Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/emdlriQpytPf7uixoZkT0BOVFEs.roa
File:                     emdlriQpytPf7uixoZkT0BOVFEs.roa (raw, json)
Hash identifier:          y6W/qSnQ/cBW1kAXKPsRhxXKTIddLRaeia7E13N5xKk=
Subject key identifier:   7A:67:65:AE:24:29:CA:D3:DF:EE:E8:B1:A1:99:13:D0:13:95:14:4B
Certificate issuer:       /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial:       018F3ECC232DC3EEB11F6F5ABCF440C4897B
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/emdlriQpytPf7uixoZkT0BOVFEs.roa
Signing time:             Fri 03 May 2024 14:11:56 +0000
ROA not before:           Fri 03 May 2024 14:11:56 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3e:cc:23:2d:c3:ee:b1:1f:6f:5a:bc:f4:40:c4:89:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
        Validity
            Not Before: May  3 14:11:56 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=7a6765ae2429cad3dfeee8b1a19913d01395144b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1f:fc:3b:89:65:e2:88:23:59:bb:04:66:f6:
                    c6:34:6c:67:cb:08:42:f5:d2:47:bb:c2:fa:e7:b5:
                    8d:41:84:59:00:97:08:24:c0:30:8f:49:ae:7f:f6:
                    47:c1:17:ed:74:24:cc:7f:4f:aa:62:80:01:11:22:
                    d2:5f:7e:3d:79:ab:aa:ed:9a:65:bb:23:54:a0:74:
                    32:64:6d:03:13:48:8a:3d:33:f5:60:c5:43:ef:ce:
                    ef:09:3a:1b:51:f5:72:ee:75:0a:ec:0f:53:12:05:
                    1e:55:a4:82:43:07:14:74:73:c8:31:92:ec:45:c3:
                    d9:fb:62:54:79:b7:ac:4d:8e:e4:ae:45:f5:84:4e:
                    4c:01:ac:65:33:9d:5c:33:8d:5a:bc:50:bf:10:84:
                    34:99:04:4e:c3:30:e5:59:97:0a:36:89:0e:bf:b6:
                    62:e7:4b:b8:19:58:8e:2f:9e:22:73:50:14:94:00:
                    b2:fa:2f:58:5a:43:d3:f5:aa:18:71:81:37:1d:f1:
                    f1:50:36:94:db:43:a7:1a:55:0d:36:9c:a6:8f:7d:
                    05:a3:a0:b9:93:31:66:cb:9f:60:9b:5e:61:0d:73:
                    72:54:3d:be:0b:a0:1a:da:ec:f1:cd:a8:25:2c:41:
                    03:2a:7c:44:41:d7:46:b2:bf:d8:1f:9f:7a:33:40:
                    ee:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:67:65:AE:24:29:CA:D3:DF:EE:E8:B1:A1:99:13:D0:13:95:14:4B
            X509v3 Authority Key Identifier:
                keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/emdlriQpytPf7uixoZkT0BOVFEs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         88:a1:c8:db:4b:9a:85:af:5f:26:bf:5d:39:28:ee:51:db:bf:
         18:8d:b2:fa:8e:77:9a:5f:e6:12:80:5f:13:6a:ba:c1:e4:75:
         41:cc:cd:26:4c:a9:54:70:05:f2:4b:d7:6a:fb:8d:88:1b:97:
         3b:bd:8c:17:16:fc:a3:47:a8:17:16:97:54:a4:ea:eb:b6:ab:
         09:34:ad:f2:f9:72:e0:97:cb:c9:14:8c:76:4b:80:e1:08:05:
         43:4f:5b:64:be:1b:af:25:d8:71:a0:31:f8:23:27:f2:56:c2:
         e6:a4:e0:18:38:f0:11:1b:fb:d8:52:a3:68:7f:8b:df:f8:cd:
         f7:44:26:eb:83:5e:ab:40:08:54:59:69:8e:a9:74:c3:e5:45:
         b0:0a:d1:60:a9:ce:d8:08:fc:b0:9c:3a:0a:76:1f:aa:70:d2:
         3d:a8:70:94:ed:15:ef:a0:a4:18:f1:f5:50:8f:7d:25:4d:fe:
         d2:5a:ec:d0:27:06:da:cf:90:54:60:06:73:e4:6d:f7:09:c4:
         b7:36:69:ab:3d:27:c9:74:b8:87:b7:c2:8d:03:7a:e6:f7:63:
         33:90:84:71:5e:0a:a5:3d:52:10:3d:fc:bf:33:01:d4:94:fb:
         02:92:c1:8e:b1:f1:6c:09:97:12:a7:63:9f:d8:9d:74:2f:dc:
         fa:5c:5e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----