Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/DFduSotsnrx0w4WqEkj66UTVQC4.roa
File:                     DFduSotsnrx0w4WqEkj66UTVQC4.roa (raw, json)
Hash identifier:          JUK09LHaSmqnr5wTCVhPGfi4R2Egr+bi1zQaSS7VmrU=
Subject key identifier:   0C:57:6E:4A:8B:6C:9E:BC:74:C3:85:AA:12:48:FA:E9:44:D5:40:2E
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018AA45C0AB8F8286CAC2A5ADF335CE72D96
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/DFduSotsnrx0w4WqEkj66UTVQC4.roa
Signing time:             Sun 17 Sep 2023 18:16:50 +0000
ROA not before:           Sun 17 Sep 2023 18:16:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:a4:5c:0a:b8:f8:28:6c:ac:2a:5a:df:33:5c:e7:2d:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep 17 18:16:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0c576e4a8b6c9ebc74c385aa1248fae944d5402e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7f:ae:36:6a:f1:1f:e0:29:da:ff:36:a3:c9:
                    73:71:fb:54:fd:ae:e8:4e:b6:93:58:cf:f8:c2:75:
                    4a:e0:74:bf:b5:35:88:cf:b8:59:38:19:ad:34:aa:
                    63:69:6f:af:50:14:64:7d:6b:05:93:ba:de:c8:3a:
                    52:89:4e:b3:c5:bf:bf:57:85:b4:50:f6:18:ac:a4:
                    13:c2:cc:14:23:8e:75:48:c8:58:73:ec:e0:c9:c2:
                    9e:9e:d9:2e:e6:cb:65:cf:cd:ff:a8:3e:c1:d6:3b:
                    35:20:26:cd:a1:61:e8:45:bd:65:5c:46:fd:41:2c:
                    a5:a4:70:1e:f6:cc:ad:eb:59:eb:db:a9:d8:23:05:
                    4f:f8:b6:ec:29:6f:0c:a5:44:81:73:cb:8a:40:b5:
                    42:46:f0:38:2c:49:62:23:e0:7d:fb:97:c7:18:56:
                    43:ec:0e:08:49:fd:a3:05:51:48:5f:55:d7:d9:6f:
                    0d:fe:ec:81:5e:52:11:1c:53:64:8a:1d:49:2d:07:
                    70:c7:19:09:b8:fa:a7:2f:a6:ef:ec:16:60:9e:e4:
                    21:f9:b9:18:58:67:30:a8:89:1e:71:60:6c:07:c8:
                    c1:6e:6e:19:b9:71:3f:03:b5:fd:c3:49:06:a3:8d:
                    65:0c:ea:f2:f1:a1:7e:c5:99:3f:48:fb:fb:ad:4b:
                    cb:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:57:6E:4A:8B:6C:9E:BC:74:C3:85:AA:12:48:FA:E9:44:D5:40:2E
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/DFduSotsnrx0w4WqEkj66UTVQC4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         a0:48:6f:d9:bb:6a:13:f5:81:14:01:0a:10:29:7a:90:46:27:
         43:96:11:3a:2a:2c:96:ec:7c:14:35:d3:ef:95:ec:d5:53:06:
         e1:69:37:67:40:57:13:87:2b:57:53:ef:40:f7:2d:9a:f3:21:
         34:32:b8:a7:d9:38:68:64:67:43:6b:c2:e3:1c:d5:cc:a8:44:
         62:af:7c:72:03:eb:e9:f2:54:e0:bb:e4:9f:20:56:67:fb:93:
         e2:aa:1d:64:fc:72:6c:c1:9b:2c:6a:c1:ab:45:a4:a4:9d:ef:
         0d:7e:39:d5:7f:b0:44:83:95:e9:84:24:bd:9a:9b:a3:69:37:
         9e:3b:49:dc:2d:bc:74:b2:53:19:b7:a5:6a:a9:9a:49:8a:b4:
         26:30:d5:20:85:c8:df:47:1f:56:de:ca:ea:4c:0d:ca:6c:35:
         c4:9d:b5:7b:8a:7a:e7:f6:e0:c9:ef:b9:f2:85:59:ce:e0:d4:
         7b:7a:f4:0f:dd:e3:73:e4:e9:03:43:b8:69:b5:f1:05:19:06:
         db:58:9c:d8:bd:2d:fd:9c:08:15:64:2d:ef:fc:95:56:58:28:
         0a:ef:b3:10:bf:14:d9:29:46:eb:cc:29:5a:88:ac:b0:02:cf:
         ce:79:14:6a:de:d7:aa:7a:1d:3c:2a:f7:62:fe:e3:f3:98:58:
         d9:06:08:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----