Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/gex4dVTd9iGMn7nSe-ZWCbZeUVU.roa
File:                     gex4dVTd9iGMn7nSe-ZWCbZeUVU.roa (raw, json)
Hash identifier:          G74Eql8V4qnCIp9IzvythiuyCWj4cKbQobX9wOPDXGU=
Subject key identifier:   81:EC:78:75:54:DD:F6:21:8C:9F:B9:D2:7B:E6:56:09:B6:5E:51:55
Certificate issuer:       /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial:       018F31AE76E28A23B5460A578ABBF208D82E
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/gex4dVTd9iGMn7nSe-ZWCbZeUVU.roa
Signing time:             Wed 01 May 2024 01:04:28 +0000
ROA not before:           Wed 01 May 2024 01:04:28 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
                          2001:67c:64:ffff:0:18f:31ae:59ab/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:31:ae:76:e2:8a:23:b5:46:0a:57:8a:bb:f2:08:d8:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
        Validity
            Not Before: May  1 01:04:28 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=81ec787554ddf6218c9fb9d27be65609b65e5155
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:35:9e:09:3e:40:67:77:d9:f0:fb:29:7e:19:
                    1c:7a:ef:57:da:7f:47:85:f8:49:24:1d:52:c4:bd:
                    cf:94:10:fb:f1:3c:fd:d6:8a:e6:04:34:d8:00:fe:
                    e7:97:dc:70:74:da:3a:e7:f2:39:96:fc:6c:d3:aa:
                    56:d5:92:84:d7:dc:98:4a:8e:18:b5:27:06:b7:f2:
                    4a:61:6f:e1:94:4c:73:dd:ed:d4:75:22:58:e4:42:
                    3d:80:74:51:0d:c1:d7:1b:3e:4a:d6:1f:56:0a:ec:
                    f9:9f:17:69:69:38:5d:01:ca:fb:0d:9e:32:6e:9f:
                    fc:bd:7e:c5:c5:2b:11:9b:c1:6d:45:30:27:22:e3:
                    21:ac:08:a6:e9:6b:50:d1:49:d1:8e:a3:42:bd:d8:
                    d6:20:56:22:88:db:25:ad:31:08:94:7c:5e:23:e7:
                    a0:a5:a2:14:36:cd:f1:2c:bb:ac:bf:bf:7e:44:51:
                    5d:9b:fa:73:97:e8:2b:46:f8:5c:16:fa:c3:f1:40:
                    3f:7c:02:e6:27:96:04:03:3d:55:ba:de:6f:1b:9f:
                    96:de:b6:ec:44:15:34:9f:95:9d:19:04:7d:24:1f:
                    9e:53:8f:11:4a:5e:12:3d:4c:31:d8:09:57:24:b3:
                    f5:fb:23:be:89:7d:7e:36:ef:36:80:00:47:5a:0d:
                    f8:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:EC:78:75:54:DD:F6:21:8C:9F:B9:D2:7B:E6:56:09:B6:5E:51:55
            X509v3 Authority Key Identifier:
                keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/gex4dVTd9iGMn7nSe-ZWCbZeUVU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         cb:48:fc:32:8b:9a:14:22:ca:88:30:2d:cf:47:5b:16:26:b4:
         dc:e5:9b:1a:60:bd:e8:93:7c:30:43:a0:96:40:f8:d3:4c:d9:
         60:a2:9d:a6:2f:2e:9c:3b:2e:b6:f4:42:1d:a8:6d:ed:56:2c:
         46:b2:ff:4e:b2:90:56:46:62:07:5d:2c:78:49:9a:65:c9:3a:
         4a:be:74:90:30:4e:65:60:fc:27:6d:90:e7:ac:50:c5:01:7d:
         a3:19:ae:2a:74:27:ef:10:15:71:47:7a:54:e3:02:c7:b8:fb:
         7f:2c:35:a2:5b:3b:ce:07:c9:04:c5:ac:da:37:39:88:53:79:
         72:cb:7f:2a:e5:06:d2:b5:ba:a8:3a:82:b0:fb:20:07:81:11:
         c7:82:bf:db:c7:27:2e:2b:c9:56:78:d6:51:91:a9:ee:91:bd:
         37:8c:d5:7e:42:f0:43:20:0c:0b:29:cd:fb:e7:0f:c2:42:bc:
         03:ee:b9:74:34:eb:0a:83:8b:02:62:ef:1a:0e:34:67:c6:10:
         92:08:03:62:55:92:05:9a:8b:46:54:04:f0:ee:e3:ee:01:8e:
         da:22:f8:f6:b9:3c:fe:4e:db:c4:71:7c:91:74:82:0a:c5:3c:
         72:c9:79:69:d5:74:77:bf:f7:f9:b4:57:66:0d:14:6b:ed:e5:
         91:6d:e0:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----