Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/VtIIeBXnBTdIIud8OFU2RD1YWsQ.roa
File:                     VtIIeBXnBTdIIud8OFU2RD1YWsQ.roa (raw, json)
Hash identifier:          xKgt2OEUuqLuPWGfdqcEemsXKYomv974sFpHHk3e6KQ=
Subject key identifier:   56:D2:08:78:15:E7:05:37:48:22:E7:7C:38:55:36:44:3D:58:5A:C4
Certificate issuer:       /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial:       018F48E101ADC51C64134EE772FEEF344A0E
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/VtIIeBXnBTdIIud8OFU2RD1YWsQ.roa
Signing time:             Sun 05 May 2024 13:10:56 +0000
ROA not before:           Sun 05 May 2024 13:10:56 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:48:e1:01:ad:c5:1c:64:13:4e:e7:72:fe:ef:34:4a:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
        Validity
            Not Before: May  5 13:10:56 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=56d2087815e705374822e77c385536443d585ac4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e9:62:e2:b0:f5:21:e5:b5:c3:02:85:ec:68:
                    8b:0c:00:90:ff:54:68:b4:80:49:23:c9:b7:01:db:
                    c8:d4:df:32:70:5b:6e:f0:78:0b:81:03:95:79:18:
                    30:84:e6:0e:1f:17:1a:a5:91:cd:b2:e7:2d:8a:91:
                    f9:3c:7d:3d:1e:62:80:bb:04:90:9b:17:b3:d6:dc:
                    b8:22:94:b5:e5:1f:82:35:7c:1e:02:cc:2c:fa:3c:
                    75:15:42:d7:51:97:a9:6c:3d:8e:d7:01:75:73:b1:
                    f6:09:bc:c9:d6:8e:d5:5e:43:9a:20:d1:7a:24:e6:
                    ac:e9:80:a6:2b:39:36:54:8e:0d:96:56:02:81:4e:
                    d0:1b:d5:f1:07:29:cc:38:de:38:48:8a:4f:52:98:
                    07:13:c0:ae:b2:ce:17:c3:0b:60:cc:8f:70:8e:57:
                    10:df:b0:38:d4:17:49:37:e2:16:1e:09:1d:5a:5c:
                    d6:31:37:4b:04:5e:ec:b9:b2:e8:0a:eb:f6:f2:63:
                    52:9e:51:bb:4e:c1:67:cd:b8:9e:f7:2a:20:e9:3d:
                    4f:9e:6a:09:66:f0:65:d1:49:30:2e:6a:2d:d6:85:
                    13:a7:ed:c7:a1:1c:d0:76:9d:31:a0:21:6c:0c:72:
                    c2:67:0b:da:62:76:45:74:02:77:9b:91:ba:44:55:
                    76:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:D2:08:78:15:E7:05:37:48:22:E7:7C:38:55:36:44:3D:58:5A:C4
            X509v3 Authority Key Identifier:
                keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/VtIIeBXnBTdIIud8OFU2RD1YWsQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         28:bc:cb:d3:b6:99:2b:d7:28:5c:02:68:04:f3:2e:5f:a6:56:
         8e:5b:7b:28:69:e1:b1:36:a9:c1:17:f1:a9:a1:6d:94:de:d0:
         6a:ef:43:fa:a5:36:a1:1d:bd:b3:a2:49:17:06:55:81:6d:17:
         c7:e0:b3:01:f3:76:f9:b1:4d:86:07:71:bb:c3:40:0b:c2:a8:
         7a:84:e8:82:dc:e7:3d:d3:8f:a0:8f:9c:27:40:c7:93:57:b6:
         88:fd:6e:a1:79:67:0e:07:98:5a:f0:66:20:69:f8:f6:75:7d:
         c6:6f:31:5f:47:4d:a2:55:01:0d:5c:9f:3c:52:6f:f0:ae:b6:
         3a:9a:55:d5:76:5f:66:8c:52:48:27:4e:4e:4e:92:7c:62:a4:
         de:7a:0f:bf:69:e6:1a:68:ac:3b:73:0e:2a:27:35:d7:76:d1:
         ff:92:8e:07:ba:a1:69:48:d7:f8:c5:8a:0c:27:6f:f6:28:30:
         b0:30:d4:5f:fc:9a:7b:c8:26:18:b8:37:f0:79:bd:50:2c:f0:
         f7:78:3e:7e:c8:4c:3a:dc:d8:99:5d:cf:5d:b1:87:d0:a9:1b:
         ab:a5:8b:b6:7a:5a:71:6b:d0:f1:3f:a5:73:0b:34:5a:c0:c2:
         6c:d3:de:78:51:f2:a5:e0:fe:13:2d:e5:de:72:c4:ae:d9:1c:
         25:b3:80:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----