Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/DrMiCCJTmt84pSiAZ9efrZpQz6Y.roa
File:                     DrMiCCJTmt84pSiAZ9efrZpQz6Y.roa (raw, json)
Hash identifier:          GAeVvtNxCof/Gla3iN5WSNi+4NKTY2Fa6RpTEB0DuOM=
Subject key identifier:   0E:B3:22:08:22:53:9A:DF:38:A5:28:80:67:D7:9F:AD:9A:50:CF:A6
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A4E5197448B37789E3CC2F9D274886990
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/DrMiCCJTmt84pSiAZ9efrZpQz6Y.roa
Signing time:             Fri 01 Sep 2023 01:18:04 +0000
ROA not before:           Fri 01 Sep 2023 01:18:04 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:4e:51:97:44:8b:37:78:9e:3c:c2:f9:d2:74:88:69:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep  1 01:18:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0eb3220822539adf38a5288067d79fad9a50cfa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:07:b2:d8:c5:d2:cc:80:ee:f7:53:a4:99:ba:
                    8f:52:13:60:79:7d:8b:43:44:44:da:a7:8b:f6:44:
                    37:3d:63:ee:7c:7b:1e:dc:d1:0f:58:b8:7f:6c:f5:
                    76:6e:51:bd:90:ac:28:aa:6b:13:53:c9:e0:9e:a3:
                    1d:67:6f:bc:b9:3e:4e:5f:fd:7c:e9:7c:f6:88:9a:
                    61:dc:dd:17:03:a2:f3:4a:bd:1a:a6:6e:72:04:d3:
                    08:af:7f:02:a7:27:fb:43:58:35:d0:0c:33:9c:af:
                    3e:06:db:e4:7f:4b:58:10:d2:84:9f:12:df:04:6d:
                    ae:dc:97:13:4e:8d:6b:91:3c:cd:8b:bf:d3:00:1e:
                    f3:66:f9:5a:14:b7:a8:27:8a:fe:74:33:bf:57:b4:
                    64:9b:02:67:43:26:eb:3c:49:c3:ed:37:68:78:44:
                    d3:5b:9f:dd:9f:c3:bb:b6:71:4e:70:47:4e:34:5b:
                    7c:60:a0:7e:55:f5:d7:a9:b5:16:d8:f6:b6:e8:b6:
                    61:69:29:fe:4a:cb:f3:cc:77:31:a5:c8:fd:f3:75:
                    fd:58:fd:fb:ee:a0:83:80:88:2d:f0:60:7d:08:67:
                    c1:d9:ff:65:46:47:17:7d:e2:4a:10:be:75:77:d6:
                    b7:7e:c6:e6:b4:f6:91:2f:82:68:ff:70:dd:6e:5e:
                    7e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:B3:22:08:22:53:9A:DF:38:A5:28:80:67:D7:9F:AD:9A:50:CF:A6
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/DrMiCCJTmt84pSiAZ9efrZpQz6Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         81:42:2d:bc:85:7d:06:00:71:45:e0:ef:02:1e:34:08:56:95:
         bb:2e:eb:f8:68:45:97:1b:fa:3e:b1:e7:63:c2:08:5a:a1:8b:
         42:f7:79:cc:84:36:9d:4d:8e:1e:f9:a2:49:8e:98:51:ae:9c:
         4e:9f:92:bc:78:9c:ae:ff:53:34:3f:ca:01:a5:fe:6b:9a:ba:
         32:e3:bf:03:e8:0b:fc:20:ac:76:51:d5:aa:94:11:ea:f3:90:
         e8:2c:40:c8:38:e5:df:9c:30:98:80:27:97:df:04:20:16:bf:
         3f:28:36:14:19:cc:76:a9:19:60:56:77:71:10:35:4c:ee:c7:
         f6:c7:3d:fc:2e:93:98:8a:39:09:e7:f1:f7:cf:74:6c:e2:e9:
         4f:44:85:78:49:2b:e6:b3:94:63:b2:93:74:25:e4:0f:29:93:
         f0:4d:9f:dd:ae:c6:00:ad:a9:36:be:01:2d:16:9b:1d:5b:c6:
         33:46:23:6c:67:8a:1c:01:3e:69:01:f3:61:73:30:20:e7:b1:
         68:88:d7:51:5f:99:5f:73:19:21:fa:7f:3e:d1:5c:5c:03:73:
         ed:ac:e6:42:7a:4e:84:a0:52:98:98:67:20:ef:72:e6:61:9a:
         00:1d:93:a4:d6:18:20:24:76:2e:30:e4:6c:48:df:5b:49:bd:
         e6:41:90:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----