Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/kcQ8XRPD5j9WNA2cwS-cuqOC6OI.roa
File:                     kcQ8XRPD5j9WNA2cwS-cuqOC6OI.roa (raw, json)
Hash identifier:          sy6fyxs0G9iAyx7MrHIY9oX0hQeAcCEzfC9TkbnssRc=
Subject key identifier:   91:C4:3C:5D:13:C3:E6:3F:56:34:0D:9C:C1:2F:9C:BA:A3:82:E8:E2
Certificate issuer:       /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial:       018F74DE7086F25F054B2B7A0849BF953D76
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/kcQ8XRPD5j9WNA2cwS-cuqOC6OI.roa
Signing time:             Tue 14 May 2024 02:11:25 +0000
ROA not before:           Tue 14 May 2024 02:11:25 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:74:de:70:86:f2:5f:05:4b:2b:7a:08:49:bf:95:3d:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
        Validity
            Not Before: May 14 02:11:25 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=91c43c5d13c3e63f56340d9cc12f9cbaa382e8e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e0:de:3d:90:9b:4d:b5:a0:27:6d:3c:f4:f6:
                    a3:b1:5d:e7:e8:54:d7:c9:72:82:a4:21:1f:1d:29:
                    49:1f:e1:f4:99:33:f8:95:99:f0:40:a6:db:4e:04:
                    3a:3e:1b:47:d1:63:de:23:88:92:2b:5e:ca:6c:b6:
                    21:f4:b4:c9:73:37:be:dc:be:6f:b4:35:38:26:d1:
                    7d:c6:2b:28:c5:bf:cd:08:73:2f:47:be:43:7a:9b:
                    cd:6b:f0:5d:dc:61:8c:03:d4:03:05:b4:f2:4b:7a:
                    24:61:dd:a2:94:c8:b3:1c:a9:b9:6d:da:d2:5f:0c:
                    3e:70:e8:d7:9d:2c:d1:5b:5e:d6:1d:b2:91:39:00:
                    05:23:20:f0:d7:0e:76:e3:d1:e9:2e:8e:a2:6f:33:
                    b4:99:9c:e9:ad:ab:eb:9b:d0:db:b0:24:6a:8b:ea:
                    45:ea:c4:91:a5:3c:36:6c:5b:cb:e5:b1:b8:ac:62:
                    8e:92:e5:b7:a8:3f:61:a6:32:f3:c5:b2:e1:53:58:
                    2e:5d:34:a6:3a:b5:a3:b6:04:e1:45:ad:0f:24:7b:
                    4a:2f:66:f0:e1:8f:8f:f8:cc:ac:14:06:fd:e3:74:
                    8e:a6:4e:a0:96:a8:ba:f5:40:d7:b2:9c:e6:3a:e7:
                    9d:86:1d:d9:51:0c:d8:b4:c7:3f:3f:df:f3:10:97:
                    13:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:C4:3C:5D:13:C3:E6:3F:56:34:0D:9C:C1:2F:9C:BA:A3:82:E8:E2
            X509v3 Authority Key Identifier:
                keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/kcQ8XRPD5j9WNA2cwS-cuqOC6OI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         44:9e:21:6d:70:11:ca:eb:40:a1:4d:d0:c2:41:d5:42:8d:18:
         fa:3a:5e:0e:3a:df:d1:68:79:5d:45:35:38:ac:42:b9:73:b6:
         6a:16:07:96:a6:10:92:f6:52:7f:83:a5:f5:b4:07:98:e3:77:
         3e:16:2a:4f:a5:6e:d7:62:ff:8c:87:37:98:16:9b:da:c1:a6:
         13:a3:9e:06:35:6c:6a:21:73:b6:63:37:0a:1b:3f:e0:ee:22:
         0a:36:c2:58:93:59:23:d9:cb:47:79:71:e2:bd:aa:ef:66:94:
         97:ff:52:f6:b2:6d:06:37:c7:e3:65:b1:ba:9f:09:a2:9e:7f:
         b3:0e:f0:ba:8b:e2:c5:07:17:b0:04:5e:2a:2f:2a:6f:e2:8c:
         df:7b:f9:18:0b:4a:f9:b1:9e:ee:5a:78:d2:90:ea:9f:f3:97:
         1c:28:ae:de:af:85:22:45:40:ea:97:82:f0:d7:87:d1:04:e6:
         89:88:0e:a2:81:e2:dd:30:8f:36:88:f2:17:4a:9d:1c:f0:f2:
         10:36:31:b1:1b:7c:51:ca:af:8a:6a:58:b6:6a:42:78:50:ba:
         53:58:08:b5:9e:b2:38:d6:29:f8:5c:19:47:84:32:05:c9:74:
         f9:14:2d:65:9b:64:ca:6b:73:e1:ac:de:06:ad:1e:bd:b7:19:
         12:3a:6d:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----