Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/wE65KAKHbQFaLR52VI0g6Gw6stI.roa
File:                     wE65KAKHbQFaLR52VI0g6Gw6stI.roa (raw, json)
Hash identifier:          1rYR9oUwZwiiRn1bfV7ENx+fQG8jToce9Oqay/vwZe8=
Subject key identifier:   C0:4E:B9:28:02:87:6D:01:5A:2D:1E:76:54:8D:20:E8:6C:3A:B2:D2
Certificate issuer:       /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial:       018F89E56A47136566B3B0565D149C0260C1
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/wE65KAKHbQFaLR52VI0g6Gw6stI.roa
Signing time:             Sat 18 May 2024 04:11:04 +0000
ROA not before:           Sat 18 May 2024 04:11:04 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:e5:6a:47:13:65:66:b3:b0:56:5d:14:9c:02:60:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
        Validity
            Not Before: May 18 04:11:04 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=c04eb92802876d015a2d1e76548d20e86c3ab2d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e4:84:1a:e4:0e:07:ec:6f:d7:f7:ce:f8:2c:
                    f9:c0:f7:27:57:b8:7c:4f:d1:b4:e4:de:08:9b:14:
                    ef:8b:6f:af:ca:25:5e:a9:21:04:97:29:51:4c:fd:
                    0d:02:64:57:e3:df:1f:a9:c9:55:00:69:7f:ff:8d:
                    0a:65:2f:c8:68:bd:ee:5b:9a:04:3a:93:9c:91:ab:
                    b2:e9:97:4b:74:94:89:03:c2:cd:f0:09:3e:79:0d:
                    97:ed:5d:6f:43:f0:5f:1d:92:65:8d:11:6c:26:e5:
                    9f:41:eb:c4:af:48:fb:5e:13:4e:24:f6:70:f1:b6:
                    e0:8c:f2:5c:a9:de:b0:05:7c:c7:32:13:d1:3f:44:
                    6d:19:c2:c4:f5:29:cc:1a:b5:5c:db:0a:41:c9:73:
                    9f:74:b6:55:93:b8:b6:c5:c3:2a:4a:59:f1:17:9b:
                    54:66:3d:33:c8:bb:2d:bb:b7:dc:20:01:60:18:e9:
                    ff:a2:da:e2:93:11:98:b8:3b:b2:e6:37:91:e8:eb:
                    8e:4d:15:30:5f:8e:27:79:27:53:59:60:2c:37:5b:
                    6c:95:4e:a6:9a:13:7a:2e:85:8a:df:48:f7:25:a8:
                    75:37:d6:11:30:2d:b8:68:a0:f0:45:6c:3c:dd:ae:
                    19:68:f0:88:31:cd:14:3b:c7:c8:1e:30:6c:13:60:
                    45:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:4E:B9:28:02:87:6D:01:5A:2D:1E:76:54:8D:20:E8:6C:3A:B2:D2
            X509v3 Authority Key Identifier:
                keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/wE65KAKHbQFaLR52VI0g6Gw6stI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         b6:79:89:a3:1a:54:ff:03:7d:f6:85:5c:e3:7f:c4:70:ec:e2:
         c3:24:16:5d:5e:b9:b4:50:b4:60:28:99:63:40:1d:57:47:56:
         d6:0d:44:b6:4a:48:70:f8:3b:c5:80:de:b9:66:73:b3:2c:81:
         eb:26:65:17:07:82:c2:e3:82:b5:ef:5a:ee:0e:ee:e0:18:52:
         29:30:a6:89:8c:82:11:6b:f7:c8:1f:fe:eb:e9:64:1e:d1:f4:
         88:b3:80:ee:94:3f:c4:51:8c:8c:19:8d:2b:2a:b5:0e:b1:3d:
         3d:58:6c:4c:0a:e5:9c:f8:09:f1:6b:0f:e7:c4:dd:54:af:e1:
         cd:32:49:2b:9c:3c:77:1b:ce:76:85:2e:98:41:b3:a7:62:bc:
         71:16:3f:20:9f:c5:52:c6:00:c9:02:cf:57:26:69:87:d2:88:
         c6:0a:5a:8d:2a:72:30:22:55:70:13:5d:da:ee:78:0a:e2:a3:
         d9:14:03:bf:26:fb:80:b7:3f:33:65:f8:90:a1:42:ab:d9:bd:
         1d:2c:2c:3f:06:6e:4b:e6:11:bd:38:e1:61:0d:69:e9:6d:b8:
         99:e1:f0:cb:9b:99:c5:39:15:23:e8:14:50:77:bd:c9:c9:43:
         19:bd:f3:6d:9c:dd:b0:12:b3:1f:c6:45:db:1d:f4:20:4a:47:
         1b:43:65:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----