Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/j0BFg78iz6V7AkfAUGCk63KtFPI.roa
File:                     j0BFg78iz6V7AkfAUGCk63KtFPI.roa (raw, json)
Hash identifier:          2k2OLnva76hhtPHxu0x1++m3R0xWkmLt/9LMWXSIzKE=
Subject key identifier:   8F:40:45:83:BF:22:CF:A5:7B:02:47:C0:50:60:A4:EB:72:AD:14:F2
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A6F576A083AA1C510F1D863901925D8D6
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/j0BFg78iz6V7AkfAUGCk63KtFPI.roa
Signing time:             Thu 07 Sep 2023 11:11:54 +0000
ROA not before:           Thu 07 Sep 2023 11:11:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:6f:57:6a:08:3a:a1:c5:10:f1:d8:63:90:19:25:d8:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep  7 11:11:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8f404583bf22cfa57b0247c05060a4eb72ad14f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0e:85:25:db:82:e7:b0:9c:4e:78:41:3c:de:
                    dc:04:05:aa:08:d4:2f:35:c5:b6:81:73:1c:6c:18:
                    05:d9:27:7d:88:44:de:98:46:87:73:25:91:36:c6:
                    0b:6b:2a:5d:e4:40:3d:00:6a:a4:68:76:99:c6:11:
                    6c:3b:c3:a4:27:1d:68:79:2c:d2:33:6f:e7:9c:b5:
                    f0:24:ed:9f:60:05:67:82:31:1d:14:2b:a5:15:fc:
                    96:a5:57:cd:81:b9:49:ff:93:8f:e5:fd:66:3c:b0:
                    69:b8:14:50:29:e4:b3:47:e2:57:1d:e7:66:38:01:
                    80:46:d1:7b:50:8c:b8:22:5d:eb:5e:35:0a:70:fc:
                    20:87:d9:37:56:fa:46:b0:53:15:a1:d4:0d:ab:df:
                    75:82:90:d3:8e:af:61:7d:7b:54:7b:9e:60:27:8c:
                    4e:5f:17:d7:c1:cc:60:b2:c4:80:5b:9f:8c:9b:4d:
                    54:d9:2e:38:38:22:7a:6a:6e:83:6c:8c:b2:f6:f5:
                    32:eb:cd:3d:ad:bc:75:06:0a:10:f8:9f:dc:9e:a6:
                    d3:98:68:c1:d4:84:04:f2:32:26:2d:10:84:0e:e1:
                    c7:e1:40:86:6a:c9:62:6f:1b:ca:18:a0:8c:48:14:
                    50:51:4e:c6:81:4c:e8:2e:66:41:13:01:01:18:e1:
                    a2:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:40:45:83:BF:22:CF:A5:7B:02:47:C0:50:60:A4:EB:72:AD:14:F2
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/j0BFg78iz6V7AkfAUGCk63KtFPI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         0a:21:37:ab:6a:aa:7d:53:8f:3d:9c:b7:1b:d5:d5:f7:72:06:
         a1:d2:38:04:72:5b:37:b3:cc:32:92:48:6f:3a:85:0a:52:84:
         91:60:29:71:70:d9:47:2b:00:c3:ea:8b:3d:d3:07:f2:00:d4:
         fa:1c:b5:58:b4:10:8c:4b:89:d8:6f:d9:a6:a7:3b:28:22:6e:
         46:ee:33:4b:47:6c:21:4c:c9:6e:10:08:d9:73:8c:40:ba:bc:
         b4:5a:61:96:ec:80:1d:b2:7b:c0:df:99:71:f4:4f:96:e2:cb:
         d5:4e:70:13:3f:8b:83:56:a9:f2:b3:53:de:d1:46:3a:ee:6a:
         58:64:73:cf:7d:54:11:d3:f2:08:30:8a:46:7e:46:ac:bd:97:
         b7:1d:ea:55:b6:31:ee:01:43:34:cb:e4:ce:5d:38:3d:e0:9c:
         90:c3:6c:78:cc:09:52:0f:b7:9b:46:d9:17:c8:e4:35:3f:64:
         d1:b4:22:13:c5:e4:df:7f:d2:28:e1:67:ad:35:62:a5:0e:3b:
         4d:35:2c:67:88:df:29:3b:b6:8c:41:b6:b2:8b:2a:f9:b0:9f:
         58:f0:21:1f:b0:e8:7f:86:6e:45:bc:1e:4d:46:bf:d4:39:e1:
         4e:b4:21:f1:86:6a:98:43:2f:35:86:ed:df:f3:56:76:19:f5:
         91:04:49:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----