Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/Aw8JrN5elIeJIn0OtMSk5WYegyM.roa
File:                     Aw8JrN5elIeJIn0OtMSk5WYegyM.roa (raw, json)
Hash identifier:          p4WY129M/9bGlmIhnZGeYJyyiLcXtmc+2hs0DHv/R+c=
Subject key identifier:   03:0F:09:AC:DE:5E:94:87:89:22:7D:0E:B4:C4:A4:E5:66:1E:83:23
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A6D2BAFE502BF4C557571DEA049DF204E
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/Aw8JrN5elIeJIn0OtMSk5WYegyM.roa
Signing time:             Thu 07 Sep 2023 01:04:54 +0000
ROA not before:           Thu 07 Sep 2023 01:04:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18a:6d2b:70d/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:6d:2b:af:e5:02:bf:4c:55:75:71:de:a0:49:df:20:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep  7 01:04:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=030f09acde5e948789227d0eb4c4a4e5661e8323
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:fa:46:e8:f7:fd:99:1d:78:2e:f1:0f:97:1f:
                    61:99:c9:50:7a:94:44:74:07:56:7e:92:cc:31:09:
                    5f:cf:96:4a:98:29:01:f8:2e:9a:5b:20:de:84:d1:
                    68:32:16:24:79:88:a7:e8:95:ba:84:49:bd:4c:43:
                    ef:8c:0b:eb:32:1d:c5:cb:3b:21:b5:52:dc:93:ed:
                    8e:ce:02:fe:9c:d9:5b:e0:ab:bf:c6:f5:97:72:d6:
                    97:ca:f0:cc:e4:04:12:7d:f9:3f:4d:b6:9d:3f:59:
                    fa:9b:ef:87:45:a4:7b:dd:d6:1f:d3:8e:a8:ca:42:
                    a2:2d:54:b5:49:dc:47:11:df:c3:da:51:2b:61:c4:
                    5a:c7:9c:40:23:59:2f:d5:be:a8:67:54:f1:5e:14:
                    aa:34:c9:68:b2:42:7f:b7:b1:19:da:9b:69:a6:8d:
                    45:bf:78:50:55:ad:de:02:db:a9:66:06:3b:76:f4:
                    c5:c3:87:ee:e5:c6:80:3f:00:25:ee:fa:dd:ce:d7:
                    78:83:84:0f:0d:48:fa:52:9b:d3:74:54:2f:47:f5:
                    1c:b1:61:4d:7d:8b:57:1a:ff:1d:74:c6:a0:83:65:
                    7f:8c:87:7c:81:b3:c7:66:6f:1d:f4:f5:53:74:15:
                    62:ee:37:af:30:78:1f:81:58:22:e9:ce:e8:ff:c1:
                    41:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:0F:09:AC:DE:5E:94:87:89:22:7D:0E:B4:C4:A4:E5:66:1E:83:23
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/Aw8JrN5elIeJIn0OtMSk5WYegyM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         12:8d:33:1c:d6:12:21:fb:a5:89:01:f8:0d:81:e2:4b:dc:8e:
         4b:8d:f6:23:86:a5:23:b1:20:4d:3c:d8:03:48:61:dd:cb:32:
         79:ad:91:c4:b7:89:4a:33:00:4d:78:52:8a:54:8a:e1:9a:db:
         80:3f:f7:23:6d:e5:c3:c4:6e:d4:25:b8:2a:05:2a:71:a2:b3:
         41:34:fe:a4:18:2c:82:0a:ef:f5:22:1d:74:e2:fb:bc:83:4f:
         ab:90:d8:cc:3d:ed:06:06:38:00:ad:f5:1c:bb:4d:3c:1b:4a:
         3c:07:ec:a8:9d:6e:d4:cd:47:07:8f:6d:80:ec:a4:46:f6:0b:
         1c:d9:cb:13:64:6b:2d:b1:c4:c0:a5:c8:c5:e1:af:70:78:53:
         93:96:d0:d3:0c:b3:32:e2:af:d9:43:69:53:ce:65:fc:2b:97:
         d5:cd:e7:b7:d4:14:20:26:94:a9:a5:5b:6c:15:68:82:a5:c1:
         01:9e:43:6e:81:40:d6:a2:7c:44:1c:ae:cd:ec:cc:c5:fe:a8:
         1d:ae:c3:ce:d0:f3:e3:ea:e9:85:e0:c4:af:06:aa:42:20:6c:
         3a:8f:fe:f8:63:4d:e5:1d:5f:96:87:b0:4b:89:bf:e3:93:7a:
         13:86:44:e7:08:02:37:92:d9:44:5a:f9:78:01:c7:d2:52:18:
         f9:60:e5:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----