Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/ZBUJM3EG1GXujWWERlOfYWNuWao.roa
File:                     ZBUJM3EG1GXujWWERlOfYWNuWao.roa (raw, json)
Hash identifier:          pwlU1dqQzPvsTMTMuQ4+V6JOEFEZuK2Z6rXYIjAErtU=
Subject key identifier:   64:15:09:33:71:06:D4:65:EE:8D:65:84:46:53:9F:61:63:6E:59:AA
Certificate issuer:       /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial:       018F55C1D28949A7A6B6AC2DED07FD0FEF16
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/ZBUJM3EG1GXujWWERlOfYWNuWao.roa
Signing time:             Wed 08 May 2024 01:11:56 +0000
ROA not before:           Wed 08 May 2024 01:11:56 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:55:c1:d2:89:49:a7:a6:b6:ac:2d:ed:07:fd:0f:ef:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
        Validity
            Not Before: May  8 01:11:56 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=641509337106d465ee8d658446539f61636e59aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e1:15:b2:7d:ab:79:5b:6f:94:93:29:2b:9f:
                    2c:1b:12:86:c2:7f:e5:aa:c8:08:56:9e:ae:03:a8:
                    fe:25:19:e1:d4:1f:5d:13:75:5c:47:a5:fe:94:db:
                    e5:4f:b4:7b:09:34:b7:63:92:a5:f4:f7:10:50:39:
                    6d:db:7d:14:8f:e7:29:d0:46:46:ab:b7:e4:5f:1f:
                    99:bd:d1:5b:6d:70:33:4e:cc:ec:bf:b8:0f:25:98:
                    73:25:24:bf:d2:03:e9:a7:9f:15:8f:00:ab:2d:13:
                    53:4b:a2:aa:e5:82:75:14:84:69:19:50:3d:85:51:
                    69:fc:39:c5:31:2c:45:0f:25:8a:29:45:d4:fb:ea:
                    66:4f:d4:63:85:77:ea:8c:f1:86:86:ab:99:eb:3a:
                    55:af:66:3d:09:a8:d2:2e:b5:7b:d4:ee:f2:2b:ef:
                    ef:e9:02:f3:7c:96:fb:50:5f:89:85:02:09:b5:c0:
                    e3:10:e7:e8:f9:46:57:f7:35:4d:28:c6:a5:34:b4:
                    d6:dc:c2:f6:e8:1c:9f:78:03:fe:f4:ad:3d:98:07:
                    63:ca:d0:16:e1:c2:76:ab:00:63:d6:ad:90:41:32:
                    fc:70:6f:49:ed:26:39:f5:0d:34:3e:03:25:d1:29:
                    0c:f8:75:6b:09:3e:c7:4a:8c:e8:b1:ef:68:b8:a7:
                    98:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:15:09:33:71:06:D4:65:EE:8D:65:84:46:53:9F:61:63:6E:59:AA
            X509v3 Authority Key Identifier:
                keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/ZBUJM3EG1GXujWWERlOfYWNuWao.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         d2:8b:c3:cf:c7:0c:0a:7e:d1:b9:a5:81:c9:23:a4:90:08:cc:
         03:75:5a:be:00:d7:91:df:c8:69:5d:0c:d9:0a:fb:55:25:8a:
         d4:a7:c7:e6:9c:9f:84:03:38:de:61:04:ca:5a:55:25:29:26:
         33:cb:d4:86:f8:64:c8:7d:9a:da:0f:62:09:da:11:02:7d:b3:
         8a:09:d5:f9:a7:b1:ae:c2:45:b4:65:6f:9e:39:94:2e:89:40:
         a5:dc:70:c8:d4:11:56:2d:9b:f9:53:c0:24:ce:64:ae:da:c9:
         54:fc:89:e4:71:17:b4:44:34:46:87:9d:3e:21:b2:5c:77:60:
         ca:5e:d6:49:59:33:5d:c3:7d:52:15:52:c4:95:1e:76:04:90:
         61:86:1a:04:56:4c:b2:dd:fc:c0:52:1f:c5:e1:19:b2:7a:b2:
         6a:9a:12:14:74:dc:5a:f9:5d:ba:21:54:b5:fb:ad:ca:1d:14:
         1b:51:e0:2b:3c:6c:ee:2e:c9:e2:d3:b0:7f:df:d8:83:06:09:
         28:67:64:9a:e2:06:b4:73:83:3b:b5:07:e1:01:43:0b:3d:0a:
         9e:63:0a:0b:f4:3d:57:41:23:d6:14:83:01:bf:b9:9c:a7:93:
         73:91:ba:7c:18:68:c5:1c:29:37:2c:53:98:50:65:91:70:a5:
         89:8f:ae:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----