Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/ncn1FVktyyuyzHB6bo3Fft1LbU8.roa
File:                     ncn1FVktyyuyzHB6bo3Fft1LbU8.roa (raw, json)
Hash identifier:          vQr7vmhVXpb4MU2nWIw9qhpHntUUn03Odhi8uDIMm7Y=
Subject key identifier:   9D:C9:F5:15:59:2D:CB:2B:B2:CC:70:7A:6E:8D:C5:7E:DD:4B:6D:4F
Certificate issuer:       /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial:       018F6F80B49CAE8C99CF40C573007F12D71A
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/ncn1FVktyyuyzHB6bo3Fft1LbU8.roa
Signing time:             Mon 13 May 2024 01:10:56 +0000
ROA not before:           Mon 13 May 2024 01:10:56 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:6f:80:b4:9c:ae:8c:99:cf:40:c5:73:00:7f:12:d7:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
        Validity
            Not Before: May 13 01:10:56 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=9dc9f515592dcb2bb2cc707a6e8dc57edd4b6d4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:2d:ff:97:68:dd:a0:43:b1:07:a4:88:4d:3a:
                    91:5b:71:e4:8b:10:33:17:9a:ec:64:d9:26:61:7e:
                    10:25:55:59:fa:c5:0f:c9:5a:da:af:2a:bf:c9:98:
                    d5:3d:40:6c:0f:bf:a4:ee:48:b8:0e:d0:eb:89:08:
                    3f:86:d2:91:f3:66:34:1b:9d:04:2b:da:3e:36:f0:
                    d9:0e:fc:0e:c8:30:fb:6b:88:5a:c9:fc:89:49:14:
                    1d:ce:99:e0:6c:84:98:03:82:1c:30:44:ce:81:4a:
                    83:8f:40:3d:3e:c6:35:cd:bb:bd:c8:8a:a2:cf:67:
                    69:3e:3e:b7:b8:35:7d:86:04:06:ca:92:b3:77:73:
                    67:05:e7:2f:bc:c3:07:e9:51:7c:a7:08:75:50:b8:
                    1a:53:d5:66:3a:60:e9:e9:2e:e4:7a:61:35:ed:a8:
                    e8:44:28:1f:e2:c6:ce:c9:a7:83:2f:d8:e3:54:41:
                    2a:07:ce:d5:48:34:e3:5e:0a:ae:a1:5b:6a:a6:08:
                    37:db:66:9f:b8:59:c8:11:be:26:4e:17:4b:e9:dc:
                    ff:f5:65:21:f5:95:2a:7b:38:c4:8e:d4:47:63:89:
                    33:19:54:ed:5f:9f:30:fb:bf:0d:0c:f0:6b:18:ff:
                    da:87:1c:f1:e2:50:54:75:5a:ea:98:34:83:e3:99:
                    ed:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:C9:F5:15:59:2D:CB:2B:B2:CC:70:7A:6E:8D:C5:7E:DD:4B:6D:4F
            X509v3 Authority Key Identifier:
                keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/ncn1FVktyyuyzHB6bo3Fft1LbU8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         c9:db:c5:0d:f1:a8:8c:c6:36:06:ec:9c:8d:a2:3c:27:ee:f0:
         ea:da:a8:01:80:41:ea:10:7e:54:83:30:5a:e5:91:aa:c1:1b:
         2a:72:0f:cd:24:0c:17:16:f1:5c:28:85:b8:8d:53:c0:88:a9:
         64:7c:4e:f0:b4:c4:06:36:a4:77:31:91:69:cf:52:01:e6:75:
         89:d7:3a:22:8b:84:c8:1a:4e:ca:f4:e5:62:0a:96:28:8e:cd:
         40:13:b0:18:7d:ff:47:80:34:a1:db:57:36:18:4d:01:f6:06:
         47:5e:fa:29:09:a1:72:86:1f:34:82:eb:ed:74:60:d1:61:b3:
         5d:63:7b:8c:e9:4b:3d:7f:1a:95:e5:3f:b0:2e:5c:4c:b4:4c:
         1e:5e:82:fc:fa:42:00:04:93:b6:9d:84:95:6c:85:8b:2c:40:
         df:7c:2e:05:30:22:17:d9:6f:4d:b3:c9:63:60:20:59:0d:60:
         80:c9:f6:9e:c9:f8:5e:f7:d4:f2:9a:7b:7b:0d:52:e5:31:47:
         73:ec:65:f9:12:d6:08:47:5f:7e:3c:ff:ac:00:32:93:a3:f6:
         f1:a3:34:50:e1:9d:56:a4:ed:f8:77:4e:5c:fd:97:95:b7:b1:
         cf:2e:f7:9f:86:08:77:4b:74:c9:e9:a8:2f:a5:6f:07:eb:46:
         9b:3c:89:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----