Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/e6mlIvX09pyHJT09dpeiIk6BNuQ.roa
File:                     e6mlIvX09pyHJT09dpeiIk6BNuQ.roa (raw, json)
Hash identifier:          f+DngdohmpeAU4FlnHydxE6gUIclCvpUHX5Gxxd2ypQ=
Subject key identifier:   7B:A9:A5:22:F5:F4:F6:9C:87:25:3D:3D:76:97:A2:22:4E:81:36:E4
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A4B5435AB4773CFF4562E6F1EA979B33C
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/e6mlIvX09pyHJT09dpeiIk6BNuQ.roa
Signing time:             Thu 31 Aug 2023 11:22:04 +0000
ROA not before:           Thu 31 Aug 2023 11:22:04 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:4b:54:35:ab:47:73:cf:f4:56:2e:6f:1e:a9:79:b3:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Aug 31 11:22:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7ba9a522f5f4f69c87253d3d7697a2224e8136e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e2:e3:08:b4:b4:d4:68:8c:87:2a:64:b8:40:
                    66:2a:0e:57:3f:6e:e0:f5:fc:ca:62:ba:df:80:bc:
                    1b:4b:85:a7:6d:03:ca:b4:bc:b0:13:ab:2e:2b:28:
                    4e:3d:b5:21:dd:fa:ff:23:77:56:b3:c7:d9:a0:c1:
                    1c:49:90:cb:be:73:ef:32:0e:16:58:2e:ea:ef:b5:
                    25:54:91:98:13:8f:7d:e2:07:95:6f:c9:e7:88:07:
                    21:97:82:b3:9f:75:92:d2:b3:31:4c:fb:05:b0:1d:
                    18:c9:6c:e2:2c:98:06:60:ae:20:90:18:bb:71:17:
                    d1:e7:82:bd:2b:a2:49:43:3e:25:59:e1:25:50:76:
                    72:99:db:14:ac:75:cf:3e:39:f8:5a:00:36:54:49:
                    fb:ab:b5:e4:6c:5e:ec:83:0d:a5:35:7e:00:21:9a:
                    93:3d:8e:ae:e0:43:39:74:eb:5d:b5:38:64:10:83:
                    74:98:bb:4e:46:21:7b:b0:37:c5:f0:51:ae:75:cd:
                    00:49:08:cf:3e:b5:26:4e:21:3e:36:a6:18:2c:44:
                    0b:87:e5:e6:15:78:b2:1b:3b:1d:d6:0c:71:64:c4:
                    3e:ec:4d:6a:5c:33:32:b5:ed:9e:84:6c:cc:2a:58:
                    98:2d:13:70:82:c7:30:53:eb:35:5f:d9:12:6e:7f:
                    5b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:A9:A5:22:F5:F4:F6:9C:87:25:3D:3D:76:97:A2:22:4E:81:36:E4
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/e6mlIvX09pyHJT09dpeiIk6BNuQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         01:c7:e3:67:b4:e3:3c:49:8e:df:c3:9a:a6:62:74:6f:61:33:
         0c:51:02:50:f6:dc:91:b7:aa:69:1d:70:e1:c9:17:53:d0:9f:
         a9:cf:e1:b5:c1:b6:22:ad:f9:19:c8:29:76:9d:8a:82:fa:34:
         78:dd:6f:69:bf:ef:cc:07:35:2f:3f:85:dd:7c:40:99:91:5a:
         b1:e8:e1:17:07:11:b0:88:14:98:d4:a6:3a:9b:de:a2:3d:68:
         d4:b8:a7:b2:c6:cb:2b:2f:e5:35:e0:b0:67:7a:4f:3e:dc:80:
         85:54:cf:93:01:4e:04:43:38:b5:7f:2e:83:62:c4:65:b5:cf:
         6e:eb:ac:f9:1a:22:6e:0c:2f:3a:0f:29:17:cf:37:95:40:72:
         e9:3d:ae:33:eb:13:5f:d6:d7:1b:72:21:a9:71:09:38:da:6d:
         0f:62:5c:03:e0:36:9d:5a:c7:25:48:98:e1:cf:59:4f:13:c1:
         8d:19:8d:6c:ae:f5:24:5f:97:a5:98:61:27:97:a5:a7:46:d0:
         8f:79:22:33:b0:07:00:d1:6b:73:bf:84:b3:d7:d6:d3:9d:57:
         58:14:61:b7:68:21:86:b3:3e:a0:d4:90:58:7d:e5:14:4d:61:
         f3:48:f6:bf:1b:87:ae:b3:4a:0b:48:62:66:f0:94:5c:04:f5:
         88:ce:e3:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----