Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/tSEPsLI-W-12EwfXDI41KQKU3ME.roa
File:                     tSEPsLI-W-12EwfXDI41KQKU3ME.roa (raw, json)
Hash identifier:          Scl41jlKb0OhZ8mW/y3eZELHCT9K1MG5maOfb7BFJQk=
Subject key identifier:   B5:21:0F:B0:B2:3E:5B:ED:76:13:07:D7:0C:8E:35:29:02:94:DC:C1
Certificate issuer:       /CN=40b132c17e598f11b6a10f42ef3bce961e18e8ef
Certificate serial:       018EEDAF81A06042C3303C8CA0EBAABB6E31
Authority key identifier: 40:B1:32:C1:7E:59:8F:11:B6:A1:0F:42:EF:3B:CE:96:1E:18:E8:EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QLEywX5ZjxG2oQ9C7zvOlh4Y6O8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/tSEPsLI-W-12EwfXDI41KQKU3ME.roa
Signing time:             Wed 17 Apr 2024 20:11:25 +0000
ROA not before:           Wed 17 Apr 2024 20:11:25 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:ed:af:81:a0:60:42:c3:30:3c:8c:a0:eb:aa:bb:6e:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40b132c17e598f11b6a10f42ef3bce961e18e8ef
        Validity
            Not Before: Apr 17 20:11:25 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=b5210fb0b23e5bed761307d70c8e35290294dcc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:e7:b0:5f:7c:9a:bc:0e:ae:fd:7e:26:1a:6f:
                    b7:cb:a1:87:1f:88:d7:36:81:b2:cd:e3:91:e6:f1:
                    81:0a:c3:20:98:89:ce:77:92:68:ad:51:68:f9:11:
                    99:7b:5a:dd:05:2e:2b:89:b6:85:a8:fc:40:bd:a3:
                    6c:2f:16:be:a5:62:09:14:e8:f8:1b:92:9f:c9:99:
                    9f:00:11:0d:eb:d7:a6:21:5b:6e:f7:5d:49:4a:3b:
                    e4:6c:d2:db:27:97:f4:c8:22:cd:24:55:82:9b:e0:
                    d3:50:93:dd:4e:31:8c:f4:ab:2c:64:04:f2:37:ed:
                    8b:59:99:ea:62:b1:e5:f2:ad:bf:44:04:86:a3:5a:
                    50:73:e1:cf:45:60:2e:88:cb:27:f9:36:50:50:e0:
                    db:3c:0f:9a:24:78:39:6d:d2:bb:e4:e4:54:33:75:
                    51:7f:6b:7d:bd:1f:00:a9:93:c1:5e:1e:ad:6b:dd:
                    52:4b:01:fe:61:5a:9e:a3:00:51:3e:f9:a7:b4:45:
                    39:d7:99:8b:fb:e1:e9:80:9f:2f:b7:07:5e:85:b2:
                    6d:43:a9:61:95:6b:17:19:41:0c:8d:68:d7:69:c9:
                    84:4d:3c:8a:50:bb:8a:87:2f:79:10:fd:f9:b5:6c:
                    14:a9:8b:0d:87:d3:e9:b6:b3:1c:83:53:9e:ef:10:
                    bf:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:21:0F:B0:B2:3E:5B:ED:76:13:07:D7:0C:8E:35:29:02:94:DC:C1
            X509v3 Authority Key Identifier:
                keyid:40:B1:32:C1:7E:59:8F:11:B6:A1:0F:42:EF:3B:CE:96:1E:18:E8:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QLEywX5ZjxG2oQ9C7zvOlh4Y6O8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/tSEPsLI-W-12EwfXDI41KQKU3ME.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/QLEywX5ZjxG2oQ9C7zvOlh4Y6O8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         16:55:4f:37:92:5f:52:f6:c8:c2:8f:5f:60:50:ea:95:d8:da:
         1d:79:f4:57:d5:f7:18:61:59:01:9e:5f:af:99:60:53:a9:da:
         5a:88:43:ef:c6:21:7d:17:60:0a:3d:8f:f9:8a:cc:50:45:b2:
         23:57:de:ef:5a:82:29:fd:f5:1a:11:05:04:a7:99:6e:15:d6:
         a2:6c:32:e0:61:60:bd:3b:65:74:e3:b6:17:91:d0:23:53:c5:
         a7:0d:4e:10:03:a2:4b:36:94:0e:26:5e:2d:6f:d3:c8:1a:e9:
         a1:30:be:97:0e:ec:b5:7e:0a:9c:a7:aa:4c:27:ce:a8:41:54:
         14:b8:26:c2:56:e6:3b:83:79:f4:fe:dc:f5:69:e2:63:b2:09:
         70:45:47:38:bb:b3:49:3d:61:2c:13:9c:5c:38:2e:a5:f1:76:
         0e:0b:80:6c:9c:35:b4:4c:fa:42:83:78:92:28:29:4e:f7:5d:
         9e:4b:ae:9f:cb:20:18:1a:21:4c:9d:d2:ed:4b:72:7a:36:af:
         6f:44:07:e7:92:e5:ce:84:29:6d:a1:97:43:0f:6d:d1:07:71:
         75:5d:69:20:8b:62:ac:51:76:fb:1c:35:4e:01:b5:88:68:19:
         09:0e:7e:8c:28:bb:82:b5:ac:25:18:3d:94:54:37:8a:d9:fb:
         6f:dc:5b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----