Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/IPmEGFTSTWOQqBOzYubGuApUY-Q.roa
File:                     IPmEGFTSTWOQqBOzYubGuApUY-Q.roa (raw, json)
Hash identifier:          5MZZTlWWN2Vy2rXPyhC3rVOrzipG2cjN+0jsmV1huVM=
Subject key identifier:   20:F9:84:18:54:D2:4D:63:90:A8:13:B3:62:E6:C6:B8:0A:54:63:E4
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A8F80B003F7D607EDF6F58EE896475130
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/IPmEGFTSTWOQqBOzYubGuApUY-Q.roa
Signing time:             Wed 13 Sep 2023 17:04:50 +0000
ROA not before:           Wed 13 Sep 2023 17:04:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18a:8f80:3493/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:8f:80:b0:03:f7:d6:07:ed:f6:f5:8e:e8:96:47:51:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep 13 17:04:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=20f9841854d24d6390a813b362e6c6b80a5463e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:a7:cd:86:4b:4a:88:b9:27:e8:ce:60:bb:bc:
                    5a:e2:04:99:f7:e3:b2:04:28:b9:2f:06:28:84:d2:
                    78:e9:65:22:fd:cb:4e:d3:61:4c:3e:41:0d:31:20:
                    94:8e:cf:ce:61:73:6f:6b:73:b0:a7:66:35:b2:ae:
                    64:30:83:fa:43:f3:74:f5:84:ad:7e:58:71:35:03:
                    00:fa:99:d7:c3:d6:23:64:e9:04:87:ec:77:9b:bd:
                    ed:d7:47:bc:64:44:47:79:b9:fe:0b:e9:db:55:de:
                    5c:5b:ed:c9:36:9c:43:98:50:6b:e5:ab:93:24:7f:
                    3e:a6:cd:41:01:08:e0:20:b0:78:83:0b:63:bc:a3:
                    90:b8:7d:38:1b:e0:b6:05:52:f0:f4:4a:df:a8:ca:
                    0d:09:c8:61:35:79:4a:bd:46:db:4b:ef:92:5b:64:
                    0e:ef:5a:58:33:a0:a6:2f:5c:8d:4f:cc:f0:40:52:
                    e8:1e:70:5a:63:01:5a:d7:97:55:8e:4d:06:d8:82:
                    4b:f6:df:39:40:90:ed:24:57:b0:b3:80:95:0b:65:
                    79:e9:9f:f9:97:fa:ae:4f:4c:7e:1e:a1:9e:5f:9e:
                    c1:9e:0f:ce:d3:9d:ae:ae:e8:17:0d:3e:67:8b:6a:
                    ab:8f:a0:29:9d:71:a7:45:27:08:79:8f:27:37:cd:
                    fb:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:F9:84:18:54:D2:4D:63:90:A8:13:B3:62:E6:C6:B8:0A:54:63:E4
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/IPmEGFTSTWOQqBOzYubGuApUY-Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         17:d7:f7:1c:04:e0:9b:37:04:5f:07:c3:dd:ae:70:6a:3b:70:
         59:70:b3:15:c5:41:f8:c0:cb:b8:62:23:85:f7:af:85:dd:15:
         91:a4:2b:40:e0:e3:0b:c7:cd:3a:c5:aa:d8:1a:4a:02:0f:63:
         33:d3:4b:9a:24:c0:5b:9c:9f:4d:e4:87:68:21:63:56:df:4a:
         47:f3:fd:77:6e:ad:25:53:97:15:a8:fa:36:79:e1:61:36:b9:
         50:87:f2:92:f1:61:54:c4:be:e4:22:c4:ae:51:1e:b6:a6:28:
         fc:37:01:e4:ca:e2:91:e5:19:3c:ac:1a:24:18:5c:26:19:42:
         7a:5f:10:cf:b5:1c:f5:96:65:8d:76:c6:cc:f9:27:6e:10:14:
         25:55:fa:33:56:3b:0c:b8:07:86:53:fb:7e:10:d1:3e:be:64:
         1c:38:9a:e0:ec:23:3a:db:67:c4:f5:48:1e:e0:8a:c1:0f:d6:
         22:ca:d0:c9:07:00:74:a1:95:20:a1:01:79:10:90:82:ff:79:
         94:21:48:1f:53:b8:b1:81:14:09:7a:0c:c8:26:7f:67:e7:2e:
         7f:15:14:95:b5:1e:88:f9:23:87:e6:e6:c2:9b:9c:51:7a:f2:
         16:77:da:6a:4c:30:a5:46:63:c4:62:eb:e1:49:a1:60:ac:83:
         94:97:f8:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----