Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/gycV-mvdX22XZzCksMvRaP9BX8g.roa
File:                     gycV-mvdX22XZzCksMvRaP9BX8g.roa (raw, json)
Hash identifier:          jjlPvMXreARFTZMoBqFr3SFvfxRLFy1fpj4aqoWcIOU=
Subject key identifier:   83:27:15:FA:6B:DD:5F:6D:97:67:30:A4:B0:CB:D1:68:FF:41:5F:C8
Certificate issuer:       /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial:       018F803CE731BB5E66C3BB52C675A0847AE8
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/gycV-mvdX22XZzCksMvRaP9BX8g.roa
Signing time:             Thu 16 May 2024 07:10:25 +0000
ROA not before:           Thu 16 May 2024 07:10:25 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:80:3c:e7:31:bb:5e:66:c3:bb:52:c6:75:a0:84:7a:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
        Validity
            Not Before: May 16 07:10:25 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=832715fa6bdd5f6d976730a4b0cbd168ff415fc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:93:fd:34:9c:01:5b:a5:c1:29:03:68:cd:0e:
                    49:fe:eb:a5:d0:e1:21:a4:fa:cf:6d:fb:ef:45:18:
                    75:4e:b0:ff:a7:1c:ff:b4:46:8c:bb:3d:d0:6f:30:
                    cb:7c:38:28:5b:2f:4f:ab:43:72:91:c6:54:e9:93:
                    cf:a6:18:5e:a8:78:55:97:bd:97:0c:12:8b:b4:c2:
                    ce:73:c7:3d:fe:91:1e:23:7e:25:4a:ba:6f:b5:58:
                    fb:e3:fa:80:c5:57:3c:0e:36:c0:86:db:89:11:50:
                    04:d6:7d:b9:c7:5e:5a:19:0f:e1:67:66:cf:ef:af:
                    b5:6b:27:06:3f:7f:ac:0b:82:fd:a7:dc:78:e9:a9:
                    6f:80:5a:1d:89:cc:ad:c9:76:25:62:a8:f0:aa:51:
                    cd:f9:b3:c7:31:24:81:b3:62:7d:4a:eb:dc:d5:14:
                    e7:5c:c0:16:38:e2:60:29:d8:27:47:f4:00:c6:7d:
                    8a:4a:54:21:97:17:98:37:e8:31:d0:14:e0:eb:b2:
                    02:5f:45:17:c0:19:5c:de:b3:67:5f:5c:83:7b:24:
                    80:34:97:4d:b0:58:2a:16:18:e2:e5:c0:50:69:a1:
                    97:fa:aa:eb:60:13:5b:43:fd:65:45:d7:99:1c:40:
                    16:3b:8c:8a:d2:19:44:ca:b0:dc:2d:80:5b:29:fb:
                    77:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:27:15:FA:6B:DD:5F:6D:97:67:30:A4:B0:CB:D1:68:FF:41:5F:C8
            X509v3 Authority Key Identifier:
                keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/gycV-mvdX22XZzCksMvRaP9BX8g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         8a:c8:0f:4e:52:96:0c:a1:8f:ca:bd:e6:83:41:44:a8:4a:e0:
         ce:c7:16:d7:df:e6:09:c1:9b:61:ad:6e:97:90:13:1f:96:98:
         ca:ec:8b:ed:bd:e4:e0:96:37:fa:0b:4a:53:b4:0c:7f:77:08:
         2b:e6:5f:9c:7c:d9:2b:88:08:23:27:f5:c5:af:75:9e:4e:ca:
         a9:0e:d7:b5:86:7a:1a:0c:0a:86:17:84:07:bc:2b:de:5a:05:
         85:45:44:0e:e1:95:88:81:c1:d3:ec:c8:67:2e:7a:5e:25:98:
         a9:de:ed:c5:65:ce:c9:dd:0d:35:70:c6:18:fc:38:14:05:d0:
         a9:05:54:05:d9:21:7f:df:53:1c:c4:6c:37:38:9b:c8:f4:79:
         ce:34:d0:20:73:eb:a0:57:45:2c:03:fb:b6:74:f4:59:ad:04:
         b4:14:83:f5:8d:39:56:a5:51:f6:48:63:ed:0d:cf:72:42:f9:
         71:57:8f:ca:59:78:d7:ce:7d:12:c1:2c:27:43:df:fa:50:29:
         13:00:ea:5a:8c:13:42:b0:22:14:10:09:11:ad:95:47:b2:e6:
         3d:2d:58:09:ab:bd:fd:93:6d:4a:79:bf:a9:c4:28:df:7c:bf:
         3d:f0:c8:be:59:73:02:b5:56:28:63:00:e6:df:4d:c8:1b:80:
         1a:f7:1f:0f
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY+APOcxu15mw7tSxnWghHroMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyYmVjNDFiZDJmM2IxNzlkZTA5NTE0MzA2NTMwYmQzZmJh
YzcwN2IwHhcNMjQwNTE2MDcxMDI1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MzI3MTVmYTZiZGQ1ZjZkOTc2NzMwYTRiMGNiZDE2OGZmNDE1ZmM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJP9NJwBW6XBKQNozQ5J/uul0OEh
pPrPbfvvRRh1TrD/pxz/tEaMuz3QbzDLfDgoWy9Pq0NykcZU6ZPPphheqHhVl72X
DBKLtMLOc8c9/pEeI34lSrpvtVj74/qAxVc8DjbAhtuJEVAE1n25x15aGQ/hZ2bP
76+1aycGP3+sC4L9p9x46alvgFodicytyXYlYqjwqlHN+bPHMSSBs2J9Suvc1RTn
XMAWOOJgKdgnR/QAxn2KSlQhlxeYN+gx0BTg67ICX0UXwBlc3rNnX1yDeySANJdN
sFgqFhji5cBQaaGX+qrrYBNbQ/1lRdeZHEAWO4yK0hlEyrDcLYBbKft38QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFIMnFfpr3V9tl2cwpLDL0Wj/QV/IMB8GA1UdIwQY
MBaAFLK+xBvS87F53glRQwZTC9P7rHB7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYt
ZDEyZjAzOWRiMmM5LzEvZ3ljVi1tdmRYMjJYWnpDa3NNdlJhUDlCWDhnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYtZDEyZjAzOWRiMmM5
LzEvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIrID05Slgyhj8q95oNB
RKhK4M7HFtff5gnBm2GtbpeQEx+WmMrsi+295OCWN/oLSlO0DH93CCvmX5x82SuI
CCMn9cWvdZ5OyqkO17WGehoMCoYXhAe8K95aBYVFRA7hlYiBwdPsyGcuel4lmKne
7cVlzsndDTVwxhj8OBQF0KkFVAXZIX/fUxzEbDc4m8j0ec400CBz66BXRSwD+7Z0
9FmtBLQUg/WNOValUfZIY+0Nz3JC+XFXj8pZeNfOfRLBLCdD3/pQKRMA6lqME0Kw
IhQQCRGtlUey5j0tWAmrvf2TbUp5v6nEKN98vz3wyL5ZcwK1VihjAObfTcgbgBr3
Hw8=
-----END CERTIFICATE-----