Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/W-x1RqQVWgaRFZAfvgA3J77h0xM.roa
File:                     W-x1RqQVWgaRFZAfvgA3J77h0xM.roa (raw, json)
Hash identifier:          79ku2nHSz9TCP4MXr8RGwOP0+CYYg32NkPUYU8hpsRI=
Subject key identifier:   5B:EC:75:46:A4:15:5A:06:91:15:90:1F:BE:00:37:27:BE:E1:D3:13
Certificate issuer:       /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial:       018F4917F060954C8C1070B0737ADC78895E
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/W-x1RqQVWgaRFZAfvgA3J77h0xM.roa
Signing time:             Sun 05 May 2024 14:10:56 +0000
ROA not before:           Sun 05 May 2024 14:10:56 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:49:17:f0:60:95:4c:8c:10:70:b0:73:7a:dc:78:89:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
        Validity
            Not Before: May  5 14:10:56 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=5bec7546a4155a069115901fbe003727bee1d313
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4d:1f:a6:d0:71:8d:ec:77:b4:78:13:cd:68:
                    52:ac:18:01:3f:d5:17:c5:30:c9:65:22:d3:41:f9:
                    a2:64:70:3b:a3:59:ad:0c:32:b7:ae:d4:0f:d4:91:
                    a9:50:ea:67:d1:30:0e:e1:19:ac:4b:0c:89:3b:0c:
                    60:b8:6e:3d:4d:6c:89:ff:68:f9:cc:9f:29:b7:29:
                    35:07:70:4d:11:9e:b5:07:6c:23:ce:d5:3d:04:da:
                    61:61:c7:0c:ff:2f:ea:78:8e:2c:1b:c7:d7:06:7a:
                    f8:ba:95:ef:a5:99:62:3c:be:f1:15:11:83:14:06:
                    dd:4a:74:c5:92:40:d8:7b:fa:26:68:7e:df:2d:3c:
                    40:fb:0c:49:09:fd:56:e2:0f:43:1f:86:11:89:e1:
                    06:7a:e5:b0:5b:0a:e1:c6:59:36:e9:53:4e:28:d2:
                    a3:2a:39:8d:ad:87:bc:56:d3:98:a5:bc:d0:df:4f:
                    85:56:eb:c5:87:0f:c4:19:73:e7:10:74:e1:66:96:
                    77:43:e7:25:8c:af:52:8d:b1:59:73:8e:c0:c5:d4:
                    e5:94:05:35:59:b1:1b:32:22:5c:dd:f0:38:15:15:
                    5c:d6:e8:53:2e:8e:b6:a9:20:3c:5a:51:1d:ea:b4:
                    a6:d1:38:f0:8b:27:dd:f8:77:cf:cf:d3:79:1a:35:
                    8c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:EC:75:46:A4:15:5A:06:91:15:90:1F:BE:00:37:27:BE:E1:D3:13
            X509v3 Authority Key Identifier:
                keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/W-x1RqQVWgaRFZAfvgA3J77h0xM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         58:71:56:39:e1:d6:62:fc:4f:22:85:88:b5:02:68:6c:54:a4:
         bd:73:ba:e2:b9:d2:d5:4e:38:9b:c0:37:55:9c:2c:c0:c1:5c:
         78:b1:e7:f7:83:cb:e0:25:4f:bb:87:9a:10:82:21:15:dc:19:
         bf:81:41:2a:69:b0:70:3f:bb:9f:ba:ac:1d:d2:55:09:d4:7f:
         7a:22:a3:5a:97:7d:d3:2e:1c:5c:1f:7c:95:63:94:a5:79:50:
         b8:d7:12:2f:ed:51:16:97:14:1d:ab:87:75:9f:4a:6b:42:0c:
         59:79:0d:f9:9f:7f:ef:bb:31:ad:40:a7:97:67:a7:b5:f2:e6:
         a6:41:51:ad:e6:79:84:11:f3:2e:46:f2:f2:f8:30:cf:99:f2:
         ff:48:2f:3b:a1:77:d8:66:7f:2c:46:e5:32:29:e9:75:e8:62:
         a0:b0:42:94:c5:c5:24:07:20:1b:fe:71:9b:a0:ab:ab:02:d6:
         f2:bd:8e:02:47:c4:04:9b:34:2d:7b:a5:eb:fc:f4:02:ef:4f:
         28:72:eb:f3:f2:f0:b4:fd:ea:b7:20:31:37:f7:b8:07:ee:c6:
         ae:08:d2:c1:e1:f1:48:1a:a9:4e:1c:b6:2d:d4:99:01:86:5c:
         cc:14:68:2b:55:af:d9:59:ba:8e:7d:e5:8e:96:80:7b:c6:75:
         83:a3:a1:a6
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY9JF/BglUyMEHCwc3rceIleMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyYmVjNDFiZDJmM2IxNzlkZTA5NTE0MzA2NTMwYmQzZmJh
YzcwN2IwHhcNMjQwNTA1MTQxMDU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YmVjNzU0NmE0MTU1YTA2OTExNTkwMWZiZTAwMzcyN2JlZTFkMzEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv00fptBxjex3tHgTzWhSrBgBP9UX
xTDJZSLTQfmiZHA7o1mtDDK3rtQP1JGpUOpn0TAO4RmsSwyJOwxguG49TWyJ/2j5
zJ8ptyk1B3BNEZ61B2wjztU9BNphYccM/y/qeI4sG8fXBnr4upXvpZliPL7xFRGD
FAbdSnTFkkDYe/omaH7fLTxA+wxJCf1W4g9DH4YRieEGeuWwWwrhxlk26VNOKNKj
KjmNrYe8VtOYpbzQ30+FVuvFhw/EGXPnEHThZpZ3Q+cljK9SjbFZc47AxdTllAU1
WbEbMiJc3fA4FRVc1uhTLo62qSA8WlEd6rSm0Tjwiyfd+HfPz9N5GjWMSwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFvsdUakFVoGkRWQH74ANye+4dMTMB8GA1UdIwQY
MBaAFLK+xBvS87F53glRQwZTC9P7rHB7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYt
ZDEyZjAzOWRiMmM5LzEvVy14MVJxUVZXZ2FSRlpBZnZnQTNKNzdoMHhNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYtZDEyZjAzOWRiMmM5
LzEvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFhxVjnh1mL8TyKFiLUC
aGxUpL1zuuK50tVOOJvAN1WcLMDBXHix5/eDy+AlT7uHmhCCIRXcGb+BQSppsHA/
u5+6rB3SVQnUf3oio1qXfdMuHFwffJVjlKV5ULjXEi/tURaXFB2rh3WfSmtCDFl5
Dfmff++7Ma1Ap5dnp7Xy5qZBUa3meYQR8y5G8vL4MM+Z8v9ILzuhd9hmfyxG5TIp
6XXoYqCwQpTFxSQHIBv+cZugq6sC1vK9jgJHxASbNC17pev89ALvTyhy6/Py8LT9
6rcgMTf3uAfuxq4I0sHh8UgaqU4cti3UmQGGXMwUaCtVr9lZuo595Y6WgHvGdYOj
oaY=
-----END CERTIFICATE-----