Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/lG07G8mPeizTQSFmrIiKTXV19R0.roa
File:                     lG07G8mPeizTQSFmrIiKTXV19R0.roa (raw, json)
Hash identifier:          tzdozytcP6S2aIJnv980tg/BDMkNFM5crabGHy/B8EU=
Subject key identifier:   94:6D:3B:1B:C9:8F:7A:2C:D3:41:21:66:AC:88:8A:4D:75:75:F5:1D
Certificate issuer:       /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial:       018F36A3D1B4C4BD338EC3D5985EA5E8BA5A
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/lG07G8mPeizTQSFmrIiKTXV19R0.roa
Signing time:             Thu 02 May 2024 00:10:56 +0000
ROA not before:           Thu 02 May 2024 00:10:56 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:36:a3:d1:b4:c4:bd:33:8e:c3:d5:98:5e:a5:e8:ba:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
        Validity
            Not Before: May  2 00:10:56 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=946d3b1bc98f7a2cd3412166ac888a4d7575f51d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:45:87:13:34:d4:52:42:69:46:16:ee:c8:00:
                    29:c0:9b:e6:a3:bf:fa:e8:4e:9d:a3:55:39:b6:84:
                    ca:97:3e:e0:32:8c:5b:bd:65:0b:ea:6e:c3:3c:a7:
                    09:85:62:08:c9:3f:71:95:3e:fc:77:b6:b2:36:17:
                    a7:3d:bb:ef:df:b8:8f:46:97:f8:2e:28:4e:95:bd:
                    b0:43:7a:54:0b:a5:5e:e0:c2:2e:3c:9e:a0:3d:fc:
                    f2:90:99:37:1d:fa:20:39:cd:f6:d0:bd:72:2d:34:
                    b5:c2:6f:cd:75:65:99:57:96:68:a3:5a:1d:80:4b:
                    2f:67:e4:a5:03:ca:6a:6a:29:67:ea:02:c6:a8:67:
                    ba:2d:bd:e2:e8:fa:42:6c:e8:21:9e:6f:c7:18:f2:
                    ed:63:2f:60:3c:ce:ec:26:20:5e:cb:ac:1d:87:e5:
                    1b:13:80:fb:4d:d8:56:82:9c:db:35:dc:a1:45:d6:
                    58:5b:af:be:57:74:b7:03:4e:ec:dd:de:f1:da:90:
                    3e:e7:e4:a0:4d:6a:42:8d:f5:55:76:38:c9:de:1e:
                    b9:a1:5b:f1:d6:80:b5:a8:a3:af:b5:5b:80:b1:8d:
                    b2:0a:ba:08:9c:4a:3f:0d:53:94:2d:18:29:49:4b:
                    83:37:09:fd:16:18:2f:99:1d:a3:fb:c0:75:08:77:
                    b0:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:6D:3B:1B:C9:8F:7A:2C:D3:41:21:66:AC:88:8A:4D:75:75:F5:1D
            X509v3 Authority Key Identifier:
                keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/lG07G8mPeizTQSFmrIiKTXV19R0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         d2:a3:0a:41:ca:02:2d:11:03:d4:4c:9b:4b:6d:38:99:30:0a:
         d6:01:f7:22:8a:12:d5:ee:34:63:b2:61:ac:cf:b2:89:da:4b:
         87:ba:09:a8:5b:2a:ce:fb:23:50:c4:a9:47:b3:3d:ca:f0:8a:
         50:aa:b4:8c:d4:97:cb:e3:dd:b2:99:49:74:77:01:ea:11:82:
         f7:b9:89:54:d4:34:1d:b9:5b:3a:0e:93:66:5d:81:c9:d7:1f:
         b3:42:80:d4:5f:89:25:58:94:69:b8:0a:a8:02:ae:91:5d:1f:
         49:f7:55:4a:cd:13:46:f3:de:0c:e0:b4:0a:8b:17:4e:8a:4c:
         d1:e9:7b:85:72:09:1a:f6:c3:0e:ff:0a:61:6f:1a:04:dd:f8:
         33:d6:8b:86:f9:39:ae:64:d5:86:3f:4a:5f:e8:19:4e:23:69:
         09:f3:9e:9f:6b:4b:ac:6a:76:45:a3:53:5a:21:f8:d8:71:31:
         4b:b6:15:a4:e9:52:81:8f:0e:e1:ed:ea:1a:18:f2:ec:35:9b:
         10:59:c8:f8:f5:f7:9a:cd:1a:ab:4d:fe:6e:73:62:df:ea:d6:
         4e:2c:a3:f8:2b:e7:f6:57:0c:50:b2:0d:2a:b1:1a:c5:83:5e:
         22:f1:ca:81:87:d4:9f:15:98:d1:2b:3e:22:82:e6:d2:84:f4:
         8c:cb:61:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----