Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/eP67j9YCebYFUQDRmCh8L6Afd9s.roa
File:                     eP67j9YCebYFUQDRmCh8L6Afd9s.roa (raw, json)
Hash identifier:          0pBpv7/l2JSIbzxcTSq7I0i7aeRGdN+qahCuxfhHqlA=
Subject key identifier:   78:FE:BB:8F:D6:02:79:B6:05:51:00:D1:98:28:7C:2F:A0:1F:77:DB
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A77E63DC945F2BB62FF6BEA4954EE5F07
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/eP67j9YCebYFUQDRmCh8L6Afd9s.roa
Signing time:             Sat 09 Sep 2023 03:04:52 +0000
ROA not before:           Sat 09 Sep 2023 03:04:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18a:77e6:2e7c/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:77:e6:3d:c9:45:f2:bb:62:ff:6b:ea:49:54:ee:5f:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep  9 03:04:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=78febb8fd60279b6055100d198287c2fa01f77db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:87:6d:34:9e:cb:28:5a:72:79:d6:7f:58:e3:
                    a9:eb:3b:38:04:2d:fa:d6:40:89:4b:27:e1:74:6b:
                    02:f5:5f:6a:f9:48:6e:16:05:4e:6d:26:9d:91:7d:
                    39:97:67:8b:e3:e3:96:cc:20:6c:70:16:a1:97:79:
                    6e:36:76:73:b8:e7:c5:a7:67:48:f7:65:4d:81:c9:
                    60:b5:7e:95:e1:ae:1d:58:19:40:33:18:42:36:99:
                    0b:92:4d:3c:cc:84:79:f2:6e:26:1b:33:9a:33:8c:
                    02:9b:37:70:5c:8b:e5:0d:d5:89:62:28:1d:be:33:
                    36:56:ba:43:69:56:29:ce:25:ed:8d:68:9e:e8:ab:
                    bb:b0:f9:c0:56:ed:81:06:9e:e1:c8:f7:79:b5:6f:
                    da:6d:69:ad:23:91:18:9e:db:ab:1f:6e:6b:0f:c6:
                    a6:e2:59:30:56:9e:38:97:4a:2d:43:39:ac:9f:91:
                    db:bb:f4:db:c8:fc:07:eb:dd:ea:f1:78:35:89:fc:
                    65:c6:5e:b7:eb:18:38:da:c9:e2:82:8c:01:9d:6d:
                    ae:c1:d4:0b:09:90:de:4c:f4:8c:eb:88:26:81:43:
                    b2:67:2c:09:d0:7b:f9:94:52:c8:d6:a9:19:ec:74:
                    36:b6:2b:08:3f:bd:0f:84:cf:51:54:13:11:9a:38:
                    b2:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:FE:BB:8F:D6:02:79:B6:05:51:00:D1:98:28:7C:2F:A0:1F:77:DB
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/eP67j9YCebYFUQDRmCh8L6Afd9s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         a8:f2:8a:ed:74:e4:18:d6:ff:a7:da:0e:d0:ff:d8:85:59:77:
         23:c4:4e:96:c9:f5:58:f4:74:72:10:8f:6e:77:ef:91:79:9a:
         75:5d:6b:f5:b1:99:11:af:ab:67:8f:df:db:d1:7f:4d:76:c8:
         d1:12:94:bf:e8:d6:2c:02:7b:5e:be:cf:66:c7:e4:6a:fd:54:
         cf:9f:da:95:21:61:1c:b0:9c:89:cd:26:c7:75:a9:9a:82:63:
         28:e3:bc:50:c0:2b:fd:fc:3f:10:eb:2b:95:f0:6a:26:3e:bc:
         58:e5:8f:47:85:46:88:53:c8:de:3a:77:df:f5:24:73:4e:ce:
         bf:f6:7b:9d:70:cf:4a:26:e1:04:f2:63:b1:62:18:f2:64:3f:
         14:33:18:3d:80:ea:e6:89:3c:6e:3c:72:43:d3:64:24:4b:28:
         19:b9:cd:f0:c1:7a:15:b0:9f:3b:8c:33:46:29:ef:bc:17:af:
         b8:b0:68:24:9d:a8:c0:cd:6e:6f:c8:00:78:94:7e:15:5d:5e:
         c5:4b:2f:f4:33:8b:65:45:08:b7:8e:f6:ba:a9:f2:32:5b:e3:
         b5:3a:b8:06:c0:62:50:ee:72:11:2c:d6:f6:26:6a:2d:76:23:
         63:d0:4a:22:35:4c:37:1a:ba:35:55:fb:11:00:7e:a8:cd:ff:
         6a:f6:da:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----