Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/WuQS76VAKJAB81QGW8hV13cqNSg.roa
File:                     WuQS76VAKJAB81QGW8hV13cqNSg.roa (raw, json)
Hash identifier:          Q5f5TOlmcOCK/05DfE4LkUMTkzQvJMZZuNzH51U766E=
Subject key identifier:   5A:E4:12:EF:A5:40:28:90:01:F3:54:06:5B:C8:55:D7:77:2A:35:28
Certificate issuer:       /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial:       018FA7F32BDF7702F54B27A34791CB3FC2B0
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/WuQS76VAKJAB81QGW8hV13cqNSg.roa
Signing time:             Fri 24 May 2024 00:14:42 +0000
ROA not before:           Fri 24 May 2024 00:14:42 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18f:9689:3f54/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:a7:f3:2b:df:77:02:f5:4b:27:a3:47:91:cb:3f:c2:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
        Validity
            Not Before: May 24 00:14:42 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=5ae412efa540289001f354065bc855d7772a3528
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ca:8b:43:72:7e:17:1f:2f:be:b6:f4:fd:6d:
                    23:08:ed:a8:fe:aa:b0:96:b1:66:ad:d0:9d:23:35:
                    46:b9:89:c1:38:10:cf:ed:82:0d:aa:69:8a:2e:f9:
                    5d:7f:7c:86:a1:8b:d0:7e:61:f3:bc:3a:6a:e7:eb:
                    e1:93:3c:8a:83:92:13:05:cc:fb:60:85:50:68:2b:
                    e5:9f:e2:53:ed:78:ce:8a:c2:e9:3c:b0:90:ed:47:
                    d6:54:df:c1:b0:aa:d5:16:7c:62:c0:3a:2a:c4:9b:
                    79:89:f4:4b:53:e9:62:00:8b:75:b8:99:4f:cb:4f:
                    eb:ba:1b:e9:bc:a8:df:c3:0c:9f:9b:b4:b8:c7:7f:
                    7f:f2:ac:55:93:e9:53:c9:48:a1:9a:df:7a:5c:f5:
                    f9:4b:23:65:f3:34:11:e2:14:67:af:2e:54:b8:9a:
                    ba:33:0c:e8:1c:28:59:9c:f1:b3:07:64:10:20:25:
                    47:a0:8e:4f:f9:f0:b1:41:c4:b7:f2:82:6c:26:57:
                    41:2c:6e:19:64:6c:e1:d7:bb:75:f4:77:6b:87:79:
                    f2:35:2c:7c:ab:81:6d:82:2e:67:b9:91:44:12:4e:
                    e4:9f:ee:a3:d3:5b:38:47:f9:64:d2:9d:16:bd:1a:
                    70:96:47:f8:01:1f:56:4f:fe:b6:48:e6:03:ac:35:
                    7e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:E4:12:EF:A5:40:28:90:01:F3:54:06:5B:C8:55:D7:77:2A:35:28
            X509v3 Authority Key Identifier:
                keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/WuQS76VAKJAB81QGW8hV13cqNSg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         13:cd:fb:ba:14:aa:ba:a9:ed:e9:fb:aa:d0:fa:40:49:e8:a3:
         45:8b:08:f6:a5:72:b4:ce:17:56:c4:bc:10:53:27:d5:15:74:
         b4:9f:3c:d3:5e:b7:1c:9a:5d:08:22:d2:95:92:24:2d:e2:3b:
         17:97:cd:69:02:61:c2:c1:e9:74:73:6c:e2:db:00:72:c3:1b:
         cf:26:87:69:d5:4b:8b:d0:d8:52:0c:71:00:9d:74:77:44:3c:
         c2:11:11:ed:a6:47:b4:10:20:0e:d7:36:fb:a7:e0:7b:39:67:
         94:0c:5e:92:a5:68:a9:9e:02:d6:ed:67:2d:65:22:83:cd:1e:
         51:3c:d2:7e:c3:de:fc:85:16:7a:20:b1:0a:f2:4c:6e:e5:71:
         06:6b:2b:47:ee:1f:d9:2e:21:b2:b5:7e:65:66:d7:97:e9:69:
         7f:72:f8:79:c6:bd:49:24:46:b1:53:f9:a6:75:ea:cb:b3:29:
         18:ac:40:e8:6c:a6:38:01:6d:43:03:4e:e5:41:91:84:70:3a:
         24:4f:00:9b:2e:0e:62:b4:19:25:0c:3c:bd:bf:91:4a:ec:81:
         57:2d:88:21:cb:62:1e:01:2e:af:b0:bd:5d:6c:6c:6f:64:57:
         8d:a2:95:f9:22:73:57:53:08:c5:f2:3a:d0:93:e8:0f:3e:31:
         05:da:d0:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----