Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/wUb1x6xkkoaTRr8PjnkqXWFi1fs.roa
File:                     wUb1x6xkkoaTRr8PjnkqXWFi1fs.roa (raw, json)
Hash identifier:          uNkHQuQf/PAOYgyRE4M9mv9VYHzTTNRu+tMpvdd7T6Y=
Subject key identifier:   C1:46:F5:C7:AC:64:92:86:93:46:BF:0F:8E:79:2A:5D:61:62:D5:FB
Certificate issuer:       /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial:       018F4014D02E6837A64E410B91FE98AD0E00
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/wUb1x6xkkoaTRr8PjnkqXWFi1fs.roa
Signing time:             Fri 03 May 2024 20:10:56 +0000
ROA not before:           Fri 03 May 2024 20:10:56 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:40:14:d0:2e:68:37:a6:4e:41:0b:91:fe:98:ad:0e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
        Validity
            Not Before: May  3 20:10:56 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=c146f5c7ac6492869346bf0f8e792a5d6162d5fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:2b:93:61:ea:c7:74:6b:d2:93:0d:fe:39:72:
                    24:35:a5:92:7f:4b:59:50:eb:86:af:63:f5:63:e6:
                    15:c0:b1:b0:ab:46:cf:d2:17:05:fc:af:3b:98:c3:
                    1f:e1:72:0b:c6:a9:fa:b0:5c:6a:57:06:6d:a4:70:
                    62:1e:69:6a:66:f9:ce:3f:26:4c:c9:96:61:32:50:
                    3b:d5:60:ad:77:43:34:04:33:8f:49:72:90:15:fa:
                    1b:29:3e:4c:c4:5d:00:c6:7c:57:bc:7c:c8:2a:4b:
                    e0:a9:b3:a8:ff:7b:2d:6f:4a:c3:f1:29:ee:88:bb:
                    fa:d3:cd:56:fa:04:2c:b5:9a:5f:cb:46:85:91:53:
                    c1:a3:8e:cc:45:9f:f8:07:5b:d7:43:d2:10:41:2c:
                    f3:98:d9:91:ab:2d:7e:5f:87:ab:c6:9e:f0:f7:ad:
                    58:a5:a0:d0:9e:e4:3b:6c:03:3f:c4:63:5c:3c:70:
                    c4:af:4a:0f:02:fd:a4:e7:73:2f:0b:91:11:12:c9:
                    e1:4b:24:92:35:4c:dd:35:8a:a6:5f:8f:59:5b:d5:
                    f0:86:4f:6a:d3:11:bf:73:9e:50:27:93:66:31:a6:
                    de:de:a5:54:4a:16:d0:5c:54:70:4b:28:be:8a:b9:
                    29:05:a5:58:5f:39:d7:fa:6f:a6:02:5f:46:6b:c5:
                    71:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:46:F5:C7:AC:64:92:86:93:46:BF:0F:8E:79:2A:5D:61:62:D5:FB
            X509v3 Authority Key Identifier:
                keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/wUb1x6xkkoaTRr8PjnkqXWFi1fs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         82:77:ae:f5:4f:f6:3b:f1:9d:c8:75:18:85:92:67:9a:99:fe:
         5e:46:98:54:e6:13:ee:34:fd:29:4f:1e:57:9a:22:a0:25:92:
         8c:2e:22:27:e9:d9:cc:bd:3c:39:db:40:8f:4f:39:b1:65:e2:
         56:2b:ad:b2:f2:2c:b8:fb:b8:a6:23:92:35:b3:97:38:9f:0f:
         1c:22:bf:1b:ca:14:da:99:f9:a9:a8:bb:df:7e:b4:e2:c0:de:
         06:d7:58:76:78:3e:9b:be:68:6e:f8:d0:3f:67:9b:7c:dc:e3:
         9a:ad:56:07:96:d3:94:90:e9:72:15:4a:1d:ce:37:4d:fa:4f:
         13:6a:41:91:5e:62:42:f3:22:1f:56:dc:e0:73:6c:8e:4a:b6:
         0d:bd:44:2d:16:6b:3f:20:3f:63:5c:fe:93:05:cf:8d:b4:6e:
         85:56:f2:00:4f:a6:fb:96:16:0b:02:3a:69:36:a0:9f:88:2e:
         1e:00:3d:64:6f:d4:b5:4e:35:4a:20:d3:39:23:b9:07:eb:52:
         63:c8:60:ab:94:76:b5:5c:30:df:41:96:a7:ee:80:f9:df:d8:
         75:5e:9e:c4:ad:43:59:9f:6f:59:36:3e:75:e0:6d:a4:b8:dc:
         16:a1:3c:fc:f0:77:af:75:4d:8e:22:06:58:4c:b8:ca:81:c5:
         67:9a:49:18
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY9AFNAuaDemTkELkf6YrQ4AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyYmVjNDFiZDJmM2IxNzlkZTA5NTE0MzA2NTMwYmQzZmJh
YzcwN2IwHhcNMjQwNTAzMjAxMDU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMTQ2ZjVjN2FjNjQ5Mjg2OTM0NmJmMGY4ZTc5MmE1ZDYxNjJkNWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCuTYerHdGvSkw3+OXIkNaWSf0tZ
UOuGr2P1Y+YVwLGwq0bP0hcF/K87mMMf4XILxqn6sFxqVwZtpHBiHmlqZvnOPyZM
yZZhMlA71WCtd0M0BDOPSXKQFfobKT5MxF0AxnxXvHzIKkvgqbOo/3stb0rD8Snu
iLv6081W+gQstZpfy0aFkVPBo47MRZ/4B1vXQ9IQQSzzmNmRqy1+X4erxp7w961Y
paDQnuQ7bAM/xGNcPHDEr0oPAv2k53MvC5EREsnhSySSNUzdNYqmX49ZW9Xwhk9q
0xG/c55QJ5NmMabe3qVUShbQXFRwSyi+irkpBaVYXznX+m+mAl9Ga8Vx2QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMFG9cesZJKGk0a/D455Kl1hYtX7MB8GA1UdIwQY
MBaAFLK+xBvS87F53glRQwZTC9P7rHB7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYt
ZDEyZjAzOWRiMmM5LzEvd1ViMXg2eGtrb2FUUnI4UGpua3FYV0ZpMWZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYtZDEyZjAzOWRiMmM5
LzEvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIJ3rvVP9jvxnch1GIWS
Z5qZ/l5GmFTmE+40/SlPHleaIqAlkowuIifp2cy9PDnbQI9PObFl4lYrrbLyLLj7
uKYjkjWzlzifDxwivxvKFNqZ+amou99+tOLA3gbXWHZ4Ppu+aG740D9nm3zc45qt
VgeW05SQ6XIVSh3ON036TxNqQZFeYkLzIh9W3OBzbI5Ktg29RC0Waz8gP2Nc/pMF
z420boVW8gBPpvuWFgsCOmk2oJ+ILh4APWRv1LVONUog0zkjuQfrUmPIYKuUdrVc
MN9BlqfugPnf2HVensStQ1mfb1k2PnXgbaS43BahPPzwd691TY4iBlhMuMqBxWea
SRg=
-----END CERTIFICATE-----