Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/YQ9G-bz1CxHuJCM3l2IDoderREI.roa
File:                     YQ9G-bz1CxHuJCM3l2IDoderREI.roa (raw, json)
Hash identifier:          7Je7+F9ZKmdTUS3TqOIDnjZp2CJXOSf9w1plSEMw0WM=
Subject key identifier:   61:0F:46:F9:BC:F5:0B:11:EE:24:23:37:97:62:03:A1:D7:AB:44:42
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A54F78E7E42FE38286163713D5B976308
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/YQ9G-bz1CxHuJCM3l2IDoderREI.roa
Signing time:             Sat 02 Sep 2023 08:17:04 +0000
ROA not before:           Sat 02 Sep 2023 08:17:04 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:54:f7:8e:7e:42:fe:38:28:61:63:71:3d:5b:97:63:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep  2 08:17:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=610f46f9bcf50b11ee242337976203a1d7ab4442
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:0e:70:74:c5:c1:f6:24:6a:dc:97:05:6a:df:
                    16:5c:1c:1e:e4:c4:b2:c4:fe:a7:e6:b4:83:fe:54:
                    57:83:58:ee:89:f7:7d:31:b5:8b:83:cf:51:0b:32:
                    a9:30:b7:ef:2f:29:f1:f2:55:ba:11:bf:07:84:73:
                    88:b6:37:af:46:7d:8c:ac:40:eb:e6:06:f3:ac:bc:
                    cf:c6:e6:f3:6e:d0:ed:8a:30:3e:b8:3e:fb:ee:7d:
                    c2:20:f8:d0:5d:1f:94:7e:96:79:fe:a9:01:fa:67:
                    e1:83:73:a4:26:38:14:ca:a1:1c:3d:e4:1e:25:c4:
                    85:fb:8b:4e:87:67:76:50:38:34:8d:e4:6a:2a:9c:
                    4d:ae:62:4a:57:25:3d:83:43:62:47:fa:6a:f8:6d:
                    52:8d:11:31:35:10:73:45:4e:28:f9:ea:83:80:22:
                    a1:6c:ad:cb:a8:40:c5:82:07:21:2c:d2:ff:76:69:
                    13:e5:05:2a:de:e0:c3:b5:ed:32:82:e8:5d:b1:3f:
                    60:f9:00:62:5a:25:a9:e9:ae:f3:bb:08:3c:f4:c3:
                    e4:e4:fa:82:d1:2f:85:c2:30:0f:c2:e4:2e:42:e4:
                    98:8c:86:db:09:92:5d:87:3a:86:ca:8a:ac:e6:9a:
                    e0:58:9a:87:a8:5c:5d:3a:d2:2e:96:63:f5:2a:fe:
                    f1:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:0F:46:F9:BC:F5:0B:11:EE:24:23:37:97:62:03:A1:D7:AB:44:42
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/YQ9G-bz1CxHuJCM3l2IDoderREI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         3f:c0:29:e2:96:7a:6c:a5:9d:dd:43:d9:37:37:1f:52:02:e1:
         e6:17:47:24:47:a4:f0:13:97:3b:7c:08:cf:64:ba:40:87:85:
         91:9c:ca:52:65:04:f0:4e:34:dc:ca:9c:47:6e:a5:06:35:ec:
         c2:4a:16:67:c2:19:e3:e7:0a:69:f7:9b:73:86:6d:59:71:06:
         c1:62:25:d2:a0:56:19:13:b6:00:15:dd:ed:47:f0:db:df:07:
         f0:99:14:55:75:6d:79:2e:d7:88:09:80:69:d1:0f:4d:db:ae:
         e9:56:4a:7f:6b:36:b5:ec:6d:14:09:2f:84:98:b4:15:1a:c1:
         85:e8:d0:54:35:99:e7:05:2b:02:1e:5c:d2:dd:c5:3a:9a:9c:
         e4:f0:c1:bf:6f:89:88:75:d1:19:a8:e3:08:ec:5f:1e:4d:5f:
         aa:b1:36:01:44:b8:b4:89:8d:ee:4d:05:96:93:43:17:ad:a4:
         1d:5a:fc:55:3d:e3:ca:3e:11:a1:46:89:b0:c0:5c:fe:9c:f6:
         60:c0:ff:61:fc:0f:59:7a:de:6c:a9:d6:fd:bf:ed:45:35:b3:
         d5:8d:37:a0:9f:d1:11:06:2a:1a:86:93:91:71:62:4e:95:57:
         bb:86:82:7c:3a:81:71:a2:24:34:71:5c:3e:d7:7d:96:a3:c2:
         42:02:fa:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----