Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/UZFr6nSnS-o6EW9YO3g-g5_Gmf0.roa
File:                     UZFr6nSnS-o6EW9YO3g-g5_Gmf0.roa (raw, json)
Hash identifier:          i09sEgs0giyB84LkBRdGuR/eAil8M4BbnAqkteXpxgM=
Subject key identifier:   51:91:6B:EA:74:A7:4B:EA:3A:11:6F:58:3B:78:3E:83:9F:C6:99:FD
Certificate issuer:       /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial:       018F65656D97201AE08F946028CB9C9D33CA
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/UZFr6nSnS-o6EW9YO3g-g5_Gmf0.roa
Signing time:             Sat 11 May 2024 02:04:57 +0000
ROA not before:           Sat 11 May 2024 02:04:57 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
                          2001:67c:64:ffff:0:18f:6564:e2c9/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:65:65:6d:97:20:1a:e0:8f:94:60:28:cb:9c:9d:33:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
        Validity
            Not Before: May 11 02:04:57 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=51916bea74a74bea3a116f583b783e839fc699fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a7:26:bd:aa:a7:e4:38:2b:3d:ad:f8:ea:09:
                    f8:9d:d5:17:a5:29:f7:50:f5:a2:40:40:e4:73:89:
                    bf:17:c6:71:f6:8b:a6:fa:e7:83:24:31:f0:a0:a1:
                    38:72:ba:14:39:7f:62:8e:2c:7a:66:85:e3:59:86:
                    4b:ee:2d:07:1a:31:79:42:04:6f:c9:c7:d2:29:4a:
                    e5:47:43:73:ed:dd:b8:5f:b6:9d:c6:95:e5:52:e6:
                    91:a2:97:74:e8:e9:2d:fa:2c:78:e1:dc:53:4f:44:
                    71:4d:7e:94:e5:bc:ad:06:08:45:17:fe:dd:2b:65:
                    e8:65:a9:26:49:21:db:ea:93:80:6b:8c:19:21:e1:
                    8d:56:8b:2f:c1:f3:10:02:08:56:ab:92:23:7f:90:
                    0d:ca:fe:a6:70:fc:59:a3:43:22:87:e7:52:b7:ff:
                    b9:f3:4e:7b:34:0a:38:94:ae:f6:16:f6:3c:44:60:
                    7b:46:52:2e:18:37:03:f3:1f:1d:59:c5:8c:6d:23:
                    c7:e1:94:b2:f4:49:33:b0:a9:17:43:4f:19:ba:79:
                    94:ce:52:67:8c:23:b1:9d:4e:7a:1f:4f:78:2e:6e:
                    93:3c:57:47:4a:53:e8:3a:ff:4a:ed:e6:d2:94:11:
                    2d:5d:91:6b:12:33:0c:3f:18:80:7b:4a:fc:f3:17:
                    c9:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:91:6B:EA:74:A7:4B:EA:3A:11:6F:58:3B:78:3E:83:9F:C6:99:FD
            X509v3 Authority Key Identifier:
                keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/UZFr6nSnS-o6EW9YO3g-g5_Gmf0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         59:40:fd:ef:16:f8:29:8f:e0:0b:2b:0c:d1:7c:7f:d3:6e:ee:
         7a:1e:cb:48:d4:7c:ca:78:f3:81:b2:db:df:34:5d:11:e1:dc:
         ac:de:a0:55:7c:a2:d8:91:95:b3:cb:af:76:5f:2f:2a:c1:f4:
         e3:49:71:8e:35:87:8c:d3:bd:9f:cf:cf:c7:02:d2:ff:59:13:
         b5:2b:1b:7c:41:b5:25:32:82:7e:0b:0a:5c:71:29:6a:99:7d:
         3f:26:e5:07:f0:31:8e:1f:06:93:ee:4c:59:63:5c:2a:72:5a:
         0f:49:b6:e4:44:51:49:c2:bd:0d:56:12:6b:46:69:e6:71:ad:
         b9:b5:a3:96:eb:af:f0:f5:2d:88:ba:8c:22:b6:19:86:89:5a:
         f3:fe:ad:fd:10:25:d3:e9:79:83:c1:21:69:20:1e:07:6b:bc:
         20:b5:ae:68:2a:d8:bc:23:4c:31:47:af:4c:c9:16:9d:42:1a:
         4c:8f:2b:ce:fe:6d:21:78:2e:3a:dd:56:ff:7e:3c:02:2a:e6:
         27:c7:f1:28:2c:42:e3:fd:37:52:90:53:49:a4:38:8c:98:29:
         24:36:80:e4:d8:ad:61:f1:58:6b:86:81:5f:95:01:ab:35:e2:
         cb:fd:60:02:34:ef:75:62:c8:d9:73:03:8d:14:5e:04:fe:5f:
         76:69:23:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----