Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/GryrkYdWaVtBAhOhdMvNe0lA668.roa
File:                     GryrkYdWaVtBAhOhdMvNe0lA668.roa (raw, json)
Hash identifier:          t7n8Hj/gjX1yAyjMdScs0d8dT+Bt1V/NuclI6lF4T9g=
Subject key identifier:   1A:BC:AB:91:87:56:69:5B:41:02:13:A1:74:CB:CD:7B:49:40:EB:AF
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A679DC69E0F261BC8F92CA99AD9FCAEA2
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/GryrkYdWaVtBAhOhdMvNe0lA668.roa
Signing time:             Tue 05 Sep 2023 23:11:47 +0000
ROA not before:           Tue 05 Sep 2023 23:11:47 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:67:9d:c6:9e:0f:26:1b:c8:f9:2c:a9:9a:d9:fc:ae:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep  5 23:11:47 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1abcab918756695b410213a174cbcd7b4940ebaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:9b:16:af:ab:1e:e6:5c:fe:4c:20:bb:63:fd:
                    74:b4:aa:e8:1d:a9:9e:62:da:7c:51:3c:62:e7:14:
                    d3:23:39:f0:39:1f:ea:23:5a:19:92:d3:6f:38:58:
                    a4:47:57:49:f3:39:fc:72:e1:56:34:83:91:18:17:
                    f3:08:8a:74:41:97:8e:5a:90:59:a1:a4:26:88:3d:
                    c0:b1:04:73:9a:04:90:a3:bf:44:b2:b1:0f:cf:b1:
                    ab:c4:71:c9:98:f4:63:34:47:6d:b7:d6:40:9e:4f:
                    d6:84:90:83:01:d0:e2:c1:cb:b9:85:23:de:7d:77:
                    2d:c3:a4:b2:25:d2:fb:c3:09:c1:ec:52:0d:0d:6c:
                    c9:69:8f:69:ea:83:2f:fe:9e:87:89:96:7b:8f:ae:
                    ae:18:5b:bc:86:4f:9f:be:56:3d:1e:66:c1:8f:c7:
                    22:0c:0f:60:9c:00:fc:c5:19:ed:ac:1f:a8:9e:7c:
                    cc:d8:81:b3:e7:a1:80:cd:6d:70:37:47:64:e9:14:
                    f4:70:cd:ca:be:12:6d:81:82:02:cb:74:5c:7e:9d:
                    b4:d6:27:c7:9f:09:bb:8b:53:fb:96:da:2d:b6:7b:
                    42:ac:89:7e:52:e6:ab:01:99:cb:9d:bf:28:f6:7a:
                    6d:bb:b9:43:35:3b:2b:90:c8:cf:fe:ab:d0:d1:76:
                    7f:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:BC:AB:91:87:56:69:5B:41:02:13:A1:74:CB:CD:7B:49:40:EB:AF
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/GryrkYdWaVtBAhOhdMvNe0lA668.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         39:ee:53:42:52:cf:18:5f:cd:6c:9e:2c:d2:c6:06:a1:cd:87:
         e6:e2:0a:dd:c0:ae:0e:6a:a1:4c:20:48:fe:d4:4d:18:d6:05:
         1e:43:5f:fd:c6:0e:40:2a:13:90:c0:c0:e0:46:1d:95:2e:60:
         bb:e7:62:66:74:8d:ef:71:b6:61:4e:87:0d:1e:aa:3c:18:f3:
         15:37:5d:79:e2:40:00:36:68:8b:86:cb:ae:6d:f6:70:8a:0a:
         34:19:db:2a:25:f0:4b:ca:41:51:92:e2:24:5d:39:81:b3:ee:
         38:c7:22:cf:42:24:55:93:72:a1:c3:4b:39:53:7d:a9:81:95:
         4c:35:ee:fb:1d:3f:83:c1:20:56:bd:a6:97:1b:48:77:3e:f3:
         c5:98:4d:a8:19:5b:e9:6b:78:0c:bb:5e:c4:60:e8:0b:b6:65:
         6b:74:80:74:03:75:d1:5d:81:90:6f:7e:68:1b:91:9a:5d:b8:
         f6:8f:86:6a:1c:e4:95:2e:9e:39:06:86:7e:12:30:e8:ac:dd:
         39:56:ad:96:43:0d:84:a2:34:c9:a1:a8:5a:ad:fa:fb:42:f0:
         a5:7b:1c:73:d1:99:f3:33:83:ca:d4:97:39:f3:ab:45:9f:24:
         e6:9b:64:77:eb:68:dd:02:97:03:a9:21:ec:d8:91:2f:9e:11:
         8b:f8:7d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----