Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/xdx7lSxF9v8_LrB5Qeg_BCVg6W8.roa
File:                     xdx7lSxF9v8_LrB5Qeg_BCVg6W8.roa (raw, json)
Hash identifier:          MsEiyZwgJ5Y5Hqbh5656NXc67Q5qLSTAT+LMSsFX6YU=
Subject key identifier:   C5:DC:7B:95:2C:45:F6:FF:3F:2E:B0:79:41:E8:3F:04:25:60:E9:6F
Certificate issuer:       /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial:       018F56D564D74B46825363DB5ED8854DF13A
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/xdx7lSxF9v8_LrB5Qeg_BCVg6W8.roa
Signing time:             Wed 08 May 2024 06:12:56 +0000
ROA not before:           Wed 08 May 2024 06:12:56 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:56:d5:64:d7:4b:46:82:53:63:db:5e:d8:85:4d:f1:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
        Validity
            Not Before: May  8 06:12:56 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=c5dc7b952c45f6ff3f2eb07941e83f042560e96f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e1:c6:35:f2:7f:1c:3c:c4:87:c9:e0:b8:cd:
                    21:07:18:5c:d3:3c:57:43:3b:52:e1:b2:3a:e7:a4:
                    c3:c4:dc:3a:7e:b7:1c:88:ca:a5:8f:c4:01:cd:9c:
                    83:99:13:82:21:00:d3:3b:3f:6f:d9:06:b8:c3:3c:
                    5b:3a:0d:5a:71:72:dd:38:2d:7d:2a:56:80:38:03:
                    26:64:b7:de:c9:48:90:8a:a2:57:84:5c:cb:c9:72:
                    5e:d9:30:6b:03:34:ca:40:40:60:04:6c:14:36:91:
                    47:31:0e:2c:e3:ee:77:72:e2:da:1a:c6:79:6d:52:
                    11:d8:fc:53:1b:0d:88:88:17:26:64:c4:ac:5b:fe:
                    0e:16:d9:52:37:47:1a:77:67:bf:e9:66:40:73:a2:
                    32:df:e1:ef:b4:06:cd:b6:35:98:1f:47:7e:d1:b1:
                    63:d6:d8:3a:5e:2c:55:62:6f:c0:80:1a:e4:45:37:
                    52:8f:f3:b0:7a:d2:26:20:c8:f9:e8:24:01:86:ea:
                    5b:dc:6c:b0:83:c4:3e:16:ad:e8:65:52:ec:f3:c6:
                    0f:47:ef:eb:91:a3:25:63:39:21:50:54:f4:85:ed:
                    e8:b8:be:ba:2b:01:7f:c1:31:e6:f8:be:6c:5e:f2:
                    93:9f:ae:7d:f7:9e:5d:e6:20:5f:80:60:c4:2b:de:
                    77:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:DC:7B:95:2C:45:F6:FF:3F:2E:B0:79:41:E8:3F:04:25:60:E9:6F
            X509v3 Authority Key Identifier:
                keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/xdx7lSxF9v8_LrB5Qeg_BCVg6W8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         cf:2f:5e:f6:56:ae:c7:84:0c:c9:7d:df:85:fa:58:5b:1c:be:
         b2:5b:eb:5c:57:cb:9d:d3:dc:9e:7e:8f:d2:fd:f9:9a:19:60:
         1f:76:a2:97:49:9f:24:de:4b:0c:63:59:c4:f5:a2:77:f9:49:
         27:f9:98:54:c2:91:7a:e2:c3:5f:83:cc:a2:25:55:95:4b:b1:
         14:15:cc:1b:3f:58:73:ef:ef:3a:70:13:43:73:f2:b4:6a:47:
         7b:9a:d6:94:c7:9c:b6:e6:0b:51:43:6b:00:a0:d2:60:40:00:
         4e:6d:48:c6:21:92:b0:40:23:e0:38:ab:0d:25:90:59:6b:7a:
         dc:66:45:f8:49:26:16:a5:71:f2:5c:7f:e4:2e:9f:cc:62:c5:
         70:4f:65:d2:40:51:bb:52:68:14:2e:d6:ce:5b:88:ad:18:94:
         9e:96:75:c7:ca:e8:84:ad:f7:81:0c:4c:e4:9e:e8:5a:6d:bc:
         e9:c5:e3:ed:33:be:0d:17:39:67:ed:68:e8:bc:47:5c:0c:0a:
         38:ba:77:90:bb:75:e3:74:ad:44:99:5c:c9:41:68:9f:e9:d5:
         4c:fc:84:d3:68:5e:52:3b:04:ec:58:15:67:da:34:93:29:72:
         a2:7a:af:dc:4f:e2:c8:de:e5:2f:f5:58:c6:3f:08:23:cf:62:
         1f:63:63:1a
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY9W1WTXS0aCU2PbXtiFTfE6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyYmVjNDFiZDJmM2IxNzlkZTA5NTE0MzA2NTMwYmQzZmJh
YzcwN2IwHhcNMjQwNTA4MDYxMjU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNWRjN2I5NTJjNDVmNmZmM2YyZWIwNzk0MWU4M2YwNDI1NjBlOTZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxeHGNfJ/HDzEh8nguM0hBxhc0zxX
QztS4bI656TDxNw6frcciMqlj8QBzZyDmROCIQDTOz9v2Qa4wzxbOg1acXLdOC19
KlaAOAMmZLfeyUiQiqJXhFzLyXJe2TBrAzTKQEBgBGwUNpFHMQ4s4+53cuLaGsZ5
bVIR2PxTGw2IiBcmZMSsW/4OFtlSN0cad2e/6WZAc6Iy3+HvtAbNtjWYH0d+0bFj
1tg6XixVYm/AgBrkRTdSj/OwetImIMj56CQBhupb3Gywg8Q+Fq3oZVLs88YPR+/r
kaMlYzkhUFT0he3ouL66KwF/wTHm+L5sXvKTn659955d5iBfgGDEK953wwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMXce5UsRfb/Py6weUHoPwQlYOlvMB8GA1UdIwQY
MBaAFLK+xBvS87F53glRQwZTC9P7rHB7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYt
ZDEyZjAzOWRiMmM5LzEveGR4N2xTeEY5djhfTHJCNVFlZ19CQ1ZnNlc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYtZDEyZjAzOWRiMmM5
LzEvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAM8vXvZWrseEDMl934X6
WFscvrJb61xXy53T3J5+j9L9+ZoZYB92opdJnyTeSwxjWcT1onf5SSf5mFTCkXri
w1+DzKIlVZVLsRQVzBs/WHPv7zpwE0Nz8rRqR3ua1pTHnLbmC1FDawCg0mBAAE5t
SMYhkrBAI+A4qw0lkFlretxmRfhJJhalcfJcf+Qun8xixXBPZdJAUbtSaBQu1s5b
iK0YlJ6WdcfK6ISt94EMTOSe6FptvOnF4+0zvg0XOWftaOi8R1wMCji6d5C7deN0
rUSZXMlBaJ/p1Uz8hNNoXlI7BOxYFWfaNJMpcqJ6r9xP4sje5S/1WMY/CCPPYh9j
Yxo=
-----END CERTIFICATE-----