Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sQY_QjvYirB6kXwtB_1ig9Gl9j4.roa
File:                     sQY_QjvYirB6kXwtB_1ig9Gl9j4.roa (raw, json)
Hash identifier:          kWoYrd8f34ouK8FRElqvli7bquxKGbVsVz7aPWiN5kE=
Subject key identifier:   B1:06:3F:42:3B:D8:8A:B0:7A:91:7C:2D:07:FD:62:83:D1:A5:F6:3E
Certificate issuer:       /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial:       018F45E1CBB38424A5867DE5EE10F3E40D61
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sQY_QjvYirB6kXwtB_1ig9Gl9j4.roa
Signing time:             Sat 04 May 2024 23:12:56 +0000
ROA not before:           Sat 04 May 2024 23:12:56 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:45:e1:cb:b3:84:24:a5:86:7d:e5:ee:10:f3:e4:0d:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
        Validity
            Not Before: May  4 23:12:56 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=b1063f423bd88ab07a917c2d07fd6283d1a5f63e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:38:58:5f:f8:46:56:1e:4c:53:f7:f6:a3:58:
                    9d:09:a6:03:9f:f9:0c:49:c0:0d:b7:0b:bd:6e:c4:
                    34:3c:1c:64:bb:a6:84:31:f7:a5:d0:d2:35:80:76:
                    97:14:e3:7b:8f:fc:d5:eb:5e:a8:43:86:7c:28:54:
                    f5:59:a2:f6:be:c0:4f:fc:70:ce:ca:d4:87:02:1e:
                    c0:37:bc:4e:18:07:21:b9:5c:5d:92:1c:1f:68:e8:
                    5f:e2:e7:dd:06:22:5d:e5:d9:72:1b:74:c8:b6:35:
                    db:e6:41:23:8f:0b:c3:e1:87:e5:7e:5a:6b:0b:ef:
                    27:f3:37:5e:ff:c4:0a:fe:70:36:8d:9f:7f:84:b3:
                    1a:03:5c:f4:18:bc:20:6e:7f:66:1d:e4:0b:e6:79:
                    91:a5:3c:1f:b6:ba:42:d1:5d:b3:79:2d:10:03:b0:
                    56:f8:ce:63:3b:ae:b5:c1:cc:1b:00:ee:a9:ea:71:
                    02:c5:2f:df:6d:ad:81:87:67:46:bb:b8:92:72:0d:
                    c5:e9:96:32:ce:09:9f:73:06:fc:6e:de:d9:39:6b:
                    49:7f:12:71:ba:6a:2b:eb:22:29:53:e7:c4:fc:a8:
                    b6:bc:00:80:ec:90:2e:ec:3e:2a:6d:98:d0:13:1a:
                    cc:1c:0b:e9:5a:03:e3:0c:53:17:05:b9:11:8a:81:
                    d6:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:06:3F:42:3B:D8:8A:B0:7A:91:7C:2D:07:FD:62:83:D1:A5:F6:3E
            X509v3 Authority Key Identifier:
                keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sQY_QjvYirB6kXwtB_1ig9Gl9j4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         9f:fe:b0:88:6e:a4:c8:8c:9d:41:82:54:21:30:46:79:79:f0:
         04:bc:36:12:4e:3e:25:55:8b:8a:13:f2:89:3e:84:73:0d:2f:
         12:4e:66:75:09:c0:7f:0b:4e:c3:f5:c3:65:10:d8:ab:94:82:
         af:bc:0c:19:c6:1c:6d:d1:1c:dc:62:8e:2b:b3:61:af:4d:86:
         13:a4:be:cb:3d:73:39:d3:8b:25:0e:48:bd:91:05:dc:74:af:
         98:18:ed:03:08:f2:bc:99:6a:2a:da:f4:b8:97:ad:3f:7a:a2:
         41:e1:f4:60:c1:ed:fa:79:60:73:39:08:ad:5b:a2:d2:3d:85:
         42:f0:23:8c:3e:14:6e:16:14:df:ed:46:ff:3c:8d:30:2e:af:
         d2:3f:92:a2:f7:98:17:61:da:83:d4:31:64:a7:ba:ce:aa:9d:
         b4:02:b1:93:ce:df:35:51:6f:e0:ac:7c:23:3e:90:1a:72:75:
         4e:2c:d1:d7:f4:a2:fd:1b:e6:c8:12:3c:a5:1d:9e:0d:b0:34:
         ad:53:b0:b0:54:69:f6:7c:5d:d6:86:0c:2b:1f:c9:64:69:5a:
         97:93:ad:99:5f:31:18:c2:ff:0e:fa:99:fb:79:89:94:cf:16:
         c2:b4:d3:09:45:8a:33:e2:b1:4f:70:f0:20:5a:9b:71:34:6a:
         ad:aa:69:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----