Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/hCZ_9GlbdIGoPPHIoC4N5dJRahc.roa
File:                     hCZ_9GlbdIGoPPHIoC4N5dJRahc.roa (raw, json)
Hash identifier:          joIbPnz+HBwQWI0k9QFxpSnBUSfV6s78f5l+NV3XR90=
Subject key identifier:   84:26:7F:F4:69:5B:74:81:A8:3C:F1:C8:A0:2E:0D:E5:D2:51:6A:17
Certificate issuer:       /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial:       018F667D9313BE8FDC26CE331F52FB144D48
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/hCZ_9GlbdIGoPPHIoC4N5dJRahc.roa
Signing time:             Sat 11 May 2024 07:10:56 +0000
ROA not before:           Sat 11 May 2024 07:10:56 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:66:7d:93:13:be:8f:dc:26:ce:33:1f:52:fb:14:4d:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
        Validity
            Not Before: May 11 07:10:56 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=84267ff4695b7481a83cf1c8a02e0de5d2516a17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:bd:d3:79:8c:fa:68:24:e6:fa:03:bd:8a:ef:
                    74:ed:b8:e6:a0:44:b8:fb:33:19:9f:87:9c:b6:13:
                    33:30:e4:49:83:9a:2a:3f:6a:fe:5d:28:fd:ea:08:
                    e2:a1:54:77:ba:11:3a:5a:d2:ac:25:08:69:78:cc:
                    54:b7:88:27:67:07:0f:32:e3:84:bd:a3:74:bc:a2:
                    0e:ad:94:4b:c4:7a:f6:5e:22:5f:a7:ee:ed:99:9f:
                    a4:d2:0f:8a:ea:63:53:73:21:22:69:14:5e:4e:79:
                    23:c5:1d:0e:bb:1c:70:b5:a6:02:ff:71:37:d8:b2:
                    61:84:4b:25:71:33:25:93:cf:00:cd:7f:30:b4:4c:
                    ec:12:a1:81:f8:25:94:c3:8e:ed:c0:af:9e:84:f7:
                    2a:8f:e0:0d:9d:ca:31:af:09:42:26:4a:c1:e2:77:
                    6a:82:b1:7c:17:c6:70:15:3a:73:52:fe:22:5c:9d:
                    d3:f6:1c:8e:63:dd:11:4e:9c:48:67:ec:e4:f6:9e:
                    36:2c:46:14:7c:56:3f:34:bf:3c:0a:31:61:68:1f:
                    c1:f3:bd:c6:e9:9a:6c:d3:44:31:ef:61:6a:db:d2:
                    cb:15:a4:e1:0e:b1:28:37:53:e7:f3:9f:1c:21:65:
                    29:d9:a9:e6:7f:0f:95:c8:3d:ea:be:9e:be:a3:79:
                    1a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:26:7F:F4:69:5B:74:81:A8:3C:F1:C8:A0:2E:0D:E5:D2:51:6A:17
            X509v3 Authority Key Identifier:
                keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/hCZ_9GlbdIGoPPHIoC4N5dJRahc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         23:16:71:20:10:b5:34:af:c6:cc:4c:b0:9d:49:01:f6:f9:37:
         c3:8f:09:a9:88:fe:01:5f:54:e1:97:9f:00:cc:bd:8b:0b:a9:
         c3:97:38:e8:d4:3f:da:88:11:63:9f:8d:a9:62:5b:20:63:1e:
         76:e8:07:3f:ed:80:38:1f:5f:5f:c8:c2:07:92:e9:0a:16:f1:
         45:6c:9e:ec:8b:7b:a6:6d:ab:bd:48:3f:6a:31:20:96:c0:96:
         eb:61:93:09:11:fb:48:47:3c:74:8a:52:71:c1:a2:5a:30:16:
         f4:47:3c:20:a6:29:f9:da:b9:6c:e1:af:25:a7:2f:93:c2:f2:
         93:21:19:9a:c8:b4:bd:0a:ec:cf:2a:d3:07:92:d3:a5:ae:e6:
         1f:4b:39:30:18:af:2e:c6:ca:4e:a7:5f:06:7e:f3:0a:bc:41:
         c5:46:d2:5e:b5:d2:38:52:b2:fd:a1:c3:57:bd:eb:07:8c:2d:
         d9:eb:2e:f2:e6:46:af:f7:ce:10:25:03:27:4d:83:10:15:3d:
         e1:05:3d:6f:4a:6d:92:a7:6b:c9:ee:25:00:25:e3:33:4e:05:
         1f:95:13:0f:fd:3f:26:31:ce:1b:07:36:c6:b2:03:91:a5:76:
         89:81:74:48:be:4d:b1:33:41:fc:97:bf:5b:ea:39:e3:02:09:
         59:41:60:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----