Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/M2jNcNI5kWOKjBxq-Iscqy9Yi9c.roa
File:                     M2jNcNI5kWOKjBxq-Iscqy9Yi9c.roa (raw, json)
Hash identifier:          NYQuZnCLsE6evI4SamyYZ5PJ6GApX3vG1A0RU4jr9os=
Subject key identifier:   33:68:CD:70:D2:39:91:63:8A:8C:1C:6A:F8:8B:1C:AB:2F:58:8B:D7
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A842A780EE7DC0F8E0D179E06AAEDB9D4
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/M2jNcNI5kWOKjBxq-Iscqy9Yi9c.roa
Signing time:             Mon 11 Sep 2023 12:14:50 +0000
ROA not before:           Mon 11 Sep 2023 12:14:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:84:2a:78:0e:e7:dc:0f:8e:0d:17:9e:06:aa:ed:b9:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep 11 12:14:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=3368cd70d23991638a8c1c6af88b1cab2f588bd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:b5:93:79:17:b3:60:68:2f:77:1e:6b:ef:09:
                    ce:b0:07:6c:52:b2:9d:51:0f:d4:ca:bf:cd:0a:96:
                    56:23:0f:a8:39:2b:8d:01:50:ee:d4:30:bb:03:6f:
                    d6:94:d4:e2:27:2e:90:9e:73:0e:88:9e:e0:ab:e1:
                    40:74:32:10:30:c1:5b:2f:96:21:a9:31:3e:5d:33:
                    0e:be:71:71:eb:a8:09:44:72:c9:f5:03:16:cb:56:
                    e7:4b:67:6f:cd:f6:cb:67:7e:ef:a3:01:e3:94:2c:
                    c0:14:bb:93:eb:99:c5:c2:05:74:7e:30:82:b8:2f:
                    41:cf:25:d0:ad:52:6f:86:5e:56:08:ad:c1:e2:a9:
                    7d:f2:6e:e2:38:05:65:74:da:fe:b0:ef:f6:a6:10:
                    ed:09:44:68:90:76:62:35:c1:72:1e:56:f0:d7:37:
                    01:a7:d8:87:6b:20:0e:f1:97:a0:df:01:7c:94:90:
                    dc:c2:d4:21:fd:76:9f:f1:40:da:10:7a:bf:e3:f3:
                    1e:d3:f2:c7:35:6e:2a:9f:79:98:75:fa:97:7e:8b:
                    d4:7e:8a:78:94:ce:ba:4e:df:68:f5:19:60:98:3e:
                    aa:89:57:af:67:7b:bd:a9:92:0b:21:bb:aa:7d:66:
                    9d:2a:57:ec:88:1b:43:ce:6a:2a:45:d1:68:5d:7f:
                    41:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:68:CD:70:D2:39:91:63:8A:8C:1C:6A:F8:8B:1C:AB:2F:58:8B:D7
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/M2jNcNI5kWOKjBxq-Iscqy9Yi9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         82:c8:bf:6c:77:40:91:f3:68:34:40:87:b4:81:e3:41:c5:18:
         f2:da:f2:3f:88:02:df:62:88:21:fb:b3:b8:61:0b:5d:6b:c1:
         ad:4a:95:ba:22:c2:7c:44:1c:12:09:77:19:7c:45:e2:12:50:
         93:21:86:5f:48:33:4f:8f:9f:76:bc:f9:88:4d:b4:2b:8a:e5:
         1a:8b:6a:97:6c:d8:3c:fd:1b:87:e7:ff:33:d3:50:24:7c:52:
         39:7f:c9:9d:b9:a6:81:4e:86:02:66:29:f2:2d:18:ff:cf:4f:
         89:4b:b6:d7:1f:e8:35:99:08:4c:65:16:a8:b6:d5:4f:11:f7:
         63:c7:c3:ad:2c:0c:98:26:62:f6:95:d3:7a:59:98:88:55:13:
         e9:be:a5:03:ec:f4:04:4a:df:4f:8e:fe:6d:9f:60:0b:ba:5d:
         90:e2:f4:b7:39:ba:a4:63:ff:fc:f9:cf:df:5d:5f:03:f2:cd:
         4e:d6:fa:80:79:76:9a:13:93:a8:be:f6:97:1d:a5:3b:f4:64:
         30:6e:76:45:a5:6f:e4:00:49:22:55:fe:6d:44:e6:fd:7a:50:
         b4:aa:f1:cc:1e:d1:6b:58:da:52:40:56:e8:c0:3d:a0:d8:66:
         9c:cf:d2:06:aa:cc:88:5a:d5:e0:7f:7e:cf:c3:41:78:a0:3b:
         ec:14:23:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----