Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/QSciuEV6lQgHcsBN9s3WjhFAQOE.roa
File:                     QSciuEV6lQgHcsBN9s3WjhFAQOE.roa (raw, json)
Hash identifier:          RMhYvvbFqkgUp0cE2oZHwFfFWi0FxFXoJrEgbXw2334=
Subject key identifier:   41:27:22:B8:45:7A:95:08:07:72:C0:4D:F6:CD:D6:8E:11:40:40:E1
Certificate issuer:       /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial:       018F6BA5C47305B70F57536D0F5C880E8BC8
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/QSciuEV6lQgHcsBN9s3WjhFAQOE.roa
Signing time:             Sun 12 May 2024 07:12:56 +0000
ROA not before:           Sun 12 May 2024 07:12:56 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:6b:a5:c4:73:05:b7:0f:57:53:6d:0f:5c:88:0e:8b:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
        Validity
            Not Before: May 12 07:12:56 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=412722b8457a95080772c04df6cdd68e114040e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:55:e9:5f:32:42:37:a1:94:de:0a:fa:7e:e6:
                    98:01:e9:26:b4:fc:a8:7a:df:4b:7b:57:d8:ed:b6:
                    a9:18:07:36:f2:41:ce:fe:6e:a0:72:b0:3f:ca:bf:
                    cf:d1:51:2c:a3:30:0b:85:82:3f:00:4b:26:c3:88:
                    fa:0c:89:9e:9b:43:6d:93:28:bc:1d:85:a0:05:73:
                    68:a5:ac:ca:48:3e:66:19:08:d5:83:08:dc:3c:30:
                    7a:50:03:99:10:97:ce:71:05:45:1f:96:18:d2:c8:
                    bd:12:ca:4f:a9:b1:c0:3e:c9:3f:7b:3a:5d:00:8c:
                    4c:e9:3e:20:93:89:58:dc:18:31:2b:89:39:9d:60:
                    1f:2c:f1:27:ce:45:3a:93:62:4b:bd:2c:3a:3b:02:
                    64:82:e7:4f:08:99:d1:97:f9:5d:d2:5d:7b:ce:f0:
                    dd:a3:9a:a1:e8:0b:02:38:84:6a:70:4e:fa:e3:1c:
                    4b:6e:7c:a7:cf:e7:aa:6e:17:fc:91:b6:dc:17:ba:
                    dd:a2:aa:7d:ee:c3:fe:2d:b4:71:c2:28:62:94:c7:
                    ab:16:1a:78:30:90:b8:57:5b:1c:fd:2b:70:d3:5a:
                    ae:51:69:b2:10:a6:54:0c:0e:87:d6:f3:38:d8:f5:
                    1a:fb:bb:ad:a0:ff:12:0b:f9:1a:e5:60:ee:ed:89:
                    0e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:27:22:B8:45:7A:95:08:07:72:C0:4D:F6:CD:D6:8E:11:40:40:E1
            X509v3 Authority Key Identifier:
                keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/QSciuEV6lQgHcsBN9s3WjhFAQOE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         9e:c0:37:9f:bf:c5:94:6a:5d:ad:3c:fa:d1:d5:fe:f4:3a:66:
         c0:f0:59:e1:05:29:82:7e:3d:32:68:70:46:b9:1a:e0:b7:74:
         46:b1:f9:ae:5a:84:7b:15:0c:30:b8:4e:96:e6:e9:18:ea:a7:
         2c:e0:c1:0c:a3:b8:5c:81:db:43:2d:de:d2:07:e5:71:84:e2:
         1e:90:33:5d:14:31:8e:2f:a7:5c:52:0e:a0:e7:8e:72:18:22:
         e9:99:3d:92:c9:a3:81:a5:ff:ad:90:95:c6:63:19:b6:e1:94:
         73:4b:53:fc:fd:17:cb:5e:a5:e9:d2:73:98:fa:f2:94:dd:cd:
         cd:a6:75:39:c3:0e:46:19:69:06:1e:0f:e0:82:e9:7a:fe:4a:
         b0:f6:fe:58:c8:85:79:18:94:89:78:ed:bb:89:9f:6f:b9:cd:
         5a:ce:b7:ef:05:ce:7b:ef:e4:9f:d0:ea:69:5d:69:fa:cd:e5:
         08:2f:cf:61:30:08:b0:fa:7c:35:78:f9:28:28:1a:cc:ec:7b:
         02:65:af:19:1a:ad:01:54:be:c4:a1:1b:0c:de:3e:a5:4c:c3:
         2e:e1:e0:bb:5d:3c:53:4f:c9:fb:01:a3:de:93:18:5c:bd:bf:
         0a:2a:23:66:2a:9a:79:2d:ef:0f:b9:a3:7e:ca:49:05:99:df:
         71:db:08:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----