Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/jLwZ7sykHmp9TP9rjUnYdXfANm0.roa
File:                     jLwZ7sykHmp9TP9rjUnYdXfANm0.roa (raw, json)
Hash identifier:          WWlXM0yXpUQrlyiCaofzxw65oFY/UW9iePAYtMHmiIE=
Subject key identifier:   8C:BC:19:EE:CC:A4:1E:6A:7D:4C:FF:6B:8D:49:D8:75:77:C0:36:6D
Certificate issuer:       /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial:       018F63EA64E41A432F0647000EC7200C044C
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/jLwZ7sykHmp9TP9rjUnYdXfANm0.roa
Signing time:             Fri 10 May 2024 19:10:56 +0000
ROA not before:           Fri 10 May 2024 19:10:56 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:63:ea:64:e4:1a:43:2f:06:47:00:0e:c7:20:0c:04:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
        Validity
            Not Before: May 10 19:10:56 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=8cbc19eecca41e6a7d4cff6b8d49d87577c0366d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:13:cc:34:54:4f:6b:28:ec:60:14:3a:a2:d7:
                    f1:42:b9:de:41:2e:cf:f8:9a:2a:54:33:fc:53:06:
                    a4:e0:dd:ec:5a:a3:98:e7:e8:9b:41:28:7e:73:75:
                    8f:fc:0a:22:85:de:19:3c:92:49:c2:ec:46:51:c3:
                    75:c1:40:f2:27:56:74:17:ea:f9:be:fe:fb:a2:a5:
                    2b:73:09:d4:86:9b:d6:77:8e:5d:3b:ed:38:ba:db:
                    e8:24:42:20:58:25:76:68:02:62:89:8f:83:69:9c:
                    f2:a3:6d:ea:b5:f4:91:d7:2f:8f:3e:f7:3c:ae:4c:
                    32:6f:83:ca:42:ac:ff:92:6f:9d:80:ee:51:e6:96:
                    8c:82:b7:2a:25:d0:44:95:ee:9e:f6:27:f5:76:c6:
                    3c:f0:cd:19:91:b9:ae:e2:26:f3:b9:b4:87:55:5b:
                    e7:08:6b:e0:d7:2f:67:3b:5c:4a:94:89:87:eb:31:
                    44:a3:b6:04:3b:48:d5:5c:76:94:ca:fa:d4:53:6e:
                    73:23:b3:47:dc:84:ed:15:df:bc:cf:83:28:6e:98:
                    b9:96:0f:29:ae:ea:64:28:28:67:a7:ac:73:23:79:
                    42:42:63:ee:e3:5a:35:14:27:f9:0f:25:cf:23:f6:
                    90:02:21:19:35:c5:ef:cb:c6:a7:4d:93:6a:2a:8b:
                    06:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:BC:19:EE:CC:A4:1E:6A:7D:4C:FF:6B:8D:49:D8:75:77:C0:36:6D
            X509v3 Authority Key Identifier:
                keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/jLwZ7sykHmp9TP9rjUnYdXfANm0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         5a:ad:ca:5e:a9:b4:4f:18:18:fb:20:d2:2f:e2:b8:64:4b:e0:
         7a:e1:a1:a0:77:31:82:e8:04:a2:74:cc:9f:cf:bf:4b:b9:2a:
         d6:e3:ab:b9:89:0f:7c:95:81:c3:9e:6e:fa:fd:0a:18:36:3a:
         c0:12:65:46:c3:47:a9:06:ad:89:f4:52:47:ff:7c:08:1b:75:
         fe:e3:b7:ab:e2:c1:43:30:3d:af:f5:5a:4a:a1:50:1b:c1:71:
         91:f9:76:56:45:93:21:57:c2:1b:fe:55:5e:57:d8:16:e9:0c:
         d7:b5:21:51:88:4b:c9:bd:1c:6a:d6:e5:46:84:59:41:2e:1f:
         28:d4:fc:28:c2:e7:a3:f1:34:36:21:5f:e5:15:e8:87:b1:c9:
         8a:2a:5d:a8:49:ec:1d:cf:93:2f:fd:4a:e0:3f:49:5e:29:56:
         b9:97:9f:57:28:87:73:e8:00:c1:c7:21:77:94:84:e8:07:fc:
         01:55:47:9b:23:a1:47:5b:3f:72:f3:c3:2d:17:6c:96:0a:cc:
         b7:0c:8e:67:09:ed:62:c2:09:ed:2c:fb:1f:60:90:9b:b7:51:
         ce:0b:e1:cd:51:a4:80:1d:33:7b:dc:bd:35:79:70:76:34:89:
         fd:9c:6c:e4:25:a1:9a:54:1e:27:8f:f4:be:b4:1b:60:8a:50:
         e1:46:35:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----