Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/7ZqGHqY5PiSGSrB8uVmlGafUK5g.roa
File:                     7ZqGHqY5PiSGSrB8uVmlGafUK5g.roa (raw, json)
Hash identifier:          SI+qboc+4xlQTaUWvNdsRzaaf1+tyEeN4LySZYGdM/4=
Subject key identifier:   ED:9A:86:1E:A6:39:3E:24:86:4A:B0:7C:B9:59:A5:19:A7:D4:2B:98
Certificate issuer:       /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial:       018F8BCE4E2BBA6497F20A2C9FCD53FE81E8
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/7ZqGHqY5PiSGSrB8uVmlGafUK5g.roa
Signing time:             Sat 18 May 2024 13:05:04 +0000
ROA not before:           Sat 18 May 2024 13:05:04 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18f:8bcd:8679/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8b:ce:4e:2b:ba:64:97:f2:0a:2c:9f:cd:53:fe:81:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
        Validity
            Not Before: May 18 13:05:04 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=ed9a861ea6393e24864ab07cb959a519a7d42b98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5b:bc:ec:ce:db:9f:73:d6:eb:4c:86:25:09:
                    34:a4:ac:7a:25:fe:34:10:f2:8c:f6:c4:14:e7:ed:
                    e6:d5:43:c6:47:1c:e2:10:27:4d:08:9c:f4:a3:6c:
                    06:68:72:7b:ea:11:72:ee:92:e7:19:55:65:86:88:
                    ae:2d:2e:f2:a5:30:c6:76:ec:a2:c0:19:ce:b9:e6:
                    31:6c:9e:fd:13:ee:9a:39:18:28:fe:fa:5b:36:5e:
                    b5:50:30:8d:bc:4c:1e:b0:44:36:a2:6c:3f:9b:6e:
                    f4:82:0a:43:36:7a:ee:1b:ae:3c:1f:4f:66:c9:ce:
                    bb:3b:84:58:b1:47:e9:8c:fc:b7:b2:90:bd:b0:e7:
                    37:85:9f:e2:56:43:ad:bd:d8:7a:d0:eb:9a:a4:80:
                    38:9c:8e:d6:6c:c6:61:62:10:d1:d2:5e:5c:ac:97:
                    43:da:42:5b:29:74:7a:fb:dd:81:d6:55:6f:75:a6:
                    88:1b:5c:89:de:50:c2:22:2e:5f:09:7e:26:d3:86:
                    e5:3c:2e:05:25:0d:a9:55:37:7a:65:fc:cb:a7:e0:
                    6f:91:89:05:08:1d:3d:f2:4f:31:54:61:e7:50:06:
                    e8:b0:d1:7c:7e:f7:ce:28:29:c7:44:92:d7:5e:83:
                    8c:42:e0:7f:6a:7e:d4:7d:be:93:79:3c:66:3d:71:
                    c1:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:9A:86:1E:A6:39:3E:24:86:4A:B0:7C:B9:59:A5:19:A7:D4:2B:98
            X509v3 Authority Key Identifier:
                keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/7ZqGHqY5PiSGSrB8uVmlGafUK5g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         79:2e:6d:4c:aa:b5:7a:a3:95:fe:3b:8f:63:4a:92:3b:c9:62:
         2c:8a:25:14:14:23:b0:a0:2a:6d:64:08:5d:f2:84:06:a9:5d:
         42:b8:c3:dc:8f:4b:f8:b0:c7:da:38:cf:86:7a:87:67:f6:98:
         f8:ae:38:d7:8a:4e:eb:6c:36:4a:49:b3:7a:fc:fa:df:9f:b8:
         85:f0:30:43:77:61:8f:20:dd:9c:58:d3:24:20:27:ab:e4:d6:
         e1:de:91:1c:1c:2d:7f:03:1e:3c:ef:b7:4d:ff:b0:41:95:1e:
         00:d7:d2:6d:89:2d:19:f0:6a:45:0c:6d:68:50:9e:d0:8f:d1:
         5a:4f:b2:f8:f6:38:0d:91:a5:bd:20:24:94:c4:bb:a2:0f:0f:
         87:42:14:90:36:f6:13:dd:23:7b:ea:31:8c:00:a1:46:81:7a:
         fd:dc:88:23:f5:9f:ff:a2:10:b7:16:23:e1:f8:03:b7:09:58:
         83:7b:9b:3c:a4:31:d8:42:f3:31:c7:2b:86:8c:45:08:e0:bc:
         48:c5:9c:1b:8f:86:2f:1d:37:4c:14:eb:72:1d:e1:bf:d9:d4:
         ab:83:e1:a4:cc:d3:ab:1a:17:ff:33:14:6b:32:ed:fd:eb:69:
         b3:5a:dc:f7:7e:c6:8a:4e:f6:31:10:93:9a:7f:4b:ae:c2:26:
         0e:71:26:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----