Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/UZVZm9aD8hNpPQy6cYI1qD3G7SM.roa
File:                     UZVZm9aD8hNpPQy6cYI1qD3G7SM.roa (raw, json)
Hash identifier:          HI54WLi6ekvtYeq4gBqmJvu3nK0BAy8vlm77uhg1ddM=
Subject key identifier:   51:95:59:9B:D6:83:F2:13:69:3D:0C:BA:71:82:35:A8:3D:C6:ED:23
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018AA123270EBCD4CDE4CC0B1E31247DD8E0
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/UZVZm9aD8hNpPQy6cYI1qD3G7SM.roa
Signing time:             Sun 17 Sep 2023 03:15:50 +0000
ROA not before:           Sun 17 Sep 2023 03:15:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:a1:23:27:0e:bc:d4:cd:e4:cc:0b:1e:31:24:7d:d8:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep 17 03:15:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5195599bd683f213693d0cba718235a83dc6ed23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:81:f2:89:00:cd:07:5d:9c:a6:02:6e:a6:ae:
                    23:b3:58:2b:44:35:e3:bd:90:a6:05:c0:42:24:7f:
                    99:ca:36:01:0e:30:10:79:ed:f8:07:16:ab:74:e3:
                    ee:a5:34:73:e6:f9:50:e3:af:78:66:c1:92:a0:6a:
                    24:b7:78:9a:37:51:74:17:fc:34:fd:e3:2d:ad:ae:
                    76:04:fb:57:bc:6e:53:ac:89:cc:1b:14:5c:24:8d:
                    d1:f2:3a:17:2e:9d:e9:39:f7:52:7f:bf:42:b2:c8:
                    0d:5b:1d:7b:9b:4c:40:f1:96:06:11:3c:79:bd:c5:
                    83:6b:2d:d5:d0:9b:b3:ef:d5:00:33:94:20:1b:f2:
                    ef:7e:8e:4b:4f:7b:6f:9e:bc:8b:58:40:e0:e0:cc:
                    50:f8:5a:b8:25:10:ca:00:f2:6c:98:ad:0f:44:ff:
                    2b:53:b6:c6:db:27:21:d2:28:10:2a:8c:80:da:9c:
                    8b:d9:3d:71:42:49:cd:c0:74:fa:d0:55:96:5d:9b:
                    c4:0f:e7:9c:c8:1b:ac:75:60:61:97:74:15:be:e3:
                    99:67:6e:f4:80:f6:92:1c:e7:53:9f:07:52:6f:1e:
                    19:c6:e7:85:47:2c:82:d7:14:02:4d:e6:12:1e:64:
                    ca:24:22:67:cf:29:b9:be:b1:65:82:75:e2:54:14:
                    7c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:95:59:9B:D6:83:F2:13:69:3D:0C:BA:71:82:35:A8:3D:C6:ED:23
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/UZVZm9aD8hNpPQy6cYI1qD3G7SM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         11:b0:38:49:e3:00:1a:23:de:24:c6:ba:3a:a2:9a:24:30:2e:
         12:c4:62:3c:d4:ec:92:8a:3d:0c:cd:c3:c5:a4:5c:bc:28:61:
         a2:a2:c2:ff:b3:d8:56:a7:26:a7:46:be:82:af:7b:2a:d4:c4:
         0f:04:7d:46:1e:54:a8:6e:1e:86:9c:3c:49:c0:bd:a8:f9:57:
         99:db:72:68:8d:3b:41:1d:44:7e:ff:e7:c4:72:f2:18:c6:54:
         f3:8c:a6:07:79:93:9d:32:08:d6:33:53:49:20:05:b6:b6:de:
         5b:0f:95:0f:aa:64:a1:ba:fc:ec:76:f1:d6:6d:c5:27:05:5c:
         cb:cf:ea:cf:c0:02:60:58:ac:18:4d:de:12:c1:0e:ed:92:fd:
         de:1b:3f:33:2b:5f:2b:89:c6:4e:16:cb:d7:d4:f1:93:ef:ca:
         21:12:3f:ab:3d:6d:50:f2:83:90:37:0a:a9:a4:31:55:0e:62:
         95:aa:22:56:1c:d6:5b:c8:aa:1a:16:87:3a:2d:0c:07:b1:3b:
         a1:48:ac:60:be:1e:2f:62:c6:d7:d0:ba:e8:cf:a0:f2:9f:20:
         3c:fe:0f:30:a5:64:eb:55:7c:c2:04:cd:29:a5:45:60:e9:f8:
         4f:17:d5:0c:47:0e:c3:3f:f5:f7:25:3b:6a:0d:5b:e0:bc:10:
         6c:98:36:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----