Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/Tgy54UBB5nLES2nyFmpBaU273Lo.roa
File:                     Tgy54UBB5nLES2nyFmpBaU273Lo.roa (raw, json)
Hash identifier:          C5qpeXot1j6+UQolVsTk80iDiYcD/iAwNykJNDafJrU=
Subject key identifier:   4E:0C:B9:E1:40:41:E6:72:C4:4B:69:F2:16:6A:41:69:4D:BB:DC:BA
Certificate issuer:       /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial:       018F41FDB35878C0C30DBEAC1F0A4EB04A54
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/Tgy54UBB5nLES2nyFmpBaU273Lo.roa
Signing time:             Sat 04 May 2024 05:04:56 +0000
ROA not before:           Sat 04 May 2024 05:04:56 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
                          2001:67c:64:ffff:0:18f:41fd:34bf/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:41:fd:b3:58:78:c0:c3:0d:be:ac:1f:0a:4e:b0:4a:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
        Validity
            Not Before: May  4 05:04:56 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=4e0cb9e14041e672c44b69f2166a41694dbbdcba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:2d:fa:08:77:97:78:48:5d:00:cf:15:24:46:
                    08:f8:2c:1b:3d:99:cd:48:d8:89:c1:22:f0:64:a3:
                    98:47:53:d1:d5:ba:05:08:45:da:e0:26:63:32:05:
                    87:e6:e3:6c:dd:1e:73:64:cb:65:32:95:3d:be:2b:
                    12:08:15:5d:c7:93:20:92:03:6f:3a:db:0d:b5:24:
                    a9:3a:56:35:a4:83:a6:38:75:1d:f6:c7:1e:dd:e9:
                    8e:74:b9:7d:ef:a9:d9:37:a5:87:d4:9d:16:79:eb:
                    ad:17:8a:e6:ca:9d:6f:29:a3:6f:c3:d8:cf:1e:8d:
                    fb:1b:53:63:93:25:10:15:34:bc:a4:40:02:a3:1d:
                    ba:d8:8b:63:a5:ae:73:6c:ec:b4:07:61:4d:a1:f4:
                    92:7e:7e:11:c9:55:b6:a2:15:7f:4b:25:ea:63:66:
                    59:44:1c:e0:4c:30:1b:4d:bd:28:a0:0b:2e:49:e8:
                    15:c3:17:b0:6a:24:7d:e2:f8:63:ae:c3:f0:3e:9a:
                    41:b8:2d:4e:5e:d3:8a:23:4b:89:a0:65:87:41:a1:
                    75:c6:71:cb:a9:ea:4b:e0:e8:68:1a:95:6a:7f:4b:
                    bd:a5:a1:ce:99:f6:88:43:f5:f8:36:8d:6c:51:4e:
                    1f:7c:72:ae:a9:27:91:ed:2b:19:38:7f:e6:da:a6:
                    37:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:0C:B9:E1:40:41:E6:72:C4:4B:69:F2:16:6A:41:69:4D:BB:DC:BA
            X509v3 Authority Key Identifier:
                keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/Tgy54UBB5nLES2nyFmpBaU273Lo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         4f:79:2e:b2:03:75:73:c3:27:e5:47:fd:67:47:a1:4e:38:c2:
         32:c5:19:d0:6f:aa:71:af:8e:53:a8:c8:fd:0f:3b:5c:b9:96:
         f0:f5:31:75:07:f7:42:6c:3c:dd:11:c8:15:02:72:42:3e:b8:
         02:b5:3e:b1:75:5c:a6:41:dc:75:39:34:7d:e9:79:98:c3:a8:
         61:27:d5:a3:fa:9a:14:a2:69:fa:54:1b:ff:cd:19:9e:de:61:
         55:d5:7f:3d:c9:62:fa:f3:aa:c4:dd:b5:5c:0c:bf:bf:8a:b2:
         d9:71:08:b1:77:95:b9:ff:07:52:86:22:c4:fb:57:79:c5:46:
         2c:3a:5b:90:b2:84:e7:2b:8a:65:65:e0:77:ae:18:2e:69:c2:
         d3:53:2c:ba:4f:b7:e6:1b:42:4b:dc:f7:62:03:81:d8:c4:79:
         07:0a:8a:7c:32:7b:59:01:1d:23:bf:d9:d7:89:2f:b9:a7:da:
         bd:a1:1d:8c:06:d5:67:2e:1a:ee:2b:86:04:a9:56:2f:86:9e:
         ac:d3:35:fa:c1:cf:09:d6:09:3a:13:04:4f:04:a0:8e:42:b6:
         ea:f5:c3:7c:f1:d4:87:71:0b:3b:97:ac:83:62:a4:8f:10:e7:
         f7:18:5a:b4:4d:07:30:a6:d1:88:23:27:af:f6:c3:4f:79:c3:
         c8:b9:c2:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----