Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/jOiI3SpXduqr8t5NEjG_GfdQYek.roa
File:                     jOiI3SpXduqr8t5NEjG_GfdQYek.roa (raw, json)
Hash identifier:          y8OrsijUSsz1Sk0GK2Nu/wYi7AZiPx2Z/Nt/dmRB8IQ=
Subject key identifier:   8C:E8:88:DD:2A:57:76:EA:AB:F2:DE:4D:12:31:BF:19:F7:50:61:E9
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A823936022DD1425E42D8A5D62F03F7FD
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/jOiI3SpXduqr8t5NEjG_GfdQYek.roa
Signing time:             Mon 11 Sep 2023 03:11:41 +0000
ROA not before:           Mon 11 Sep 2023 03:11:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:82:39:36:02:2d:d1:42:5e:42:d8:a5:d6:2f:03:f7:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep 11 03:11:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8ce888dd2a5776eaabf2de4d1231bf19f75061e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:3a:8e:f2:8c:3b:9b:bb:8d:fc:c5:65:8e:ea:
                    21:38:5b:cd:3c:93:cb:ea:c0:75:bb:34:b9:2d:12:
                    32:6c:cd:ee:8e:32:c8:31:b9:bf:39:d5:b6:ff:f2:
                    e0:94:af:21:58:8d:b8:3d:1e:8c:b3:bf:bc:05:90:
                    a5:1b:5f:71:74:64:ed:51:b8:2b:b6:7e:6e:e7:8d:
                    72:27:d1:06:b5:21:c8:f9:41:29:84:06:d8:df:82:
                    3d:3f:2e:fd:db:b4:fc:3d:af:66:a8:63:8e:89:f7:
                    6c:01:8b:df:61:b7:ef:b3:1b:c1:4d:07:53:c8:f7:
                    c8:c9:2d:7c:73:67:a0:c1:7c:6f:3a:a5:1d:9e:a3:
                    b2:96:57:40:62:dd:44:18:9c:f3:42:a5:40:10:57:
                    4d:ea:01:6b:8a:ae:3e:1d:0b:1c:16:02:b9:11:d9:
                    9d:5b:25:16:b1:0c:dd:8c:e7:a5:49:1c:a8:89:cf:
                    72:11:4a:01:8c:63:76:f5:20:1f:3e:d5:b9:e9:48:
                    cb:f6:33:f5:bc:b1:e5:50:c4:2f:97:38:44:dd:4c:
                    d0:d1:9c:e4:18:00:02:42:0c:b2:30:77:00:68:11:
                    d6:6e:4d:b4:e4:5c:05:6e:45:f0:84:4d:5a:42:87:
                    8f:67:68:39:ae:00:fa:2a:94:87:46:c9:3d:81:fb:
                    87:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:E8:88:DD:2A:57:76:EA:AB:F2:DE:4D:12:31:BF:19:F7:50:61:E9
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/jOiI3SpXduqr8t5NEjG_GfdQYek.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         aa:68:7c:80:b0:ce:c2:c4:8c:2b:0e:c2:a8:5d:48:b4:ea:2c:
         1f:be:5d:1f:f0:a7:35:ea:71:aa:c0:da:d8:8d:8f:33:2c:4e:
         7a:fc:33:83:9e:74:fc:d7:b5:93:95:7f:cf:7d:14:bc:96:86:
         a7:d9:5e:16:1c:4f:50:5a:03:94:46:ef:f3:82:a8:33:39:bb:
         ff:47:48:ab:a9:b7:23:fb:9c:bd:99:48:b0:3c:5b:44:33:5d:
         03:f7:27:57:27:20:13:6e:a1:e0:da:fe:c1:bd:4e:d0:e2:ec:
         78:4b:a3:4f:cd:f5:de:72:f8:0e:ce:31:ec:01:82:35:8b:21:
         31:51:5a:97:fe:29:09:10:e6:35:27:c9:c9:37:ca:43:d9:53:
         8c:18:27:e0:20:ca:0d:e6:46:c8:26:59:56:b2:37:d8:60:92:
         02:c8:73:a4:e4:77:73:a6:d9:36:b7:64:98:cf:ae:7a:bc:14:
         b4:b7:f1:5e:21:36:d7:0b:8d:a8:c1:bd:fe:15:ec:44:8e:52:
         7c:33:68:52:7c:38:39:73:21:71:48:b8:81:7e:6f:ab:1a:f0:
         13:60:06:ad:f0:15:a7:dd:49:c6:33:cb:4b:5e:a7:3b:23:71:
         62:ae:4a:95:e0:b9:1b:38:89:df:61:55:86:43:fc:3d:83:5c:
         b6:2a:5f:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----