Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/dVPQO7S7IWixAjnroKd1XuIsE1o.roa
File:                     dVPQO7S7IWixAjnroKd1XuIsE1o.roa (raw, json)
Hash identifier:          yRwW8xChH93Q4ZgJ2zpRLAjz+SSYDFduU+YKCBFtq5c=
Subject key identifier:   75:53:D0:3B:B4:BB:21:68:B1:02:39:EB:A0:A7:75:5E:E2:2C:13:5A
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A83BAC68D8A09AE512C9168688F4EA4E8
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/dVPQO7S7IWixAjnroKd1XuIsE1o.roa
Signing time:             Mon 11 Sep 2023 10:12:50 +0000
ROA not before:           Mon 11 Sep 2023 10:12:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:83:ba:c6:8d:8a:09:ae:51:2c:91:68:68:8f:4e:a4:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep 11 10:12:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7553d03bb4bb2168b10239eba0a7755ee22c135a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ca:a3:29:d7:0d:ee:1e:5f:ba:ff:20:46:46:
                    14:de:66:49:27:71:ad:a8:6a:ad:3c:ec:97:8e:27:
                    9d:42:b4:32:d2:fa:e2:2e:1a:ce:19:e8:64:1e:1f:
                    2f:1a:dc:fe:b5:0c:9a:72:04:21:80:59:5c:12:90:
                    d7:bf:8b:16:87:53:65:40:81:38:31:0d:ef:09:c2:
                    02:a5:dd:2c:4a:bb:9d:3c:46:bd:0b:2f:f2:3f:af:
                    0d:c9:91:d5:bb:0d:2a:cd:21:97:b5:92:9c:cc:11:
                    95:64:b8:42:d8:9d:40:8c:9a:90:95:3c:9b:f5:45:
                    91:0c:77:9b:9a:36:e4:30:b2:1a:58:00:7b:80:4d:
                    31:46:63:32:51:53:3c:f9:0e:c4:5b:24:2d:39:5d:
                    20:d6:ea:d5:6c:b2:28:20:68:58:9f:23:81:8b:87:
                    6e:2a:63:37:74:32:4c:b5:95:f1:5e:9b:46:cb:b5:
                    22:dd:30:87:52:13:47:33:4a:65:41:35:d7:0e:09:
                    3a:e0:8a:c6:dd:e9:3c:f8:c9:21:bf:e1:fe:db:d5:
                    8f:0b:50:de:db:20:33:da:3d:53:3d:15:d9:32:b4:
                    51:9d:dd:df:30:95:fc:7b:a2:10:99:4b:bb:01:47:
                    6d:e9:14:4e:d0:3d:b3:b4:46:2f:23:a7:f6:2b:7b:
                    96:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:53:D0:3B:B4:BB:21:68:B1:02:39:EB:A0:A7:75:5E:E2:2C:13:5A
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/dVPQO7S7IWixAjnroKd1XuIsE1o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         61:4c:4d:fe:42:46:a9:d3:b6:94:08:6d:2a:6b:39:55:85:24:
         c8:70:8a:93:1c:76:fc:63:20:6e:76:fa:ad:8b:94:f1:e1:58:
         eb:b5:38:a8:6a:fc:1f:3b:f5:41:47:70:d9:cb:69:68:00:33:
         fe:de:f0:11:4e:19:45:3d:c2:34:da:1a:44:ab:cd:1d:d8:db:
         b4:a9:ef:a8:32:39:50:ed:47:a6:de:79:90:27:cf:47:6e:cb:
         87:5e:92:ce:2a:6f:e8:d9:00:4c:0b:d0:26:1e:fc:66:9f:2d:
         05:ef:f6:93:75:93:7c:84:ff:6c:2a:52:94:6b:cb:03:9c:bd:
         9f:98:38:17:d0:02:e7:39:95:88:66:c6:05:cd:83:3c:28:12:
         6d:9f:c2:5c:d3:8c:57:87:97:e9:83:fc:73:43:0b:bf:51:ac:
         c4:7c:07:87:be:23:a6:1a:08:ba:b9:a9:ff:e6:51:1f:d7:85:
         85:c9:86:ba:65:1a:40:35:c2:31:22:f5:46:4a:8f:ed:5e:47:
         40:85:47:83:b1:1c:43:00:de:e9:a9:6b:3b:50:41:06:b5:59:
         95:39:52:66:cc:8e:40:29:ed:57:0f:f6:7f:5d:c6:71:02:6f:
         31:08:9d:e2:11:9a:2a:93:c6:11:9e:01:d2:1a:a6:cc:2c:25:
         aa:1a:bc:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----