Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/Ocre2opv7d5kIJ3tWx3rmUd7N2s.roa
File:                     Ocre2opv7d5kIJ3tWx3rmUd7N2s.roa (raw, json)
Hash identifier:          0OI+HlQxh6IN4nukj4iXz1XR4h/bEwwk9GPUiSWegCc=
Subject key identifier:   39:CA:DE:DA:8A:6F:ED:DE:64:20:9D:ED:5B:1D:EB:99:47:7B:37:6B
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A75C92A38076971B4490726B0564E4C37
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/Ocre2opv7d5kIJ3tWx3rmUd7N2s.roa
Signing time:             Fri 08 Sep 2023 17:13:52 +0000
ROA not before:           Fri 08 Sep 2023 17:13:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:75:c9:2a:38:07:69:71:b4:49:07:26:b0:56:4e:4c:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep  8 17:13:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=39cadeda8a6fedde64209ded5b1deb99477b376b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:06:ef:c7:f3:01:8a:8b:77:89:6c:e2:9c:78:
                    af:09:ec:4e:57:0d:a9:b0:db:87:9e:83:37:3b:6d:
                    f4:e1:ba:61:1a:c0:b8:4b:1a:d0:9f:37:86:12:18:
                    c7:f1:f6:dd:99:ee:4e:4f:77:1d:49:c9:53:88:a7:
                    cd:9c:ce:2d:31:07:80:b7:c2:f5:5f:d2:34:3c:8f:
                    f7:c7:c7:13:a0:1a:cf:7a:33:88:92:aa:3f:e0:c8:
                    62:a7:ae:f4:62:30:18:d6:6a:25:18:04:c6:71:b4:
                    c4:5d:50:ce:fc:74:ea:19:43:89:58:c4:3f:b3:0c:
                    a8:d9:f9:13:54:a9:a0:38:0c:59:87:d4:c0:70:54:
                    1c:ea:e9:62:dc:29:07:2d:e0:16:69:c5:54:92:66:
                    a5:07:ac:96:4d:2c:e8:d9:8d:30:d0:04:01:a0:ca:
                    52:fe:de:31:96:f8:a7:78:a4:ce:cf:8f:32:97:91:
                    6e:08:e8:b1:46:b5:16:ce:bd:53:9f:7a:ab:3c:51:
                    c8:30:1d:0f:07:91:21:aa:03:00:ba:8d:71:3e:e1:
                    86:d7:da:8b:64:3f:2c:a7:ea:be:50:80:c7:d7:be:
                    5e:c5:01:2a:00:45:21:91:5b:34:5c:c2:1b:02:41:
                    16:26:68:e4:f7:e2:fd:be:de:4b:d7:74:e9:1c:95:
                    b3:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:CA:DE:DA:8A:6F:ED:DE:64:20:9D:ED:5B:1D:EB:99:47:7B:37:6B
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/Ocre2opv7d5kIJ3tWx3rmUd7N2s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         9f:ed:13:5d:43:b3:8e:de:42:76:0e:a3:89:56:3d:b1:0f:d3:
         6d:e9:a2:17:db:81:b0:cc:ff:a2:35:87:d5:19:fa:35:c4:9a:
         fc:c7:8f:c4:cb:c5:d3:05:29:a4:aa:9e:8b:be:59:ee:57:0a:
         66:5b:bd:31:e9:d5:38:f5:ee:55:d6:44:96:1a:52:0d:ce:0f:
         e4:d9:d6:49:6f:b7:8c:25:f1:2a:9d:9d:4c:da:a1:ea:6f:96:
         33:db:fc:84:7f:ea:80:0c:9e:68:ff:3f:32:f5:1b:9c:36:e1:
         f0:39:f9:23:ca:f0:4b:1f:8a:99:e9:6b:bc:c7:a9:e4:ca:92:
         2e:20:78:e4:9f:17:01:1d:3b:73:80:1c:0a:ad:53:52:8a:35:
         91:ea:8d:71:37:ff:b1:ea:ed:7c:1d:0c:38:d9:1d:26:b6:b2:
         b9:30:0d:42:ec:d0:2e:8b:24:7e:cc:25:80:a4:67:65:eb:c4:
         dc:f9:e1:16:54:46:76:4c:2a:00:18:74:5d:8f:7f:0e:ce:43:
         b7:21:f9:f5:ca:ad:60:59:40:0c:d7:dc:72:21:4b:37:59:bd:
         5b:70:c6:fb:08:f1:01:07:e9:c1:52:67:ce:1a:3d:f8:0c:6e:
         a0:a3:ba:f1:38:9c:39:6d:2d:54:48:a3:a0:81:f5:3d:84:ab:
         b1:fc:46:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----