Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/ZCzPnW_l6CdhalMAkFia2r4PeK8.roa
File:                     ZCzPnW_l6CdhalMAkFia2r4PeK8.roa (raw, json)
Hash identifier:          Yt1HUWwqafbO0dCQRHlnE9bvThrUPUO5e8ZeXEKiurs=
Subject key identifier:   64:2C:CF:9D:6F:E5:E8:27:61:6A:53:00:90:58:9A:DA:BE:0F:78:AF
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A8CED821767C7C9A10B577BF27C187B6B
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/ZCzPnW_l6CdhalMAkFia2r4PeK8.roa
Signing time:             Wed 13 Sep 2023 05:04:50 +0000
ROA not before:           Wed 13 Sep 2023 05:04:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18a:8ced:4436/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:8c:ed:82:17:67:c7:c9:a1:0b:57:7b:f2:7c:18:7b:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep 13 05:04:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=642ccf9d6fe5e827616a530090589adabe0f78af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:9d:f5:d5:2c:75:53:91:4a:10:f9:8b:63:d7:
                    f9:92:c1:3a:d2:3f:5b:96:24:a0:f5:7c:91:a1:7d:
                    8c:06:03:03:17:bb:5f:a8:89:51:06:f8:0c:81:1f:
                    3f:50:4f:06:f7:1e:59:be:36:76:a5:35:4e:49:32:
                    eb:51:ce:80:4c:a2:29:e9:04:0a:ad:ce:02:1a:c5:
                    49:50:1c:35:be:c3:9c:f5:06:3b:84:d7:58:7e:63:
                    18:1b:0b:59:98:09:05:f3:70:51:4a:d1:ed:5d:93:
                    39:69:89:31:30:35:94:23:0e:86:67:f1:ce:b1:fb:
                    18:5a:8d:73:7c:3d:4b:41:9d:ea:49:be:9c:34:54:
                    22:94:93:8e:3e:7e:dd:5d:ce:9c:c1:b5:84:ee:f0:
                    38:96:24:5f:9e:ab:73:27:8a:f9:46:42:3c:7e:6d:
                    fc:fa:7f:6b:a6:d7:90:74:94:0b:fa:8f:46:7a:42:
                    aa:10:cc:a7:31:2c:a9:0f:84:c7:48:9a:14:3a:5c:
                    b6:f4:81:87:ca:e9:b1:50:a3:2e:86:a4:e2:f2:e3:
                    e4:c3:1f:27:4c:63:ad:a4:cb:45:85:8a:9f:2b:01:
                    6d:14:11:3a:77:39:df:3d:be:97:45:c1:be:18:5d:
                    22:19:df:41:27:d1:2e:62:1c:10:80:bb:ad:74:0f:
                    1a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:2C:CF:9D:6F:E5:E8:27:61:6A:53:00:90:58:9A:DA:BE:0F:78:AF
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/ZCzPnW_l6CdhalMAkFia2r4PeK8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         15:d2:0d:f8:7f:89:00:80:c4:3a:30:9a:62:93:3d:1b:b4:09:
         9a:7c:95:ba:24:81:89:b8:bb:4d:4c:49:7e:19:ac:fc:54:e3:
         44:15:ad:3b:7c:f9:30:ac:35:a9:1b:a6:0e:4a:58:33:0c:68:
         b0:43:f9:49:b0:65:72:ae:4a:76:c9:6c:37:20:ed:5f:74:43:
         a8:90:42:2c:1b:f3:b4:5a:e1:61:87:02:0b:c1:11:73:7e:05:
         d6:39:b1:77:0a:f1:51:43:e9:61:18:3f:eb:bb:5e:c8:37:88:
         92:8b:99:f9:82:de:8f:19:c0:8f:09:a5:d3:dc:f3:4f:c6:54:
         dd:35:90:00:c6:0b:63:6d:2c:f2:93:0d:48:cd:b2:af:75:e7:
         19:8c:ff:86:81:a9:57:31:1a:f3:8b:7c:db:74:47:8f:31:8b:
         0c:53:86:f7:46:85:2d:b5:41:7f:67:21:d9:96:5f:12:59:28:
         bd:49:f0:79:60:38:bd:49:59:e6:aa:ce:86:1a:e2:2d:56:42:
         96:b2:1b:0d:de:f8:4f:7f:31:f6:8a:2c:72:bc:5c:4a:47:7e:
         61:6c:c7:25:3e:1c:9f:e8:06:9b:76:93:63:34:0a:7b:52:21:
         28:55:10:0b:5d:a5:4e:0c:e4:16:51:7b:f9:d0:cf:b6:c8:0b:
         03:0a:b1:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----