Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/c0SrKZb7Y0bHo42BoeOdnRmM3rU.roa
File:                     c0SrKZb7Y0bHo42BoeOdnRmM3rU.roa (raw, json)
Hash identifier:          X8T6nmLpJ4sAIaMaqFtw0fjmZQ7XYBEgwiJZvgWFAUc=
Subject key identifier:   73:44:AB:29:96:FB:63:46:C7:A3:8D:81:A1:E3:9D:9D:19:8C:DE:B5
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A7FA804E6CBC4F8743B21689EC0EE4FFC
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/c0SrKZb7Y0bHo42BoeOdnRmM3rU.roa
Signing time:             Sun 10 Sep 2023 15:13:52 +0000
ROA not before:           Sun 10 Sep 2023 15:13:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:7f:a8:04:e6:cb:c4:f8:74:3b:21:68:9e:c0:ee:4f:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep 10 15:13:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7344ab2996fb6346c7a38d81a1e39d9d198cdeb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:aa:d0:7e:c8:5d:0c:d3:5e:a5:3a:0f:b7:0e:
                    01:ab:44:0f:37:c2:56:b8:57:41:b1:65:c0:ed:be:
                    d0:be:a0:ec:4a:9d:d8:31:db:6b:fc:f7:63:59:d9:
                    47:94:21:24:b0:1e:52:57:d2:b3:47:68:44:64:5a:
                    9a:6b:e7:75:9b:7a:1c:77:29:65:79:c9:02:f5:7c:
                    e6:64:fc:6c:d5:cb:52:ee:bb:98:41:73:bc:eb:85:
                    1c:11:6d:88:66:98:6f:69:85:11:b4:0c:0d:ad:b2:
                    5b:05:62:23:a9:00:ed:68:ed:e5:f0:55:50:c8:77:
                    95:93:a4:bc:aa:c8:b6:57:81:2d:59:7d:72:24:5c:
                    f7:83:5d:4f:c1:8d:e0:ac:f8:d4:f0:69:ea:cc:ea:
                    94:84:09:1b:3b:4a:7f:d2:44:35:f5:f9:ee:70:6b:
                    6a:92:e4:ea:1f:be:1a:49:6a:40:ce:9d:61:d6:07:
                    90:a0:47:87:70:30:85:35:ed:e3:f2:e7:a5:4b:ca:
                    82:0e:b9:9f:27:45:e4:c2:14:c0:7e:bf:32:f2:6f:
                    57:12:a6:c1:fa:f0:76:d8:2a:0a:bf:d8:6b:c2:b0:
                    ba:74:6e:d7:d9:4f:f3:28:da:7f:9f:b2:da:33:a5:
                    04:b4:75:a8:c8:44:c1:83:3e:21:9b:d6:90:c9:c1:
                    25:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:44:AB:29:96:FB:63:46:C7:A3:8D:81:A1:E3:9D:9D:19:8C:DE:B5
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/c0SrKZb7Y0bHo42BoeOdnRmM3rU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         62:9c:94:31:ea:d2:67:31:13:3d:3b:d3:30:92:61:f8:7d:f5:
         df:ac:cb:f5:2e:0f:f9:b1:49:c2:34:cb:a8:32:30:0d:79:12:
         1e:cb:5e:62:ca:3c:61:59:bc:18:8f:fd:3a:1e:9e:0e:9d:39:
         fa:c1:a0:bf:5a:8e:c9:9a:c7:8b:68:c9:47:05:ac:34:cb:33:
         52:c8:ef:4c:73:46:f8:96:8a:b5:ad:7f:59:e8:6b:66:64:1d:
         0e:5c:76:66:c7:28:f0:2a:dc:c6:36:cf:5a:7e:56:88:f9:42:
         0c:f6:a4:25:ae:d9:e9:d2:b5:97:a6:80:09:2c:73:7b:94:85:
         2d:30:ce:62:64:ed:05:ed:22:7f:0a:ec:33:a3:b1:0c:68:07:
         86:82:35:dd:6d:fb:49:52:20:e7:71:35:8f:bc:c7:71:4c:ce:
         53:b5:e7:ad:e3:bc:e1:37:43:dd:fd:ed:b4:64:40:ab:cb:14:
         df:42:db:48:79:62:0f:21:f2:93:3f:bd:ba:6c:6b:3f:5b:bc:
         6a:39:51:ce:71:3a:55:25:34:51:cf:ff:1c:09:e9:11:07:81:
         7d:62:da:03:a8:6c:c1:e0:07:73:60:f5:18:a9:8a:1b:98:14:
         9d:ed:87:32:cc:f8:4c:87:92:d4:1a:99:8e:aa:57:55:22:7a:
         42:91:6d:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----