Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/TjsorNB51cHcUPjkzhYwko0CLmI.roa
File:                     TjsorNB51cHcUPjkzhYwko0CLmI.roa (raw, json)
Hash identifier:          z0Xsvr+B/bfryve3IlMZoNw4xq4MNxXn/8Pm0pObloE=
Subject key identifier:   4E:3B:28:AC:D0:79:D5:C1:DC:50:F8:E4:CE:16:30:92:8D:02:2E:62
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A79A6D954A8EE8C240F890B6CA07BF006
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/TjsorNB51cHcUPjkzhYwko0CLmI.roa
Signing time:             Sat 09 Sep 2023 11:14:52 +0000
ROA not before:           Sat 09 Sep 2023 11:14:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:79:a6:d9:54:a8:ee:8c:24:0f:89:0b:6c:a0:7b:f0:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep  9 11:14:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4e3b28acd079d5c1dc50f8e4ce1630928d022e62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:94:f5:64:c6:69:b8:d9:36:37:c4:6a:84:38:
                    4d:1f:97:a8:6a:1c:43:88:8e:97:17:3f:dc:4f:39:
                    8a:57:39:6e:59:99:6c:34:eb:47:20:b8:ad:38:01:
                    fa:11:e0:7b:33:d0:a8:1c:d0:f6:fa:36:c3:8b:80:
                    76:cf:c5:ca:e1:f0:fd:a5:7e:06:af:12:16:70:e2:
                    5a:10:ef:8e:8f:f4:be:45:8d:dc:76:1a:b5:14:db:
                    e1:ef:8d:74:7f:91:d4:82:d4:fc:3a:48:a6:40:da:
                    54:e2:88:ea:68:53:da:83:ff:c6:1c:e5:20:e8:0c:
                    6f:a3:c1:ad:8a:ec:3b:85:40:4b:50:0f:e2:63:08:
                    4e:93:91:56:c5:27:c7:8b:96:45:ff:1d:72:12:b7:
                    ad:55:67:c0:1f:b3:83:0f:4f:5d:70:ec:4d:fb:0f:
                    15:a2:47:1b:d2:b5:53:a8:e9:3a:6b:28:1c:85:87:
                    e7:53:28:db:48:26:5a:b7:de:ef:99:18:eb:1d:b7:
                    da:e3:23:70:9b:7e:b2:bd:5c:69:6a:f5:7e:60:06:
                    6a:b0:80:be:ef:8f:28:09:ba:4f:52:e9:57:48:85:
                    42:b4:f0:f4:94:8e:e2:47:35:54:22:91:e4:20:65:
                    12:f1:38:f6:5b:b4:be:6a:67:45:38:73:2a:ce:77:
                    f6:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:3B:28:AC:D0:79:D5:C1:DC:50:F8:E4:CE:16:30:92:8D:02:2E:62
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/TjsorNB51cHcUPjkzhYwko0CLmI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         69:97:2f:1c:4b:36:4a:ea:f9:71:ae:9e:17:19:a0:b4:40:cd:
         42:61:56:b3:8a:09:05:86:f3:f7:90:7e:5b:86:45:6a:44:a6:
         19:6b:c9:07:38:30:1e:8f:6b:46:53:32:8e:cd:e9:c9:a6:d9:
         36:f4:cc:44:e2:f3:36:a2:20:34:bf:82:67:07:d9:8a:2d:0f:
         05:ed:e9:f2:47:6f:bf:9e:c6:6f:db:66:17:0f:fd:da:16:07:
         f8:e8:a0:51:48:6a:f7:12:3f:46:5c:c2:26:26:35:e6:af:36:
         8c:81:07:6f:cf:87:0b:61:f5:4b:93:9e:2d:17:ca:7b:b4:f1:
         2c:f3:6d:7e:3b:20:40:42:12:72:c9:e1:85:90:25:c1:18:2a:
         2c:dc:58:7d:c4:f0:71:e2:6c:37:ff:11:44:ad:b2:5b:93:3f:
         be:fc:7d:4e:b2:89:1f:1b:57:57:65:0e:6b:48:23:16:d4:d0:
         7d:e5:a1:61:87:1d:f8:d6:7a:48:1a:85:2f:29:a7:24:19:2e:
         1f:d5:cc:d7:57:10:93:d8:88:80:cb:54:fe:b8:61:93:02:7d:
         e2:00:10:46:5d:df:a9:0b:fd:f4:57:5b:6b:b7:b2:a6:68:5f:
         31:c0:86:e6:26:01:50:38:b7:28:b4:0d:3f:ba:7b:44:5e:4f:
         2f:3a:06:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----