Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sTmueZAENHPGKThDlJaWlRN_mzM.roa
File:                     sTmueZAENHPGKThDlJaWlRN_mzM.roa (raw, json)
Hash identifier:          0AE2w+Uno6QmXq1AtPrsZen7XgnuKWkUeDn/XTecjpE=
Subject key identifier:   B1:39:AE:79:90:04:34:73:C6:29:38:43:94:96:96:95:13:7F:9B:33
Certificate issuer:       /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial:       018F23C1619628DF00937A4773BE845CCE35
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sTmueZAENHPGKThDlJaWlRN_mzM.roa
Signing time:             Sun 28 Apr 2024 08:10:26 +0000
ROA not before:           Sun 28 Apr 2024 08:10:26 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:23:c1:61:96:28:df:00:93:7a:47:73:be:84:5c:ce:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
        Validity
            Not Before: Apr 28 08:10:26 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=b139ae7990043473c629384394969695137f9b33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:64:a1:c6:15:3b:e7:35:36:b6:c0:13:36:b5:
                    9e:59:cc:5a:81:8f:b2:9a:98:2f:dc:8e:e6:63:f2:
                    b5:a2:90:ff:fb:e5:a0:53:3e:37:cf:57:dd:39:f1:
                    21:ae:fb:07:da:79:9d:a0:2e:78:68:86:31:90:05:
                    2d:61:e9:1b:c7:db:84:41:27:4a:5b:72:24:b3:1d:
                    5d:ac:ae:e2:82:c8:ad:32:f3:dd:60:16:a3:a5:b7:
                    37:81:ad:5b:a7:b5:69:19:99:a4:33:3a:6c:3b:e2:
                    cf:e6:a7:61:d3:06:de:74:78:2b:27:fd:4c:ad:65:
                    44:92:78:83:14:de:d5:c9:63:18:19:9d:15:52:72:
                    d6:ed:cb:9b:a7:4a:7c:87:a9:70:0a:75:b7:b4:d2:
                    e2:b7:f5:ef:db:6b:47:6b:b8:ce:5b:d7:2c:30:99:
                    41:8d:05:93:7e:b9:f9:63:58:9e:4a:65:06:36:f1:
                    31:65:1a:1c:ad:57:0e:2e:eb:36:18:06:ff:94:87:
                    5d:1b:04:ea:72:8d:d3:7d:ce:45:5e:9c:b5:3d:37:
                    db:33:2b:ad:30:c0:06:6f:d9:01:5d:c0:4d:77:6f:
                    0e:85:03:7f:8a:2b:78:2a:15:e2:a6:cc:c1:f1:f0:
                    34:af:fc:62:c8:d0:8f:1a:de:f6:c0:39:22:78:c6:
                    00:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:39:AE:79:90:04:34:73:C6:29:38:43:94:96:96:95:13:7F:9B:33
            X509v3 Authority Key Identifier:
                keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sTmueZAENHPGKThDlJaWlRN_mzM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64:ffff:0:18f:543:9e41/128

    Signature Algorithm: sha256WithRSAEncryption
         a7:a2:73:93:ca:ab:67:47:d1:36:26:d4:21:b4:8f:04:03:67:
         9e:10:1e:8f:24:d9:41:de:42:68:34:0d:5b:48:8a:53:72:2f:
         0d:bf:ff:60:8e:9a:ae:dc:29:88:89:98:e8:0f:ec:e3:e7:36:
         ed:36:e9:7c:d7:4a:66:83:c8:df:e5:7f:0f:32:2f:63:e2:c9:
         b6:0d:39:7c:32:4f:03:a5:04:33:7e:8a:e9:f0:eb:f8:4e:5d:
         54:06:c2:5c:87:1e:ac:6e:e1:cc:d5:cc:a1:a0:ac:65:9c:2d:
         8b:46:26:a4:51:04:d0:ab:1b:fc:1a:c0:7b:8a:cf:18:ba:25:
         84:ca:02:54:e3:d3:10:b0:00:b5:68:e6:d9:9e:a0:d3:0d:66:
         d0:66:85:2c:ea:58:07:bb:9f:f8:eb:07:76:8d:8f:ba:52:df:
         0f:5c:42:6e:45:24:69:97:12:fb:79:49:04:97:bf:73:90:62:
         91:61:b0:05:23:87:0c:f3:d3:b3:8f:31:11:21:f0:50:d9:2c:
         ea:0f:f5:78:8b:57:b0:2b:a0:1c:bb:cf:34:b5:e6:ea:44:54:
         64:cd:84:d4:03:2f:b5:31:f7:8d:a5:4d:47:c2:d5:e0:cc:99:
         ab:27:b0:6a:17:59:02:b8:de:67:82:21:d8:67:da:87:cc:69:
         74:ee:13:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----