88:b1:04:13:fb:6c:ea:03:47:67:49:64:24:
         5e:e3:2c:a0:f5:f4:f2:83:a7:40:68:91:de:9f:1e:98:a0:23:
         9d:51:65:c0:f5:41:be:7f:ce:2f:2f:12:39:23:fd:3b:a0:dd:
         6f:2b:6d:9d:f6:7e:97:45:35:7b:68:07:63:48:cc:43:d5:a9:
         71:e3:43:c5:d7:f9:59:60:65:6d:75:b2:1f:7f:2d:49:ed:41:
         96:6f:f4:bf:08:dd:be:b9:4b:f6:9b:da:d3:b5:03:96:56:8c:
         81:fd:1f:e4:27:c8:dc:38:bf:3d:03:b1:2b:60:32:70:71:d7:
         bd:44:a9:e3:2e:ed:f8:92:26:cb:01:f6:6c:32:f5:f7:00:9b:
         4b:67:86:9a:6a:81:2e:e3:c8:c6:c9:20:5f:0c:fe:57:c1:97:
         66:5a:12:40:85:0e:ee:10:7c:2a:21:cf:75:12:17:17:38:6d:
         7e:b6:d3:f9:b8:ae:5c:de:65:37:9c:01:33:47:11:46:b2:b0:
         f8:1d:8e:0e:79:b8:6f:46:80:36:18:67:aa:da:44:27:0a:f6:
         84:67:0a:ef:25:72:93:6e:4e:18:7f:5e:41:80:ac:c9:fa:76:
         74:57:50:2b:23:19:d9:43:a1:68:d3:3c:4f:b1:f4:23:1d:3a:
         7b:64:25:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----