Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/Qtl6v7V1hY0oCgwfCYNI0Uowjsk.roa
File:                     Qtl6v7V1hY0oCgwfCYNI0Uowjsk.roa (raw, json)
Hash identifier:          zN2C8FH7QHU5Xri09Cv6Zo/+9Eqm3LTfeGyKkcqifnY=
Subject key identifier:   42:D9:7A:BF:B5:75:85:8D:28:0A:0C:1F:09:83:48:D1:4A:30:8E:C9
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A49D2C57D50881DFCAE73291A4C2C8E12
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/Qtl6v7V1hY0oCgwfCYNI0Uowjsk.roa
Signing time:             Thu 31 Aug 2023 04:21:04 +0000
ROA not before:           Thu 31 Aug 2023 04:21:04 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:49:d2:c5:7d:50:88:1d:fc:ae:73:29:1a:4c:2c:8e:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Aug 31 04:21:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=42d97abfb575858d280a0c1f098348d14a308ec9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:10:0f:c1:2f:5f:3f:2b:c2:73:70:87:56:a3:
                    6d:c3:98:32:9d:0c:30:34:75:07:1a:e6:97:56:a7:
                    16:2a:da:b8:e4:be:f1:69:dd:36:3d:a2:54:50:6f:
                    2e:32:c1:e5:dc:82:cf:57:a6:33:88:7f:2c:03:fb:
                    60:95:65:6a:2f:f5:c2:95:28:46:42:fe:79:0c:be:
                    03:de:5b:27:b3:33:fd:19:cb:8f:e9:8b:9c:d5:b2:
                    b3:8a:d3:0b:7b:0c:bf:95:e6:1c:89:44:4d:23:06:
                    dd:15:e6:0e:af:35:0a:5a:75:17:a3:95:5b:3a:4b:
                    6d:f4:cd:81:39:65:fb:d1:df:f8:61:ed:e9:b4:d3:
                    01:9b:86:83:19:1e:36:b3:f9:fa:b9:40:79:23:dc:
                    aa:5c:ff:33:b1:6a:07:65:6b:a2:b0:5f:cc:55:43:
                    5f:b1:ee:15:d6:3b:87:69:6d:aa:d4:b1:5b:56:4e:
                    a4:c3:54:d1:0d:84:0e:d9:26:1a:6c:97:f7:31:ec:
                    da:6d:c2:c2:5f:6b:22:33:59:55:1e:2d:10:88:7d:
                    1e:66:4a:02:5b:e0:81:d6:55:bc:33:06:74:4e:7a:
                    89:c1:af:c8:ac:18:f9:ed:d7:b8:2f:67:24:2b:c3:
                    72:ca:15:0b:1a:e6:a7:88:48:f8:f6:85:e6:01:74:
                    30:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:D9:7A:BF:B5:75:85:8D:28:0A:0C:1F:09:83:48:D1:4A:30:8E:C9
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/Qtl6v7V1hY0oCgwfCYNI0Uowjsk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         21:28:0c:af:26:ec:35:74:2a:8e:19:0c:58:0a:60:2f:02:1b:
         df:c9:4b:da:26:61:b9:a5:a5:fc:74:9a:f4:5c:4b:df:0a:71:
         75:79:ea:2a:60:0d:6b:f1:6d:a0:ff:bc:1c:dd:54:1f:f3:f4:
         4c:87:c0:50:8f:e7:19:cb:30:85:91:55:8e:ae:6e:eb:4f:61:
         e8:80:48:5d:4a:28:47:23:8d:9e:1b:7b:73:a0:b8:7d:9b:24:
         1b:f9:6a:50:f1:b0:e9:1a:2e:08:c7:39:2a:cb:17:5d:e2:e9:
         53:da:1c:a2:5b:a6:56:9b:18:b8:3c:f7:ad:4d:5e:3a:67:ce:
         4b:a8:b0:3c:33:8a:2a:9f:f8:83:b5:7c:39:6f:5e:6d:ef:b4:
         3c:11:47:1d:18:82:63:47:37:f2:f8:5b:98:6f:c6:89:d7:51:
         99:1e:7b:0d:e8:05:20:81:e5:9f:80:43:d6:d1:a8:5f:45:39:
         5d:01:51:6e:5b:f3:88:f2:e2:11:1b:59:e8:02:20:9b:64:7b:
         b9:58:7f:0a:b8:29:df:be:f2:c9:a5:d9:17:bd:33:18:b7:25:
         4c:0a:04:b8:53:0a:9a:d0:a8:16:48:af:9b:b2:d7:c6:53:3f:
         df:3f:1e:4c:e4:56:96:c6:ec:86:f1:0d:fa:b9:cc:97:50:84:
         e2:76:d3:bd
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYpJ0sV9UIgd/K5zKRpMLI4SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMWYxNGM4NTA3NDVhN2MzMTJlYTJlYjBiZTAzMDUyZTQ5
NjcyNzUwHhcNMjMwODMxMDQyMTA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MmQ5N2FiZmI1NzU4NThkMjgwYTBjMWYwOTgzNDhkMTRhMzA4ZWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBAPwS9fPyvCc3CHVqNtw5gynQww
NHUHGuaXVqcWKtq45L7xad02PaJUUG8uMsHl3ILPV6YziH8sA/tglWVqL/XClShG
Qv55DL4D3lsnszP9GcuP6Yuc1bKzitMLewy/leYciURNIwbdFeYOrzUKWnUXo5Vb
Oktt9M2BOWX70d/4Ye3ptNMBm4aDGR42s/n6uUB5I9yqXP8zsWoHZWuisF/MVUNf
se4V1juHaW2q1LFbVk6kw1TRDYQO2SYabJf3MezabcLCX2siM1lVHi0QiH0eZkoC
W+CB1lW8MwZ0TnqJwa/IrBj57de4L2ckK8NyyhULGuaniEj49oXmAXQwgQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFELZer+1dYWNKAoMHwmDSNFKMI7JMB8GA1UdIwQY
MBaAFKofFMhQdFp8MS6i6wvgMFLklnJ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQt
ODNmY2QyMjU0ODJhLzEvUXRsNnY3VjFoWTBvQ2d3ZkNZTkkwVW93anNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQtODNmY2QyMjU0ODJh
LzEvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACEoDK8m7DV0Ko4ZDFgK
YC8CG9/JS9omYbmlpfx0mvRcS98KcXV56ipgDWvxbaD/vBzdVB/z9EyHwFCP5xnL
MIWRVY6ubutPYeiASF1KKEcjjZ4be3OguH2bJBv5alDxsOkaLgjHOSrLF13i6VPa
HKJbplabGLg8961NXjpnzkuosDwziiqf+IO1fDlvXm3vtDwRRx0YgmNHN/L4W5hv
xonXUZkeew3oBSCB5Z+AQ9bRqF9FOV0BUW5b84jy4hEbWegCIJtke7lYfwq4Kd++
8sml2Re9Mxi3JUwKBLhTCprQqBZIr5uy18ZTP98/HkzkVpbG7IbxDfq5zJdQhOJ2
070=
-----END CERTIFICATE-----