Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/_cmuiZ3_2Q-rI9DQS6OkAs0TcfE.roa
File:                     _cmuiZ3_2Q-rI9DQS6OkAs0TcfE.roa (raw, json)
Hash identifier:          y40KG35Ow3ja/hlJO2J3YSx3CBARyePqy2Fs/05YsgI=
Subject key identifier:   FD:C9:AE:89:9D:FF:D9:0F:AB:23:D0:D0:4B:A3:A4:02:CD:13:71:F1
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A6EB47313F3B1EB68423FB195FA628447
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/_cmuiZ3_2Q-rI9DQS6OkAs0TcfE.roa
Signing time:             Thu 07 Sep 2023 08:13:54 +0000
ROA not before:           Thu 07 Sep 2023 08:13:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:6e:b4:73:13:f3:b1:eb:68:42:3f:b1:95:fa:62:84:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep  7 08:13:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fdc9ae899dffd90fab23d0d04ba3a402cd1371f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:66:2b:aa:69:51:91:cb:62:7c:87:ca:c2:c6:
                    9c:f2:be:de:40:76:8b:8c:5e:44:88:64:5c:8f:5c:
                    d9:f4:55:68:b8:ae:2d:3a:45:dd:7f:f3:4b:31:85:
                    9f:52:03:82:2f:67:05:02:e3:41:ea:67:5e:b0:fb:
                    c8:54:82:4b:b0:48:9d:89:8b:5c:1f:86:2a:ba:88:
                    bb:fc:f3:90:06:95:19:bf:36:7d:d0:9a:48:e9:70:
                    55:e1:b7:aa:c2:ed:89:66:3f:c7:d5:e1:6c:c7:de:
                    2a:20:74:c1:7b:3e:a2:bf:10:45:37:75:6f:fe:ce:
                    f7:22:d4:15:7c:c4:10:24:42:cd:60:60:48:fc:77:
                    28:82:b8:0b:87:fc:99:65:20:50:43:7e:c0:7c:6e:
                    ef:03:59:3a:a2:ef:81:42:12:81:78:32:4e:b0:07:
                    ed:db:66:8f:0a:23:1a:45:30:15:6d:10:13:96:e2:
                    8a:6a:04:0e:93:98:7d:bf:99:fd:1e:d7:ee:0a:3d:
                    cb:49:a3:a9:47:34:02:72:5c:00:6a:2a:7d:da:2f:
                    2c:53:24:da:54:46:f9:b5:6b:90:ca:49:8a:11:8c:
                    9a:08:e0:87:97:66:b5:c4:bd:15:ee:80:f8:13:c9:
                    99:78:4b:14:ed:fb:98:31:98:69:54:cb:07:8b:3c:
                    9e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:C9:AE:89:9D:FF:D9:0F:AB:23:D0:D0:4B:A3:A4:02:CD:13:71:F1
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/_cmuiZ3_2Q-rI9DQS6OkAs0TcfE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         95:9b:79:bc:79:63:4b:91:16:52:c3:a6:52:a2:43:1b:d0:97:
         c4:35:8e:7c:9b:52:2c:bc:8e:26:06:c2:6f:79:85:22:f9:aa:
         d2:97:6c:26:d8:e8:af:ab:6b:b6:2b:0a:ec:7e:89:56:a8:34:
         c1:25:08:56:58:a8:15:c5:83:1d:8f:1d:46:2b:c6:fd:2a:21:
         87:36:f5:c0:9e:53:35:7e:c3:3f:50:db:73:87:39:83:71:a7:
         66:98:6c:47:de:6d:9c:29:26:b9:a0:1c:29:5c:31:49:c2:95:
         2f:08:04:36:44:0e:98:93:fb:c7:27:83:5c:56:b4:83:11:70:
         80:3e:98:cc:0d:f8:c3:3f:aa:7e:e4:1c:61:44:c3:76:73:f3:
         70:9b:c4:75:08:aa:77:69:c2:02:0c:72:ab:e4:e7:ee:74:f2:
         81:16:b0:42:1b:c6:89:e3:2b:53:f4:c3:89:e9:8d:72:38:19:
         4f:a5:8d:aa:c2:1a:b5:04:24:d8:3e:76:65:f3:ae:93:c2:18:
         9e:6b:76:a4:9f:ce:fc:1a:72:3d:7c:f3:7f:35:06:60:92:1a:
         31:7c:f9:43:60:5d:e2:f1:9d:36:bb:d8:a0:5d:ab:36:5a:c4:
         c5:20:4f:f1:48:41:b8:c9:4a:18:d1:a9:88:4f:0c:4c:53:65:
         67:2d:b7:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----