Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/669hLXDJEfS9J7083l1HiQnEoBk.roa
File:                     669hLXDJEfS9J7083l1HiQnEoBk.roa (raw, json)
Hash identifier:          mJw+sGxGlMIcTsT1580mhCjAuXDBzA1DQ5BTcZc+xHs=
Subject key identifier:   EB:AF:61:2D:70:C9:11:F4:BD:27:BD:3C:DE:5D:47:89:09:C4:A0:19
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A4EC407F8E2CF50081E5E1A27FF2DE9E2
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/669hLXDJEfS9J7083l1HiQnEoBk.roa
Signing time:             Fri 01 Sep 2023 03:23:04 +0000
ROA not before:           Fri 01 Sep 2023 03:23:04 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:4e:c4:07:f8:e2:cf:50:08:1e:5e:1a:27:ff:2d:e9:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep  1 03:23:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ebaf612d70c911f4bd27bd3cde5d478909c4a019
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:00:a8:03:59:71:cb:08:43:87:86:bb:dc:2a:
                    bc:21:81:09:31:df:43:48:71:3d:af:62:b7:e6:26:
                    b3:1e:75:35:b4:37:db:09:ab:c4:f8:18:68:0d:1c:
                    5d:ec:b6:89:c0:a9:d9:5a:d7:f0:ef:d0:f2:fa:99:
                    64:2e:24:36:bd:ff:b6:b2:14:54:0a:c6:10:9e:b7:
                    98:23:06:00:67:94:82:7f:57:21:a3:c3:c5:80:a8:
                    ca:eb:94:b8:97:60:19:19:e4:50:a7:2f:e9:7c:57:
                    ff:af:43:a6:72:ff:6f:31:35:1b:0c:43:84:9b:69:
                    aa:5b:09:d9:dc:9b:f9:a6:b1:33:f1:39:f6:b6:c5:
                    bb:57:3c:78:41:e3:d4:77:6f:83:2b:17:27:c4:2a:
                    b5:51:70:0d:ba:c7:6d:92:48:b1:57:7f:8e:dd:9a:
                    58:2f:ae:03:a8:12:1f:90:f6:b6:a9:1f:94:fc:95:
                    73:02:3e:ff:83:c3:c1:83:ac:aa:d2:fb:ff:ce:6d:
                    0e:4d:b1:31:33:d6:b2:b2:c0:05:e2:0d:fe:27:ce:
                    fc:ab:cc:d6:e5:af:d5:9d:a0:54:78:91:bb:5d:8c:
                    7b:22:ae:b3:cc:23:d5:1f:1e:39:b6:4d:c9:08:b6:
                    e6:c0:c7:b0:38:29:62:91:75:bb:bf:91:ab:88:21:
                    6f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:AF:61:2D:70:C9:11:F4:BD:27:BD:3C:DE:5D:47:89:09:C4:A0:19
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/669hLXDJEfS9J7083l1HiQnEoBk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         82:3b:47:73:67:ce:05:ee:17:7d:8a:2e:75:de:b0:bc:fc:be:
         37:56:0a:3d:54:ac:35:6e:5c:bb:4a:94:02:cb:a9:5c:b5:2b:
         8e:9e:3a:af:b6:cb:87:d3:17:25:06:3a:a6:27:34:4d:7c:82:
         55:bf:b5:b5:17:6d:bb:7b:a0:03:2f:93:e6:38:98:1a:fa:94:
         a5:18:7d:40:31:d9:89:df:dc:e4:1f:ac:d4:d1:cf:f0:33:16:
         10:b3:fa:24:93:37:a7:5d:e3:07:6a:ab:7d:1f:ab:94:e8:27:
         8d:e8:44:ee:bd:a3:bf:5b:5d:0f:19:86:ee:b6:fd:cf:e7:84:
         62:df:bb:c0:03:f9:e9:9c:b3:ac:c8:54:b8:0d:d1:34:0a:cd:
         3e:fc:a3:bc:8f:84:dd:0b:df:bf:0a:27:da:bc:76:c9:62:dd:
         76:4f:10:b8:a6:2a:7e:61:45:ef:d7:6c:64:bc:58:2c:cd:80:
         a4:f1:2f:5f:ca:d2:01:dc:84:c9:25:68:2e:c8:5a:91:25:12:
         a5:14:df:7c:b2:c6:72:83:6c:c6:1d:05:c8:54:c4:75:12:17:
         92:61:4f:32:cd:d2:49:a3:9a:76:69:b0:52:ea:98:d3:71:58:
         79:0b:05:60:cf:2c:00:db:10:58:3b:05:6e:8d:1c:fe:5b:10:
         88:ba:6d:10
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYpOxAf44s9QCB5eGif/LeniMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMWYxNGM4NTA3NDVhN2MzMTJlYTJlYjBiZTAzMDUyZTQ5
NjcyNzUwHhcNMjMwOTAxMDMyMzA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYmFmNjEyZDcwYzkxMWY0YmQyN2JkM2NkZTVkNDc4OTA5YzRhMDE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgCoA1lxywhDh4a73Cq8IYEJMd9D
SHE9r2K35iazHnU1tDfbCavE+BhoDRxd7LaJwKnZWtfw79Dy+plkLiQ2vf+2shRU
CsYQnreYIwYAZ5SCf1cho8PFgKjK65S4l2AZGeRQpy/pfFf/r0Omcv9vMTUbDEOE
m2mqWwnZ3Jv5prEz8Tn2tsW7Vzx4QePUd2+DKxcnxCq1UXANusdtkkixV3+O3ZpY
L64DqBIfkPa2qR+U/JVzAj7/g8PBg6yq0vv/zm0OTbExM9ayssAF4g3+J878q8zW
5a/VnaBUeJG7XYx7Iq6zzCPVHx45tk3JCLbmwMewOClikXW7v5GriCFvqwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOuvYS1wyRH0vSe9PN5dR4kJxKAZMB8GA1UdIwQY
MBaAFKofFMhQdFp8MS6i6wvgMFLklnJ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQt
ODNmY2QyMjU0ODJhLzEvNjY5aExYREpFZlM5SjcwODNsMUhpUW5Fb0JrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQtODNmY2QyMjU0ODJh
LzEvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAII7R3NnzgXuF32KLnXe
sLz8vjdWCj1UrDVuXLtKlALLqVy1K46eOq+2y4fTFyUGOqYnNE18glW/tbUXbbt7
oAMvk+Y4mBr6lKUYfUAx2Ynf3OQfrNTRz/AzFhCz+iSTN6dd4wdqq30fq5ToJ43o
RO69o79bXQ8Zhu62/c/nhGLfu8AD+emcs6zIVLgN0TQKzT78o7yPhN0L378KJ9q8
dsli3XZPELimKn5hRe/XbGS8WCzNgKTxL1/K0gHchMklaC7IWpElEqUU33yyxnKD
bMYdBchUxHUSF5JhTzLN0kmjmnZpsFLqmNNxWHkLBWDPLADbEFg7BW6NHP5bEIi6
bRA=
-----END CERTIFICATE-----