Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/Gcg00_Ok5W1PyJei2rpQLlJEltM.roa
File:                     Gcg00_Ok5W1PyJei2rpQLlJEltM.roa (raw, json)
Hash identifier:          W0mSjFJB7LWEWTGwnnXhYBExGjvQAoPqp1bB7pKUeCs=
Subject key identifier:   19:C8:34:D3:F3:A4:E5:6D:4F:C8:97:A2:DA:BA:50:2E:52:44:96:D3
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A69FF8D834A5618FD7CA132836BBF08B3
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/Gcg00_Ok5W1PyJei2rpQLlJEltM.roa
Signing time:             Wed 06 Sep 2023 10:17:49 +0000
ROA not before:           Wed 06 Sep 2023 10:17:49 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:69:ff:8d:83:4a:56:18:fd:7c:a1:32:83:6b:bf:08:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep  6 10:17:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=19c834d3f3a4e56d4fc897a2daba502e524496d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:fc:05:4e:80:db:fa:ff:dc:77:10:a2:47:11:
                    8e:79:74:69:2a:f1:07:8e:b1:dc:38:49:9a:e0:0f:
                    c5:8e:9e:1b:ae:d3:5e:01:e8:bc:85:ee:81:95:5d:
                    48:ca:73:e1:79:ea:eb:33:92:72:f0:e1:04:8d:20:
                    27:09:66:45:af:40:90:9b:61:36:d6:02:bb:e0:9e:
                    7b:91:45:1d:d9:5d:52:c2:3e:90:a8:39:15:21:11:
                    e0:dc:8b:3a:79:d7:79:b0:57:78:33:05:ee:fa:ed:
                    19:a5:30:a1:cc:af:d6:25:42:a2:fb:be:2a:26:62:
                    1c:f1:2e:3a:b7:f6:b6:b8:2b:75:18:41:0c:67:70:
                    a4:9c:0b:18:f1:59:2e:ca:6c:2f:0f:9e:0d:8a:31:
                    ce:eb:49:f9:69:be:60:03:78:a2:99:72:86:31:00:
                    d7:47:68:9b:58:8b:94:ab:39:18:33:cf:32:9b:26:
                    46:01:e0:26:f4:d2:dc:99:2e:c9:2c:69:e6:00:31:
                    59:a8:14:48:6f:72:3b:b3:32:01:e0:1d:da:de:c1:
                    31:4f:d9:a9:11:cc:38:ba:6c:4f:e0:7b:62:6b:0b:
                    8c:59:ef:06:2b:81:41:e0:20:e9:07:3f:94:ce:d5:
                    b6:20:15:0c:07:55:c6:78:f8:84:1e:82:fb:55:b3:
                    16:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:C8:34:D3:F3:A4:E5:6D:4F:C8:97:A2:DA:BA:50:2E:52:44:96:D3
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/Gcg00_Ok5W1PyJei2rpQLlJEltM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         a9:92:d5:9d:99:b3:9e:13:30:cb:8b:d0:a2:80:ea:83:c3:cf:
         de:16:da:82:45:d2:ed:66:05:d8:c8:dc:68:ab:e3:21:e6:43:
         89:88:0b:96:43:2a:de:0b:b8:c6:21:de:66:23:70:89:95:eb:
         33:59:f1:ac:e4:27:11:e5:a5:88:74:b8:e5:ad:d9:41:95:c0:
         25:9f:7c:8b:26:72:68:50:f0:b6:0f:e8:5a:02:43:69:39:d4:
         ae:cd:a0:c8:70:70:08:05:34:42:7c:40:68:35:4f:bf:62:56:
         0e:15:73:d3:b2:e3:ec:80:19:95:f7:8c:29:0d:8b:e7:bf:b4:
         aa:ec:f1:98:74:ed:13:bf:42:00:c9:42:7c:58:68:3e:95:f3:
         c1:de:2b:f3:48:3c:88:cb:56:40:0c:a7:67:2b:1b:17:a9:c2:
         e8:b0:c1:b2:31:81:33:6a:34:5a:7e:07:3f:57:c6:2c:a4:a4:
         28:5d:f5:8a:33:49:0d:1e:ab:34:28:1c:af:c1:d0:3e:54:0a:
         4c:99:9b:14:ee:0d:7b:80:03:33:b8:ed:75:63:af:5a:eb:e0:
         b5:a1:08:82:96:42:22:d9:e0:dd:7b:7c:05:8f:e6:be:73:6a:
         a5:ee:d7:6c:2f:5d:16:2c:5f:8e:71:6d:ad:99:32:ac:f8:dd:
         f1:e5:45:fd
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYpp/42DSlYY/XyhMoNrvwizMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMWYxNGM4NTA3NDVhN2MzMTJlYTJlYjBiZTAzMDUyZTQ5
NjcyNzUwHhcNMjMwOTA2MTAxNzQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOWM4MzRkM2YzYTRlNTZkNGZjODk3YTJkYWJhNTAyZTUyNDQ5NmQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPwFToDb+v/cdxCiRxGOeXRpKvEH
jrHcOEma4A/Fjp4brtNeAei8he6BlV1IynPheerrM5Jy8OEEjSAnCWZFr0CQm2E2
1gK74J57kUUd2V1Swj6QqDkVIRHg3Is6edd5sFd4MwXu+u0ZpTChzK/WJUKi+74q
JmIc8S46t/a2uCt1GEEMZ3CknAsY8VkuymwvD54NijHO60n5ab5gA3iimXKGMQDX
R2ibWIuUqzkYM88ymyZGAeAm9NLcmS7JLGnmADFZqBRIb3I7szIB4B3a3sExT9mp
Ecw4umxP4HtiawuMWe8GK4FB4CDpBz+UztW2IBUMB1XGePiEHoL7VbMWNwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBnINNPzpOVtT8iXotq6UC5SRJbTMB8GA1UdIwQY
MBaAFKofFMhQdFp8MS6i6wvgMFLklnJ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQt
ODNmY2QyMjU0ODJhLzEvR2NnMDBfT2s1VzFQeUplaTJycFFMbEpFbHRNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQtODNmY2QyMjU0ODJh
LzEvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKmS1Z2Zs54TMMuL0KKA
6oPDz94W2oJF0u1mBdjI3Gir4yHmQ4mIC5ZDKt4LuMYh3mYjcImV6zNZ8azkJxHl
pYh0uOWt2UGVwCWffIsmcmhQ8LYP6FoCQ2k51K7NoMhwcAgFNEJ8QGg1T79iVg4V
c9Oy4+yAGZX3jCkNi+e/tKrs8Zh07RO/QgDJQnxYaD6V88HeK/NIPIjLVkAMp2cr
GxepwuiwwbIxgTNqNFp+Bz9XxiykpChd9YozSQ0eqzQoHK/B0D5UCkyZmxTuDXuA
AzO47XVjr1rr4LWhCIKWQiLZ4N17fAWP5r5zaqXu12wvXRYsX45xba2ZMqz43fHl
Rf0=
-----END CERTIFICATE-----