Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/IsewwaudWL-rBrvCMw_XL50xn9I.roa
File:                     IsewwaudWL-rBrvCMw_XL50xn9I.roa (raw, json)
Hash identifier:          OrBEm4whhOEswC9C+zGTRw/jeKp6b9djsec+IeMhoaA=
Subject key identifier:   22:C7:B0:C1:AB:9D:58:BF:AB:06:BB:C2:33:0F:D7:2F:9D:31:9F:D2
Certificate issuer:       /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial:       018F15CE9D0AE455A866570C2EF0CB6F892A
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/IsewwaudWL-rBrvCMw_XL50xn9I.roa
Signing time:             Thu 25 Apr 2024 15:10:13 +0000
ROA not before:           Thu 25 Apr 2024 15:10:13 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:15:ce:9d:0a:e4:55:a8:66:57:0c:2e:f0:cb:6f:89:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
        Validity
            Not Before: Apr 25 15:10:13 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=22c7b0c1ab9d58bfab06bbc2330fd72f9d319fd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:96:f6:01:25:b1:ce:07:ae:b3:ee:ed:58:af:
                    9c:4c:43:8f:22:7f:33:38:63:53:8c:68:ff:15:ef:
                    b1:29:d8:da:d9:ec:76:00:21:94:79:16:99:8a:b5:
                    fb:ce:96:1a:50:37:60:23:42:39:ff:00:86:e2:2f:
                    eb:93:97:64:57:74:67:5d:7a:f7:e4:a2:27:d2:2b:
                    f3:99:34:b7:24:0f:ba:8b:60:72:ae:cf:d8:fd:b3:
                    83:7a:45:97:a5:a3:b1:40:de:c7:bf:60:9c:c7:d6:
                    ae:33:df:26:44:6e:a9:47:d7:37:12:d1:dc:59:8d:
                    84:15:63:48:6a:1a:54:f6:40:04:7b:1e:36:8a:0d:
                    93:ad:e2:8e:66:f8:af:c5:c0:83:7b:ab:b4:38:b0:
                    6b:c3:ec:68:01:4a:50:4e:f4:5e:c4:67:8f:55:f8:
                    3e:df:76:3e:2d:1f:94:9e:74:95:92:c0:b1:d3:4f:
                    f8:e6:88:1f:5d:d2:9f:6a:b2:0f:d8:b5:1a:4d:3a:
                    98:9e:ab:6c:47:0e:17:eb:81:2a:a0:a6:99:7f:a9:
                    be:bb:38:35:e6:9d:31:b8:87:de:55:c4:2c:0a:40:
                    b1:d7:0f:16:7e:ad:2b:98:a0:be:d1:8c:3b:51:cf:
                    73:8c:a2:43:01:c7:df:8e:28:d5:97:7d:d1:e2:36:
                    2b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:C7:B0:C1:AB:9D:58:BF:AB:06:BB:C2:33:0F:D7:2F:9D:31:9F:D2
            X509v3 Authority Key Identifier:
                keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/IsewwaudWL-rBrvCMw_XL50xn9I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64:ffff:0:18f:543:9e41/128

    Signature Algorithm: sha256WithRSAEncryption
         b1:09:c2:09:ca:9c:32:93:46:b0:16:f3:8f:e4:6c:1f:25:59:
         e5:51:75:f7:ce:0a:6b:b5:d1:1e:0d:21:5f:5b:58:77:04:25:
         c3:44:79:03:01:22:22:2d:84:39:03:21:3b:3a:38:4d:93:47:
         26:25:f7:9d:aa:95:eb:10:2b:dc:4c:2d:7c:31:03:09:d5:fb:
         2f:d0:62:97:e0:67:5b:e6:74:4a:3d:65:28:50:38:b4:1e:63:
         7d:e3:42:85:ff:4f:62:d3:97:87:83:0f:4d:9b:f9:99:fd:39:
         0e:8e:61:4a:65:eb:ef:94:2c:4b:4a:d6:98:d3:75:19:03:37:
         92:9b:38:cf:c8:ce:5f:96:6a:26:49:45:36:a3:a4:d0:27:82:
         9d:f2:b4:90:5f:25:42:46:b7:42:d0:16:f5:68:c5:d5:3c:b8:
         59:2a:bd:36:4a:89:77:ce:d2:e5:b3:87:ee:fd:a8:f8:60:5a:
         0c:78:1d:11:ac:46:74:06:e7:74:e7:71:fb:25:3a:c2:dd:1d:
         db:2c:7c:fe:c8:09:c7:e8:57:40:02:d7:15:5c:b7:bb:b3:64:
         63:24:5e:48:35:db:58:4e:9c:cd:96:66:d2:9f:06:90:7e:d5:
         58:42:ba:48:43:db:de:c3:24:1c:88:ac:cd:08:ec:18:48:e0:
         69:d4:32:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----