Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/Xvc7i7QSwbdb-47gvZAr90k0KmE.roa
File:                     Xvc7i7QSwbdb-47gvZAr90k0KmE.roa (raw, json)
Hash identifier:          i2I8WIMj04jGr+4yJlYl6S4vDLifjVktA+5ZXDTBZ44=
Subject key identifier:   5E:F7:3B:8B:B4:12:C1:B7:5B:FB:8E:E0:BD:90:2B:F7:49:34:2A:61
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A9D0BC9F565962E8221AAD3C4141CEE12
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/Xvc7i7QSwbdb-47gvZAr90k0KmE.roa
Signing time:             Sat 16 Sep 2023 08:11:50 +0000
ROA not before:           Sat 16 Sep 2023 08:11:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:9d:0b:c9:f5:65:96:2e:82:21:aa:d3:c4:14:1c:ee:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep 16 08:11:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5ef73b8bb412c1b75bfb8ee0bd902bf749342a61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:62:3c:41:ba:47:7a:8d:16:05:63:84:1f:96:
                    b0:03:10:78:18:36:97:d3:57:c4:66:d1:44:6e:48:
                    c9:a1:49:8b:80:9e:45:a2:db:9a:4f:9a:fc:86:cb:
                    cf:67:9d:77:8c:c5:62:35:e8:d0:6a:8d:ab:7c:a7:
                    b5:3f:f8:b0:c0:e0:6b:e7:b7:e4:6c:c5:43:9d:1e:
                    b7:68:83:bd:fd:5b:b8:7e:02:f1:58:23:35:e1:9e:
                    4a:39:75:dc:ee:98:ce:9a:c7:4d:6e:63:49:f8:25:
                    58:13:ff:99:6f:34:7f:46:31:bc:e2:3e:f3:3c:14:
                    4c:fe:2c:bc:0a:7e:65:18:e6:2d:13:32:8f:1e:6d:
                    af:1d:fc:c3:09:9a:08:ea:ec:d8:b8:15:07:1b:07:
                    18:5b:49:e6:cb:95:81:88:13:78:6c:8f:45:8b:69:
                    83:1d:f8:97:f5:1d:c3:7f:80:65:b6:64:a5:e9:ab:
                    ec:04:6b:ec:81:e0:16:c3:ed:a0:05:0e:57:00:b8:
                    35:e8:e6:f1:27:ef:8d:e2:ac:6d:4f:25:5e:62:5f:
                    56:e2:48:67:4c:2e:71:78:88:25:54:ea:19:55:b3:
                    b6:19:13:9a:10:e2:5a:44:48:e2:7e:44:15:b4:11:
                    f1:07:c7:0e:c4:e5:89:cf:60:ce:2a:04:4e:38:4c:
                    f8:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:F7:3B:8B:B4:12:C1:B7:5B:FB:8E:E0:BD:90:2B:F7:49:34:2A:61
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/Xvc7i7QSwbdb-47gvZAr90k0KmE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         24:f4:79:9c:de:84:c8:b6:8c:96:73:b4:0b:56:e9:41:22:63:
         d5:0e:00:30:c3:04:f1:8b:cf:dc:74:f2:59:10:02:18:fd:f2:
         13:0e:d0:38:51:61:b9:4e:9c:15:c6:56:81:1e:0f:b0:54:b6:
         3f:e4:3f:67:24:60:0d:4a:f7:2f:71:bf:f2:b2:b1:a2:6a:e5:
         7c:93:43:f3:9e:5d:f2:98:11:39:e9:a5:a6:bc:d7:ec:35:d2:
         5d:ce:ad:be:c1:55:f0:7a:1d:91:46:a4:0c:97:34:20:92:56:
         16:de:d1:15:bc:59:bc:46:76:b1:be:00:e6:49:98:ee:28:55:
         b8:f9:68:3d:2b:7d:3c:19:a5:44:b1:e5:f1:0d:58:ee:d9:37:
         75:c9:a3:7d:24:67:66:af:dd:01:d8:b8:31:08:2b:6f:22:e9:
         a8:6e:58:ac:5d:66:36:da:ad:cf:62:2a:e0:ba:2a:2e:a1:50:
         ce:06:70:7a:ce:2f:56:dd:80:26:89:66:ad:4f:de:eb:e0:ee:
         ae:e8:5b:61:c8:65:1f:0d:ec:12:3d:ff:7e:cf:b8:16:1b:7b:
         ab:ab:36:7b:e0:37:97:03:52:33:ea:23:27:fa:22:17:d1:ee:
         ed:41:25:9e:e6:34:01:16:67:45:1c:41:27:a1:9c:0e:31:a9:
         dd:d4:0a:51
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYqdC8n1ZZYugiGq08QUHO4SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMWYxNGM4NTA3NDVhN2MzMTJlYTJlYjBiZTAzMDUyZTQ5
NjcyNzUwHhcNMjMwOTE2MDgxMTUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZWY3M2I4YmI0MTJjMWI3NWJmYjhlZTBiZDkwMmJmNzQ5MzQyYTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5GI8QbpHeo0WBWOEH5awAxB4GDaX
01fEZtFEbkjJoUmLgJ5FotuaT5r8hsvPZ513jMViNejQao2rfKe1P/iwwOBr57fk
bMVDnR63aIO9/Vu4fgLxWCM14Z5KOXXc7pjOmsdNbmNJ+CVYE/+ZbzR/RjG84j7z
PBRM/iy8Cn5lGOYtEzKPHm2vHfzDCZoI6uzYuBUHGwcYW0nmy5WBiBN4bI9Fi2mD
HfiX9R3Df4BltmSl6avsBGvsgeAWw+2gBQ5XALg16ObxJ++N4qxtTyVeYl9W4khn
TC5xeIglVOoZVbO2GROaEOJaREjifkQVtBHxB8cOxOWJz2DOKgROOEz4yQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFF73O4u0EsG3W/uO4L2QK/dJNCphMB8GA1UdIwQY
MBaAFKofFMhQdFp8MS6i6wvgMFLklnJ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQt
ODNmY2QyMjU0ODJhLzEvWHZjN2k3UVN3YmRiLTQ3Z3ZaQXI5MGswS21FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQtODNmY2QyMjU0ODJh
LzEvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACT0eZzehMi2jJZztAtW
6UEiY9UOADDDBPGLz9x08lkQAhj98hMO0DhRYblOnBXGVoEeD7BUtj/kP2ckYA1K
9y9xv/KysaJq5XyTQ/OeXfKYETnppaa81+w10l3Orb7BVfB6HZFGpAyXNCCSVhbe
0RW8WbxGdrG+AOZJmO4oVbj5aD0rfTwZpUSx5fENWO7ZN3XJo30kZ2av3QHYuDEI
K28i6ahuWKxdZjbarc9iKuC6Ki6hUM4GcHrOL1bdgCaJZq1P3uvg7q7oW2HIZR8N
7BI9/37PuBYbe6urNnvgN5cDUjPqIyf6IhfR7u1BJZ7mNAEWZ0UcQSehnA4xqd3U
ClE=
-----END CERTIFICATE-----