Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/LRRJRQTZ5fBEquCvc48r3vof-lc.roa
File:                     LRRJRQTZ5fBEquCvc48r3vof-lc.roa (raw, json)
Hash identifier:          /H87mv9nW4O7BnXdhJedbShxYIuHY+wHAVBvsqJ4s9s=
Subject key identifier:   2D:14:49:45:04:D9:E5:F0:44:AA:E0:AF:73:8F:2B:DE:FA:1F:FA:57
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A83F29DDCFB331479C46E8693C85023D4
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/LRRJRQTZ5fBEquCvc48r3vof-lc.roa
Signing time:             Mon 11 Sep 2023 11:13:50 +0000
ROA not before:           Mon 11 Sep 2023 11:13:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:83:f2:9d:dc:fb:33:14:79:c4:6e:86:93:c8:50:23:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep 11 11:13:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2d14494504d9e5f044aae0af738f2bdefa1ffa57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:3a:3d:6c:c1:07:be:db:da:c6:57:15:7f:c5:
                    99:cc:50:b6:bf:f3:14:7a:97:9c:ad:56:b4:d6:cc:
                    da:8f:e6:d5:be:30:f1:cd:d7:5b:58:c3:bb:9f:53:
                    36:55:a7:11:5e:a4:c3:9e:49:f8:dc:52:fd:fc:2d:
                    41:8f:a9:f8:42:33:45:d9:ec:37:c3:c3:98:da:5f:
                    39:e0:e3:85:aa:44:8a:22:33:93:dd:27:50:d0:42:
                    70:4d:20:62:49:b1:c0:fe:7e:2f:5c:b9:af:25:fa:
                    4a:95:43:3e:ef:1f:33:7d:a6:25:ff:e5:ce:18:95:
                    d7:de:7e:66:7c:36:5b:27:9f:95:cb:33:61:38:68:
                    1e:c7:bd:95:96:89:27:96:4f:a5:c7:41:bd:d7:71:
                    49:f3:4d:92:44:17:a6:d5:19:22:30:63:6b:02:9c:
                    dd:24:14:24:84:99:52:2b:96:7a:be:24:a8:2e:c8:
                    1f:56:9d:03:e6:be:5c:d7:54:4d:38:93:a1:53:62:
                    54:7c:fd:e0:19:77:94:00:23:ef:78:ae:bb:82:a6:
                    1d:6a:c6:03:70:5d:0f:fd:a5:57:61:18:e1:d8:04:
                    3b:e9:7d:af:7c:6b:a4:a6:bf:16:26:68:fb:2a:54:
                    97:4d:6b:9b:43:47:36:d6:60:09:73:7a:7d:55:6d:
                    2c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:14:49:45:04:D9:E5:F0:44:AA:E0:AF:73:8F:2B:DE:FA:1F:FA:57
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/LRRJRQTZ5fBEquCvc48r3vof-lc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         a7:3e:1d:97:74:15:0d:e4:ee:92:a1:13:bb:5d:ee:51:ec:8e:
         43:2b:d3:cb:cd:f3:ff:13:c0:0b:b0:8d:3d:5d:00:8a:fe:33:
         1a:8a:9e:75:06:a6:77:05:83:4e:ec:4f:87:0f:cd:3b:91:15:
         18:fa:da:51:2c:83:18:55:1f:06:5d:fb:7c:36:7f:ec:e8:97:
         58:6e:80:24:2a:5e:43:b4:dd:61:17:fe:08:29:61:ca:dd:f4:
         d7:be:4e:72:d3:1c:97:27:93:15:3a:f7:f6:55:8d:0c:af:48:
         3c:f9:44:2c:87:c2:8a:62:5c:d0:c1:fb:f2:e5:25:dc:38:68:
         c4:4c:e3:22:27:83:36:6a:6f:2b:7c:96:49:9d:29:d7:ae:fe:
         46:8f:98:f7:e3:4c:8b:4d:87:d2:64:71:77:c4:a1:2a:0e:3c:
         55:10:04:b6:85:0d:52:f2:2e:da:5b:66:27:ae:2a:c9:3e:2e:
         e8:bd:6f:45:c3:42:33:85:1b:f8:2e:0c:92:70:cb:ae:ae:fe:
         ae:9a:a4:ef:93:29:dd:54:de:1d:0a:5a:cc:e3:b3:47:6e:12:
         08:f0:a2:df:3c:ce:49:50:83:da:de:05:0f:87:13:bb:5a:d4:
         54:ce:53:20:24:df:3b:14:8a:f4:72:11:3e:9f:25:24:4a:f6:
         db:eb:46:20
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYqD8p3c+zMUecRuhpPIUCPUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMWYxNGM4NTA3NDVhN2MzMTJlYTJlYjBiZTAzMDUyZTQ5
NjcyNzUwHhcNMjMwOTExMTExMzUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZDE0NDk0NTA0ZDllNWYwNDRhYWUwYWY3MzhmMmJkZWZhMWZmYTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjo9bMEHvtvaxlcVf8WZzFC2v/MU
epecrVa01szaj+bVvjDxzddbWMO7n1M2VacRXqTDnkn43FL9/C1Bj6n4QjNF2ew3
w8OY2l854OOFqkSKIjOT3SdQ0EJwTSBiSbHA/n4vXLmvJfpKlUM+7x8zfaYl/+XO
GJXX3n5mfDZbJ5+VyzNhOGgex72Vloknlk+lx0G913FJ802SRBem1RkiMGNrApzd
JBQkhJlSK5Z6viSoLsgfVp0D5r5c11RNOJOhU2JUfP3gGXeUACPveK67gqYdasYD
cF0P/aVXYRjh2AQ76X2vfGukpr8WJmj7KlSXTWubQ0c21mAJc3p9VW0sJwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFC0USUUE2eXwRKrgr3OPK976H/pXMB8GA1UdIwQY
MBaAFKofFMhQdFp8MS6i6wvgMFLklnJ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQt
ODNmY2QyMjU0ODJhLzEvTFJSSlJRVFo1ZkJFcXVDdmM0OHIzdm9mLWxjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQtODNmY2QyMjU0ODJh
LzEvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKc+HZd0FQ3k7pKhE7td
7lHsjkMr08vN8/8TwAuwjT1dAIr+MxqKnnUGpncFg07sT4cPzTuRFRj62lEsgxhV
HwZd+3w2f+zol1hugCQqXkO03WEX/ggpYcrd9Ne+TnLTHJcnkxU69/ZVjQyvSDz5
RCyHwopiXNDB+/LlJdw4aMRM4yIngzZqbyt8lkmdKdeu/kaPmPfjTItNh9JkcXfE
oSoOPFUQBLaFDVLyLtpbZieuKsk+Lui9b0XDQjOFG/guDJJwy66u/q6apO+TKd1U
3h0KWszjs0duEgjwot88zklQg9reBQ+HE7ta1FTOUyAk3zsUivRyET6fJSRK9tvr
RiA=
-----END CERTIFICATE-----