Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/JxQu3Y0EysSh4s74F3kpM5cfdl4.roa
File:                     JxQu3Y0EysSh4s74F3kpM5cfdl4.roa (raw, json)
Hash identifier:          fH8zKcXt1vvxTrJr8DLfZK8kBnR06ihOYqlDW+RcOWs=
Subject key identifier:   27:14:2E:DD:8D:04:CA:C4:A1:E2:CE:F8:17:79:29:33:97:1F:76:5E
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018AAC4AAEC9724F11BF073F403AA1BE3EA2
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/JxQu3Y0EysSh4s74F3kpM5cfdl4.roa
Signing time:             Tue 19 Sep 2023 07:14:50 +0000
ROA not before:           Tue 19 Sep 2023 07:14:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:ac:4a:ae:c9:72:4f:11:bf:07:3f:40:3a:a1:be:3e:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep 19 07:14:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=27142edd8d04cac4a1e2cef817792933971f765e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:29:2a:01:41:4b:6d:5d:45:0a:2f:13:79:71:
                    4f:6c:99:56:66:b7:31:42:ff:6d:e5:40:23:40:fd:
                    fa:a1:49:64:50:44:66:3c:e3:d1:5d:ea:77:69:a9:
                    46:da:cf:05:6c:89:ad:81:b9:08:b0:70:6a:52:8e:
                    00:0e:e6:8c:3f:f1:e9:4f:e3:af:f1:4b:2f:8b:7f:
                    7f:7e:fd:71:e3:c0:13:c2:27:44:ce:48:39:1c:46:
                    98:23:e0:2e:7f:f1:c6:ce:ab:2a:fc:bf:74:e3:ba:
                    9b:32:85:a2:2e:a4:45:04:33:65:f1:40:63:8d:52:
                    68:dc:6a:da:21:d9:ba:35:e7:83:86:e8:82:07:29:
                    bc:68:3d:15:80:a2:78:82:08:42:38:c6:69:b4:dc:
                    0a:b5:aa:87:84:18:fe:e5:57:2d:f0:d0:58:a6:76:
                    ca:69:34:26:0e:05:1a:a5:73:9c:40:47:28:f6:5e:
                    d3:47:80:e9:36:6a:a1:4f:3c:a2:28:19:3a:63:e5:
                    a5:2f:fd:18:94:10:b9:70:9e:70:6f:27:96:99:fa:
                    7e:d1:da:a9:9d:d1:62:3a:0f:17:df:70:44:15:67:
                    1c:1d:66:41:ed:75:00:44:2d:be:96:7c:5c:c9:89:
                    2d:ba:08:7b:7c:28:09:07:2f:2b:a0:0b:45:52:b2:
                    c6:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:14:2E:DD:8D:04:CA:C4:A1:E2:CE:F8:17:79:29:33:97:1F:76:5E
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/JxQu3Y0EysSh4s74F3kpM5cfdl4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         0c:1e:91:ae:31:75:2d:0f:91:20:52:9e:ac:de:f8:18:dd:10:
         dc:67:d5:2f:8b:b7:5e:02:33:7b:e6:c2:07:b9:38:02:64:60:
         61:13:51:e8:15:a1:66:4d:17:50:9f:a4:a6:61:bf:40:97:62:
         bd:53:a8:13:72:4c:31:95:e3:7d:7d:27:57:b5:83:60:84:3f:
         44:1f:33:40:23:d4:bc:a4:cb:dc:78:2d:0a:96:e3:c4:b8:7b:
         af:d1:1f:74:91:d5:21:fe:9e:d3:5b:74:96:16:96:06:6a:19:
         18:c3:2e:97:df:88:a1:43:43:d4:42:58:66:52:e7:70:cc:6f:
         ee:e9:f0:24:ae:ad:ba:ea:d6:2e:e9:aa:f4:1f:e8:02:72:84:
         02:c4:63:f0:90:8f:d3:c4:c2:8a:86:9f:e0:d5:53:08:4e:e2:
         db:d4:ca:51:69:9f:f6:5a:30:ed:28:84:f3:25:8e:9d:8b:ad:
         98:e8:79:e1:72:c0:5c:25:61:ad:25:c2:25:3a:15:a9:ca:09:
         c2:93:a0:ea:4e:03:56:b4:c1:fd:83:a9:fc:9d:33:53:a5:96:
         76:78:81:db:cf:b0:31:54:42:96:25:d8:ce:cf:4e:a1:87:6e:
         e7:a9:77:f0:1f:73:38:68:49:6b:a2:1a:05:c5:de:b5:17:84:
         30:f6:07:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----