Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/HHr9ga4Q-5YmA1u6cCc-GrrCWhs.roa
File:                     HHr9ga4Q-5YmA1u6cCc-GrrCWhs.roa (raw, json)
Hash identifier:          edexNG9ZZPWygv6tP+KfOnAf/xArrNeGstUn+/cuWzE=
Subject key identifier:   1C:7A:FD:81:AE:10:FB:96:26:03:5B:BA:70:27:3E:1A:BA:C2:5A:1B
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A8C87E2451C5729A1CE0C99957E79909B
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/HHr9ga4Q-5YmA1u6cCc-GrrCWhs.roa
Signing time:             Wed 13 Sep 2023 03:13:50 +0000
ROA not before:           Wed 13 Sep 2023 03:13:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:8c:87:e2:45:1c:57:29:a1:ce:0c:99:95:7e:79:90:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep 13 03:13:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1c7afd81ae10fb9626035bba70273e1abac25a1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ba:c9:39:f4:fd:5f:4e:e8:4b:3b:5e:ca:b9:
                    b9:8f:a4:f6:e5:2b:96:cc:86:f7:73:9f:40:66:0e:
                    79:79:a9:53:51:c0:82:4b:47:ef:82:15:89:72:f9:
                    4a:1e:b1:fb:e4:b2:0f:71:53:92:e7:40:81:5d:40:
                    e9:5b:d8:cd:4b:63:1e:2e:81:a1:bf:36:1a:aa:db:
                    3d:b2:04:7e:21:a1:10:70:8d:cf:ee:0e:5a:53:f1:
                    50:a8:6a:b7:62:4b:22:3c:41:82:fe:3e:90:0d:47:
                    e7:85:fc:54:0b:34:4e:0a:48:e0:36:91:cf:71:df:
                    34:44:3f:44:c5:2c:06:9a:57:e0:e7:dd:c8:83:1e:
                    5c:dc:d6:e9:07:41:0b:41:5f:9e:c7:4e:e0:b7:8a:
                    82:d4:d6:c5:79:c8:73:78:71:8f:36:0b:61:16:66:
                    fe:9c:71:76:05:d1:b3:67:57:7c:6d:8c:c4:24:b0:
                    d8:72:34:ff:8e:68:fb:d1:3a:e4:b0:a1:8e:ba:fb:
                    4a:5e:12:7b:6b:0e:64:68:a7:42:bb:64:59:d3:04:
                    0a:7a:d7:23:3d:9e:21:13:f3:dd:6b:61:9e:1f:d1:
                    35:29:ff:51:cd:f6:07:b9:44:30:46:8c:b0:93:fe:
                    fb:48:54:1f:7d:0a:e2:f5:33:6c:fa:f9:2d:07:62:
                    c3:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:7A:FD:81:AE:10:FB:96:26:03:5B:BA:70:27:3E:1A:BA:C2:5A:1B
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/HHr9ga4Q-5YmA1u6cCc-GrrCWhs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         50:3c:2b:6d:c4:ac:49:5b:24:3a:c2:d5:c8:6a:9c:ea:cf:2d:
         51:40:f3:0e:5e:d0:78:e6:43:78:f8:83:f0:a5:17:c2:d8:40:
         68:90:6a:8d:02:54:1b:2e:62:42:c9:0f:83:20:ea:78:fd:b5:
         6e:5a:8e:ca:3b:5e:f0:93:26:f1:d2:89:be:6b:1a:b1:f8:ad:
         ea:6c:a1:75:a6:19:b8:77:ad:17:a4:d7:e2:32:77:d6:e8:67:
         a2:61:78:93:cd:9d:6a:57:74:5d:12:8f:89:15:1e:d8:3f:4c:
         5a:ec:34:ae:e9:27:7a:ab:81:cf:90:a7:1c:26:ff:f9:55:ff:
         47:39:61:e6:40:df:ba:95:42:d2:74:60:0e:13:19:55:33:23:
         5d:d8:cf:21:30:4e:46:98:8b:5f:40:11:f7:6c:8c:f4:c2:d5:
         35:77:90:b8:53:d6:7e:d5:c3:26:2c:14:42:e7:a9:73:31:f8:
         09:35:b8:b7:0a:be:24:12:d7:e9:c1:f7:45:b0:81:8c:9a:56:
         0c:dc:41:a9:26:00:c8:58:2d:d5:36:bb:58:89:ff:34:64:98:
         c7:8d:66:a9:79:83:11:46:7c:ef:bd:c7:08:f6:7b:7c:89:97:
         3e:85:6a:d0:3b:27:fb:6b:3f:33:a5:01:f9:33:fa:1f:4d:62:
         a9:b1:65:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----