Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/_U4OdR6Zamn3z_Z6CGzfAXZ0zFU.roa
File:                     _U4OdR6Zamn3z_Z6CGzfAXZ0zFU.roa (raw, json)
Hash identifier:          cftbgDFIPfrxJr8xrxvKsMx1eGTy+HgcMRgO64y0LwA=
Subject key identifier:   FD:4E:0E:75:1E:99:6A:69:F7:CF:F6:7A:08:6C:DF:01:76:74:CC:55
Certificate issuer:       /CN=40b132c17e598f11b6a10f42ef3bce961e18e8ef
Certificate serial:       018EE852384018EFFA7BCABD47E7D9530984
Authority key identifier: 40:B1:32:C1:7E:59:8F:11:B6:A1:0F:42:EF:3B:CE:96:1E:18:E8:EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QLEywX5ZjxG2oQ9C7zvOlh4Y6O8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/_U4OdR6Zamn3z_Z6CGzfAXZ0zFU.roa
Signing time:             Tue 16 Apr 2024 19:11:25 +0000
ROA not before:           Tue 16 Apr 2024 19:11:25 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:e8:52:38:40:18:ef:fa:7b:ca:bd:47:e7:d9:53:09:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40b132c17e598f11b6a10f42ef3bce961e18e8ef
        Validity
            Not Before: Apr 16 19:11:25 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=fd4e0e751e996a69f7cff67a086cdf017674cc55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:99:ba:11:4a:4d:b2:df:9b:d6:f3:1a:03:43:
                    46:fa:05:68:86:ab:8d:fd:01:33:35:f5:c6:06:19:
                    6d:6e:f1:ba:d6:9f:af:69:c4:7e:06:f3:c7:2e:07:
                    66:81:24:63:64:1f:c1:9a:6f:e9:3b:8c:be:de:79:
                    ab:e7:73:02:cc:8b:b7:8c:5a:f2:b3:5a:71:34:a0:
                    a5:70:b5:c7:a7:4c:d8:22:eb:1e:38:c9:0d:29:42:
                    ce:62:88:88:8d:f3:b8:9d:f1:bc:84:f5:aa:91:f4:
                    dc:b8:48:cf:32:14:34:45:c2:44:1b:04:7d:72:81:
                    98:c7:14:91:b3:52:73:c5:07:0e:37:0d:ad:40:f7:
                    73:b6:85:5e:c8:f9:bb:67:2a:81:53:cf:33:05:23:
                    3b:5f:43:a4:2a:ec:16:85:eb:ee:42:bb:8f:ed:fc:
                    99:82:d0:27:33:c9:5a:b9:8d:d9:3f:c7:87:70:e0:
                    a2:22:ce:81:16:00:0e:43:cc:f8:e7:7c:c4:6d:8d:
                    46:49:8b:e6:2a:e0:bb:67:91:b3:6c:fa:2f:51:6d:
                    14:ad:21:78:c9:14:5e:89:6c:77:13:cf:ff:e1:78:
                    fb:8c:9c:1b:6c:bd:9d:2c:f0:ee:c5:8a:ee:37:fb:
                    9f:c6:ed:25:aa:61:cb:08:46:9b:65:d2:40:8a:2e:
                    80:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:4E:0E:75:1E:99:6A:69:F7:CF:F6:7A:08:6C:DF:01:76:74:CC:55
            X509v3 Authority Key Identifier:
                keyid:40:B1:32:C1:7E:59:8F:11:B6:A1:0F:42:EF:3B:CE:96:1E:18:E8:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QLEywX5ZjxG2oQ9C7zvOlh4Y6O8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/_U4OdR6Zamn3z_Z6CGzfAXZ0zFU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/QLEywX5ZjxG2oQ9C7zvOlh4Y6O8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         8d:fb:58:ff:a7:da:ed:b8:49:e1:0a:59:5a:e1:45:56:0a:a6:
         b5:c6:bd:a3:93:14:05:1d:c9:9e:a3:82:21:0c:28:9c:80:b5:
         5b:74:72:95:f4:c4:df:8b:6c:96:d4:a7:91:f7:bf:a8:19:66:
         f0:ab:a8:b4:df:7b:1c:b4:38:5c:ce:2e:4c:8c:a3:59:a7:cc:
         68:f9:b1:48:28:91:d0:b2:bf:35:d0:2c:f9:02:61:7c:42:92:
         db:3a:d0:73:2e:e1:60:45:fc:e4:f1:fa:34:6c:15:7b:9a:86:
         5d:70:ee:ef:f3:e0:1c:80:56:6e:d4:21:fb:23:ea:fe:04:9f:
         26:0f:95:66:35:6d:b9:0d:7c:89:16:a8:60:c7:27:22:8d:e8:
         26:17:e8:b7:b2:c9:5a:4b:c7:a7:0b:7f:5f:9b:5c:ae:82:bb:
         d3:f2:92:82:0e:05:7f:52:e1:f4:35:9a:29:3f:e2:0b:8f:16:
         bf:f9:a2:40:87:b1:31:cb:55:42:a5:ba:91:29:d6:fa:f9:63:
         48:31:38:4e:94:47:91:da:b9:85:53:60:d3:2d:30:1f:ac:08:
         0b:da:18:eb:cb:8c:ed:de:fe:eb:eb:59:4f:63:d2:69:2d:b4:
         14:be:bc:dc:87:e8:9c:f7:da:75:76:bd:19:15:f7:61:42:70:
         4d:39:ea:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----