Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/45og-MskCAEaeDh7l2xxfn2S_L8.roa
File:                     45og-MskCAEaeDh7l2xxfn2S_L8.roa (raw, json)
Hash identifier:          wjAhZpyiCCTHBBj1jwTvz7MOJB1HymDMz0se4IHpxA8=
Subject key identifier:   E3:9A:20:F8:CB:24:08:01:1A:78:38:7B:97:6C:71:7E:7D:92:FC:BF
Certificate issuer:       /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial:       018F4616E637ABF3B9FB9AF55625278166BA
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/45og-MskCAEaeDh7l2xxfn2S_L8.roa
Signing time:             Sun 05 May 2024 00:10:56 +0000
ROA not before:           Sun 05 May 2024 00:10:56 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:46:16:e6:37:ab:f3:b9:fb:9a:f5:56:25:27:81:66:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
        Validity
            Not Before: May  5 00:10:56 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=e39a20f8cb2408011a78387b976c717e7d92fcbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b3:42:2b:38:07:18:f3:ae:e4:49:14:ae:37:
                    c5:23:22:59:a2:2d:6c:c7:98:62:fb:12:1a:54:cf:
                    1e:76:bd:b6:5a:14:3a:2b:10:bf:74:60:72:5f:ec:
                    d7:da:78:88:78:7a:07:30:ed:ed:fa:b3:cb:42:27:
                    65:ab:a7:46:6f:c2:6a:ee:27:02:61:81:29:08:e1:
                    68:d8:0b:17:6a:0f:64:b0:0a:ee:af:63:0e:51:8c:
                    6f:de:a7:72:1d:ee:f2:94:e3:84:7f:e5:b2:57:01:
                    8c:c3:a6:46:89:eb:b3:68:70:43:67:5b:c4:77:0d:
                    a2:24:7f:d4:1a:df:af:9c:5c:52:29:58:84:ee:24:
                    ce:92:f2:2b:29:25:38:3b:28:90:17:7f:d7:f1:d2:
                    48:a2:b5:f3:1d:59:e7:3c:78:46:dd:bc:26:e6:21:
                    76:10:dd:0d:84:a9:70:3d:e8:b3:ed:2e:5b:c5:b9:
                    a6:f8:48:8e:8a:1a:1a:30:58:05:70:97:27:3d:1e:
                    5d:21:4d:0f:ed:ee:4a:00:5e:f0:5e:27:88:35:5e:
                    6a:c1:16:f9:38:21:e8:b2:57:32:a7:6b:73:a9:cb:
                    09:66:ef:eb:30:00:0e:f1:c4:a1:6c:d0:3a:e1:0d:
                    9f:90:2e:01:3b:33:26:4a:95:f8:1b:e0:cf:8d:59:
                    43:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:9A:20:F8:CB:24:08:01:1A:78:38:7B:97:6C:71:7E:7D:92:FC:BF
            X509v3 Authority Key Identifier:
                keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/45og-MskCAEaeDh7l2xxfn2S_L8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         02:fb:5d:48:d6:06:e3:5e:07:5c:7c:b5:27:55:3e:c3:47:df:
         b8:8c:87:43:09:b6:0a:c5:ec:32:05:45:95:40:f7:ad:2f:da:
         60:ec:0a:53:49:2c:b5:d7:64:ec:be:3e:4f:18:54:76:43:d0:
         ec:3f:f7:37:c5:f0:ef:ab:01:cb:c6:bc:e8:c7:69:d7:28:e4:
         b4:4c:68:76:8b:29:10:39:0b:16:84:19:09:07:3d:3d:07:46:
         bb:56:60:36:21:6a:ad:c3:6b:7b:9b:24:15:78:cc:75:fd:9e:
         60:b5:e4:cb:0a:38:bc:39:bf:c1:ac:15:cc:3d:c1:4f:0f:3e:
         86:6d:13:f1:b2:32:87:1b:98:01:05:4f:0e:87:2f:e7:ff:e6:
         5d:b6:b3:ef:7d:22:8d:19:ad:3c:5b:91:7d:85:c4:bd:57:53:
         3b:bf:35:58:f5:47:e8:0f:a3:56:85:b3:77:ec:55:03:eb:5b:
         fd:17:b7:3c:b3:09:71:55:79:7b:b1:5e:a7:05:f6:82:a3:54:
         ec:60:cd:fe:f1:6e:56:5f:7d:f5:47:b5:3b:b7:03:9a:ba:a9:
         cf:a7:1d:5a:8c:aa:4c:63:dc:a5:0b:f8:80:4d:59:68:1e:d2:
         36:f8:5b:68:2d:fa:79:3f:67:5e:ea:13:8c:ff:79:84:b9:85:
         14:54:fa:a8
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY9GFuY3q/O5+5r1ViUngWa6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyYmVjNDFiZDJmM2IxNzlkZTA5NTE0MzA2NTMwYmQzZmJh
YzcwN2IwHhcNMjQwNTA1MDAxMDU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMzlhMjBmOGNiMjQwODAxMWE3ODM4N2I5NzZjNzE3ZTdkOTJmY2JmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrNCKzgHGPOu5EkUrjfFIyJZoi1s
x5hi+xIaVM8edr22WhQ6KxC/dGByX+zX2niIeHoHMO3t+rPLQidlq6dGb8Jq7icC
YYEpCOFo2AsXag9ksArur2MOUYxv3qdyHe7ylOOEf+WyVwGMw6ZGieuzaHBDZ1vE
dw2iJH/UGt+vnFxSKViE7iTOkvIrKSU4OyiQF3/X8dJIorXzHVnnPHhG3bwm5iF2
EN0NhKlwPeiz7S5bxbmm+EiOihoaMFgFcJcnPR5dIU0P7e5KAF7wXieINV5qwRb5
OCHoslcyp2tzqcsJZu/rMAAO8cShbNA64Q2fkC4BOzMmSpX4G+DPjVlDtQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOOaIPjLJAgBGng4e5dscX59kvy/MB8GA1UdIwQY
MBaAFLK+xBvS87F53glRQwZTC9P7rHB7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYt
ZDEyZjAzOWRiMmM5LzEvNDVvZy1Nc2tDQUVhZURoN2wyeHhmbjJTX0w4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYtZDEyZjAzOWRiMmM5
LzEvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAL7XUjWBuNeB1x8tSdV
PsNH37iMh0MJtgrF7DIFRZVA960v2mDsClNJLLXXZOy+Pk8YVHZD0Ow/9zfF8O+r
AcvGvOjHadco5LRMaHaLKRA5CxaEGQkHPT0HRrtWYDYhaq3Da3ubJBV4zHX9nmC1
5MsKOLw5v8GsFcw9wU8PPoZtE/GyMocbmAEFTw6HL+f/5l22s+99Io0ZrTxbkX2F
xL1XUzu/NVj1R+gPo1aFs3fsVQPrW/0XtzyzCXFVeXuxXqcF9oKjVOxgzf7xblZf
ffVHtTu3A5q6qc+nHVqMqkxj3KUL+IBNWWge0jb4W2gt+nk/Z17qE4z/eYS5hRRU
+qg=
-----END CERTIFICATE-----