Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/WNIC4TatSNbZVvWBjCMHojTa0jo.roa
File:                     WNIC4TatSNbZVvWBjCMHojTa0jo.roa (raw, json)
Hash identifier:          k5VZ7sR+XbiEy92RBFtNBswfA4SFFLgR7gzc8Uxe6T0=
Subject key identifier:   58:D2:02:E1:36:AD:48:D6:D9:56:F5:81:8C:23:07:A2:34:DA:D2:3A
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A75923B1C371B397C3250B64E86E06993
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/WNIC4TatSNbZVvWBjCMHojTa0jo.roa
Signing time:             Fri 08 Sep 2023 16:13:52 +0000
ROA not before:           Fri 08 Sep 2023 16:13:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:75:92:3b:1c:37:1b:39:7c:32:50:b6:4e:86:e0:69:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep  8 16:13:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=58d202e136ad48d6d956f5818c2307a234dad23a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:70:d9:af:3b:c1:58:e8:bc:c7:8a:3f:19:d2:
                    3f:ca:3b:a3:46:0d:1b:c8:ea:12:94:a4:53:3c:f3:
                    c5:9d:86:61:0c:4a:b7:76:60:81:5b:92:fc:4f:f0:
                    84:92:df:e8:4b:96:bd:0c:37:5d:6a:c8:ed:7b:06:
                    ce:ad:3d:aa:95:5a:ed:1b:4b:b3:00:d2:d5:cd:6f:
                    f3:de:0f:cd:56:6c:89:89:a3:5b:e2:67:c0:81:a9:
                    d7:3b:8c:36:db:42:c2:03:86:cc:7e:d4:8d:78:07:
                    ed:c3:45:95:b0:f0:c8:d3:ee:dd:98:32:fa:f8:f8:
                    13:81:30:2e:ac:cc:07:2e:26:ab:83:a3:91:ad:69:
                    73:d6:1a:f4:d6:69:b1:72:4e:b4:d7:2c:d5:c1:c4:
                    80:44:5d:12:cb:c4:1a:ac:a5:1d:bf:91:ca:12:5d:
                    d2:fb:2b:4f:26:5a:90:d1:9c:28:8b:ac:55:0e:5f:
                    50:67:87:a4:ec:92:de:fd:0d:12:fc:48:5f:d4:16:
                    aa:3d:10:6c:75:df:9f:17:ce:21:f1:d2:00:49:14:
                    18:61:a4:31:bc:83:e5:7b:b4:59:fa:e8:97:bd:88:
                    f8:17:aa:93:3d:eb:20:9a:8e:4f:3a:c4:3c:20:a1:
                    02:91:ff:c4:df:61:43:6f:0a:e5:af:a1:23:26:ff:
                    76:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:D2:02:E1:36:AD:48:D6:D9:56:F5:81:8C:23:07:A2:34:DA:D2:3A
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/WNIC4TatSNbZVvWBjCMHojTa0jo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         44:5a:30:00:00:5a:0a:d9:0d:d6:dd:98:cf:6d:96:37:64:66:
         ce:77:75:55:bc:d2:7e:1c:3a:16:46:db:9f:2d:d6:8f:42:41:
         20:e0:59:75:80:ad:6c:85:b0:1d:a2:83:e9:ab:fe:42:55:c8:
         44:77:42:98:74:18:17:69:89:42:1d:72:e8:2a:e0:56:2d:b4:
         70:49:93:9e:4d:45:e8:ae:a1:aa:83:09:84:01:21:46:6f:f9:
         fe:8e:e0:ca:e0:3a:97:1d:80:f7:f0:2d:6c:f1:0c:2b:84:a6:
         36:5d:08:dc:51:61:de:d6:d3:57:a3:22:e7:e6:e8:68:6b:90:
         ea:76:0f:2b:d4:ac:44:8c:02:bc:34:62:9c:2a:1b:b4:ea:b6:
         f1:64:73:5d:14:09:9c:75:5d:fa:a2:0b:d5:da:ba:24:3f:73:
         b2:8f:45:57:72:2a:7a:61:f8:30:4a:dc:dc:c8:9c:4f:b1:3f:
         13:7f:e4:d5:41:e1:69:83:e7:36:07:85:5f:20:69:64:05:16:
         28:d1:66:e3:06:19:d3:0b:c8:b4:98:6a:dd:a1:30:c8:f6:77:
         4e:01:f3:90:85:82:b8:6c:a8:7e:0d:91:5d:b3:55:a0:fc:8a:
         02:07:dd:19:79:a0:1a:13:b0:3c:8f:83:b2:72:c0:41:7e:f8:
         42:42:15:ae
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYp1kjscNxs5fDJQtk6G4GmTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMWYxNGM4NTA3NDVhN2MzMTJlYTJlYjBiZTAzMDUyZTQ5
NjcyNzUwHhcNMjMwOTA4MTYxMzUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OGQyMDJlMTM2YWQ0OGQ2ZDk1NmY1ODE4YzIzMDdhMjM0ZGFkMjNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3DZrzvBWOi8x4o/GdI/yjujRg0b
yOoSlKRTPPPFnYZhDEq3dmCBW5L8T/CEkt/oS5a9DDddasjtewbOrT2qlVrtG0uz
ANLVzW/z3g/NVmyJiaNb4mfAganXO4w220LCA4bMftSNeAftw0WVsPDI0+7dmDL6
+PgTgTAurMwHLiarg6ORrWlz1hr01mmxck601yzVwcSARF0Sy8QarKUdv5HKEl3S
+ytPJlqQ0Zwoi6xVDl9QZ4ek7JLe/Q0S/Ehf1BaqPRBsdd+fF84h8dIASRQYYaQx
vIPle7RZ+uiXvYj4F6qTPesgmo5POsQ8IKECkf/E32FDbwrlr6EjJv92HQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFjSAuE2rUjW2Vb1gYwjB6I02tI6MB8GA1UdIwQY
MBaAFKofFMhQdFp8MS6i6wvgMFLklnJ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQt
ODNmY2QyMjU0ODJhLzEvV05JQzRUYXRTTmJaVnZXQmpDTUhvalRhMGpvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQtODNmY2QyMjU0ODJh
LzEvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAERaMAAAWgrZDdbdmM9t
ljdkZs53dVW80n4cOhZG258t1o9CQSDgWXWArWyFsB2ig+mr/kJVyER3Qph0GBdp
iUIdcugq4FYttHBJk55NReiuoaqDCYQBIUZv+f6O4MrgOpcdgPfwLWzxDCuEpjZd
CNxRYd7W01ejIufm6GhrkOp2DyvUrESMArw0YpwqG7TqtvFkc10UCZx1XfqiC9Xa
uiQ/c7KPRVdyKnph+DBK3NzInE+xPxN/5NVB4WmD5zYHhV8gaWQFFijRZuMGGdML
yLSYat2hMMj2d04B85CFgrhsqH4NkV2zVaD8igIH3Rl5oBoTsDyPg7JywEF++EJC
Fa4=
-----END CERTIFICATE-----