Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/p6NYGRKoMaKcBo5uH7FwNAIxZ2o.roa
File:                     p6NYGRKoMaKcBo5uH7FwNAIxZ2o.roa (raw, json)
Hash identifier:          j+7sM6znq9ZJa5TUf2bD7RJSDJAvWLv7Um2C3PNkZ8o=
Subject key identifier:   A7:A3:58:19:12:A8:31:A2:9C:06:8E:6E:1F:B1:70:34:02:31:67:6A
Certificate issuer:       /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial:       018F55530B881195631CF0DB92ED06F5750B
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/p6NYGRKoMaKcBo5uH7FwNAIxZ2o.roa
Signing time:             Tue 07 May 2024 23:10:56 +0000
ROA not before:           Tue 07 May 2024 23:10:56 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:55:53:0b:88:11:95:63:1c:f0:db:92:ed:06:f5:75:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
        Validity
            Not Before: May  7 23:10:56 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=a7a3581912a831a29c068e6e1fb170340231676a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4c:c3:60:37:4b:ef:ef:23:c2:08:ca:96:93:
                    40:6c:08:eb:b8:aa:06:62:06:93:46:9a:cd:b0:d6:
                    0b:b2:61:75:53:13:7f:82:0c:c9:15:ca:67:e5:bb:
                    5a:fa:c4:b9:b8:7f:ec:dd:8e:ca:9b:a8:fa:46:18:
                    42:dc:e8:27:80:9e:9d:37:bb:1a:f9:8d:a4:b6:2a:
                    02:c0:72:15:16:16:89:48:8d:e4:da:a6:79:28:17:
                    76:9d:11:6e:b8:71:f6:17:1e:7b:c4:f5:ea:4f:83:
                    0f:98:22:18:40:52:38:71:a5:0c:47:a3:50:4b:8d:
                    42:2c:04:0f:7f:1a:68:d4:7b:a0:0d:df:ff:a0:22:
                    ca:49:64:c0:32:f1:0b:fd:2a:85:3b:47:63:88:5e:
                    5b:24:c0:3e:71:16:65:88:de:c7:ea:74:0b:ae:d7:
                    8a:6c:fd:ed:ee:28:44:0d:83:64:91:2a:fc:9d:a8:
                    73:d6:31:27:2c:26:8c:5c:bd:12:2b:32:d9:42:e5:
                    7f:0c:30:d2:3e:f0:b5:1e:5c:cc:fa:08:85:92:9f:
                    31:ec:e1:af:1c:78:bc:1e:00:85:e7:32:fe:0b:a2:
                    25:e9:fa:c3:3a:97:e1:37:1e:1f:e2:fa:41:64:c9:
                    97:c3:e6:c5:05:5a:f5:dc:2f:26:2b:1c:18:29:2f:
                    ee:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:A3:58:19:12:A8:31:A2:9C:06:8E:6E:1F:B1:70:34:02:31:67:6A
            X509v3 Authority Key Identifier:
                keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/p6NYGRKoMaKcBo5uH7FwNAIxZ2o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         7c:ba:ad:21:9f:84:5e:b4:01:0d:b0:3a:df:5c:85:f2:35:74:
         3c:39:69:e3:ba:58:f6:b0:67:21:86:0d:15:63:7b:37:38:f4:
         93:46:9f:88:6c:26:fe:ba:46:b7:7d:6c:c5:98:6c:43:13:b0:
         04:59:ec:47:1a:0e:dc:c3:d1:54:d6:d5:88:5f:99:79:b0:c4:
         ca:14:53:29:ad:3a:b1:a0:cb:4b:b2:65:f9:52:cd:a1:ae:b1:
         fb:cc:e0:8e:36:59:de:59:83:1d:5d:9d:1b:e8:c4:60:2d:1d:
         06:11:4e:e1:df:b0:13:be:b7:4f:94:e4:ff:d3:85:ba:1c:60:
         b7:36:7e:4c:b5:ba:c8:7e:6d:a1:6f:e0:59:8b:6d:3b:ac:5a:
         43:96:70:73:5f:af:0e:e5:d2:5c:5e:f1:f1:64:a5:45:fb:54:
         dd:71:67:a6:9b:e5:7f:cf:fb:2c:7c:2b:fe:75:39:d1:ff:ad:
         36:e3:d4:8c:c8:7d:7a:09:f2:dd:8b:b5:67:d9:f9:f0:54:1f:
         de:2e:fa:36:a9:a5:ed:4e:f2:a4:7d:98:14:48:53:af:6d:25:
         51:bf:97:a2:38:2a:df:fd:d3:d3:95:31:a5:30:74:cb:3b:33:
         c7:9f:c3:d3:af:29:e2:22:4d:73:d3:92:58:64:af:9e:f0:d4:
         6f:6c:29:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----