Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/zTrqVQLdeybypFfXCngWwbCVLFY.roa
File:                     zTrqVQLdeybypFfXCngWwbCVLFY.roa (raw, json)
Hash identifier:          eEU5lvaHa/pjv/p1qfYPdCn+wURJtEoKDeTRGaaLhy8=
Subject key identifier:   CD:3A:EA:55:02:DD:7B:26:F2:A4:57:D7:0A:78:16:C1:B0:95:2C:56
Certificate issuer:       /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial:       018F7EF34EA4EEF7614F1F1FFA59D31C3AD5
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/zTrqVQLdeybypFfXCngWwbCVLFY.roa
Signing time:             Thu 16 May 2024 01:10:25 +0000
ROA not before:           Thu 16 May 2024 01:10:25 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:7e:f3:4e:a4:ee:f7:61:4f:1f:1f:fa:59:d3:1c:3a:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
        Validity
            Not Before: May 16 01:10:25 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=cd3aea5502dd7b26f2a457d70a7816c1b0952c56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ff:8c:95:22:b9:a3:b6:83:63:f9:9e:93:be:
                    97:34:d8:b5:1d:91:8a:9c:73:52:c5:4f:2c:67:03:
                    5d:1f:85:54:e4:1f:4f:9e:ef:83:7c:35:34:3f:30:
                    ff:5a:0d:19:fc:f5:63:3e:68:42:69:09:20:e0:59:
                    bb:01:13:84:15:79:b5:03:6c:8a:74:12:d0:66:0d:
                    61:3c:92:e6:23:af:00:32:f1:e4:41:08:d6:91:62:
                    d4:47:fc:43:53:0a:06:a2:da:d8:8f:de:d6:a5:7a:
                    e8:43:cf:92:89:07:72:f0:16:d8:e9:19:88:84:43:
                    a9:cc:06:0d:c0:13:84:93:02:16:74:92:b7:ea:9a:
                    fc:a3:b2:bd:c6:88:3c:b4:b3:59:9b:d5:de:4d:91:
                    67:5b:23:5e:f0:72:19:cf:de:b1:8a:63:17:3a:27:
                    d9:76:d9:3f:9a:eb:73:39:94:78:50:f3:57:d4:2d:
                    65:38:46:c7:c5:b6:f0:b4:c0:f8:d6:db:62:13:d3:
                    1c:c1:ef:d7:80:0d:37:bb:31:ca:f6:30:b9:02:95:
                    c0:7c:a7:96:89:da:6d:06:e4:4e:c8:aa:e7:45:19:
                    57:df:e9:45:cc:93:79:d6:db:4d:36:67:fe:8e:09:
                    8b:30:33:d4:1b:83:c3:65:00:33:c9:55:2c:07:7f:
                    9d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:3A:EA:55:02:DD:7B:26:F2:A4:57:D7:0A:78:16:C1:B0:95:2C:56
            X509v3 Authority Key Identifier:
                keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/zTrqVQLdeybypFfXCngWwbCVLFY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         57:14:e2:42:1e:77:8c:4e:4f:d0:74:a3:39:16:65:6f:05:aa:
         0b:1e:8c:d0:26:e1:47:f2:49:cd:87:96:c3:5c:e8:d6:8f:fb:
         9c:c4:96:61:07:1f:5d:5e:9d:57:3e:e8:06:bc:70:d7:77:d4:
         11:46:da:3d:83:4d:e2:8c:d1:cd:cc:42:9b:58:c4:7d:14:4d:
         3f:11:80:95:cb:b0:36:41:9e:c0:33:1e:02:c1:8c:55:1a:f7:
         52:31:69:32:be:18:5a:ef:17:a9:c8:7c:e4:fd:31:90:5f:87:
         2a:d3:1f:40:49:49:88:45:80:74:ab:9a:3a:4f:06:aa:91:b4:
         2d:34:10:53:be:1b:90:0a:ec:cc:4b:70:ba:ef:d6:27:03:23:
         2f:a4:49:d7:48:9a:a4:5e:3e:2a:db:e5:2f:99:42:1c:1f:7e:
         9c:7d:2d:82:88:fc:42:69:5e:b1:4c:30:34:42:df:67:e7:a7:
         85:d5:36:5c:e6:36:49:58:79:17:ed:d1:71:aa:83:1a:df:06:
         d6:32:8d:26:9b:cc:71:ec:b8:a0:bd:c5:b1:55:00:3b:84:7b:
         82:35:f7:7a:d6:52:42:bf:cf:10:c2:6e:59:d7:5b:92:30:4d:
         8b:71:be:86:49:2f:71:4a:ff:06:e6:7b:1e:e1:49:84:3a:0d:
         c7:c6:44:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----