Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/6US349cb-jiuB1JkpvHFX5Ozu-0.roa
File:                     6US349cb-jiuB1JkpvHFX5Ozu-0.roa (raw, json)
Hash identifier:          FL6bkXcBz0m4TeaNll2jPTKRIFqrUPFTgcTRIU+hf6U=
Subject key identifier:   E9:44:B7:E3:D7:1B:FA:38:AE:07:52:64:A6:F1:C5:5F:93:B3:BB:ED
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A92521F72AFAC596517CB399384874228
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/6US349cb-jiuB1JkpvHFX5Ozu-0.roa
Signing time:             Thu 14 Sep 2023 06:12:50 +0000
ROA not before:           Thu 14 Sep 2023 06:12:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:92:52:1f:72:af:ac:59:65:17:cb:39:93:84:87:42:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep 14 06:12:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e944b7e3d71bfa38ae075264a6f1c55f93b3bbed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b5:a7:75:61:a7:8c:29:8c:ca:58:ee:19:10:
                    3e:53:89:44:41:d7:ef:6c:23:be:6a:a4:f5:dc:f6:
                    d9:25:48:53:24:59:00:94:1a:04:66:3b:b9:1d:08:
                    67:bd:c0:db:fe:98:02:74:6a:ca:ba:bb:f6:9c:43:
                    67:a8:20:f6:c2:ed:69:e1:bc:42:bf:50:4f:4a:6b:
                    b7:a5:cb:80:84:56:70:f5:3e:1c:5c:47:05:00:ec:
                    3b:1e:eb:65:61:91:a7:ba:a9:0d:f4:6c:27:32:8d:
                    08:c2:7c:4f:20:89:26:2c:d3:e5:70:a7:6f:65:99:
                    57:31:48:7c:bd:b4:1c:91:4d:8e:14:3b:22:b1:33:
                    93:e5:22:49:60:ea:76:f3:be:45:68:06:ac:5e:94:
                    31:8b:4a:92:d6:a8:3f:12:3e:b6:96:a1:55:51:ec:
                    e4:f6:b9:0e:62:9e:58:f3:eb:ec:da:6c:a4:17:bb:
                    cc:75:14:70:35:b4:af:c0:8b:8c:bd:cb:6e:d5:97:
                    9d:35:d4:c1:18:40:e3:ce:7b:27:a6:ae:8d:4f:28:
                    b1:cb:3f:a5:ce:0c:58:7c:8d:0b:df:07:00:55:48:
                    df:6e:0d:ce:26:78:2a:f9:5b:c1:25:4a:66:6c:5e:
                    88:20:d2:33:54:ad:f6:54:ba:08:85:15:df:1f:90:
                    8d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:44:B7:E3:D7:1B:FA:38:AE:07:52:64:A6:F1:C5:5F:93:B3:BB:ED
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/6US349cb-jiuB1JkpvHFX5Ozu-0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         9a:9b:18:0d:c3:57:1b:f9:c6:30:77:e7:32:da:0d:30:e5:b9:
         ff:2a:38:f7:60:bc:f0:09:66:99:12:d2:f2:42:36:31:9b:d1:
         75:61:49:81:d7:4b:6b:1d:4e:bf:06:cd:3e:3a:81:8b:da:c7:
         f5:d7:2b:c7:b4:96:f1:18:7d:be:3a:5c:a7:35:fa:6c:9e:71:
         4d:44:c2:a9:b6:f3:bd:9d:10:1c:f2:ac:5c:04:43:03:60:0a:
         f4:b8:11:e2:9b:b3:4f:5a:81:9c:76:7e:6e:63:a7:cc:c9:25:
         2c:7d:48:eb:d1:43:6a:9d:05:79:90:7c:90:c9:45:23:ed:ea:
         72:9b:73:87:6e:ee:03:06:57:5a:11:58:ab:2d:30:ed:a7:e1:
         85:50:9a:7e:55:c7:29:d0:26:0a:9f:43:2d:a9:d3:20:b3:25:
         b1:92:8b:96:f0:c9:9e:bc:c9:02:24:f0:6a:fd:f8:18:9c:09:
         f1:b1:d9:19:b4:48:74:ca:4d:64:a3:12:97:6b:f9:46:2d:ea:
         05:39:0e:e4:56:38:5f:4a:63:90:e5:4b:b1:c7:be:9c:a1:f2:
         a0:c2:0e:4b:ae:f8:48:4b:b7:4e:6c:42:00:55:71:56:ef:26:
         07:91:6e:c7:85:5e:02:17:47:8c:54:d5:1f:96:77:9f:65:f9:
         a6:39:d7:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----