Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/l1AnnTFX0L5MT4QFmA27GH2J9nU.roa
File:                     l1AnnTFX0L5MT4QFmA27GH2J9nU.roa (raw, json)
Hash identifier:          Z+0lqkympIDpmFU7ferAtRpdqnL3xGIcWmHs//u8vec=
Subject key identifier:   97:50:27:9D:31:57:D0:BE:4C:4F:84:05:98:0D:BB:18:7D:89:F6:75
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A8F88ED603E471B23E115C89504AC3088
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/l1AnnTFX0L5MT4QFmA27GH2J9nU.roa
Signing time:             Wed 13 Sep 2023 17:13:50 +0000
ROA not before:           Wed 13 Sep 2023 17:13:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:8f:88:ed:60:3e:47:1b:23:e1:15:c8:95:04:ac:30:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep 13 17:13:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9750279d3157d0be4c4f8405980dbb187d89f675
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:a2:bb:6c:f1:a2:c9:9d:c2:3c:94:dd:0b:aa:
                    19:cf:85:ba:83:5b:ac:71:8e:b6:d3:95:1f:40:87:
                    8a:6d:23:5b:c3:46:9b:61:5e:c6:e9:82:4a:fe:1f:
                    95:e2:84:b4:85:1e:16:67:33:2a:72:ec:c8:22:5e:
                    b3:0b:5c:ca:d2:3a:ce:47:9c:eb:fb:fc:89:7a:7b:
                    ea:56:8e:67:1a:8a:a3:34:d2:f4:0f:97:a0:cd:b6:
                    45:be:a6:f7:7d:ea:29:40:a5:28:54:b6:3e:0c:ca:
                    9e:a9:76:da:c4:33:cf:07:aa:d8:f6:a2:5f:99:07:
                    ca:34:eb:6b:60:f8:5c:ca:1a:43:70:9c:1a:8d:7e:
                    a0:fe:af:13:cc:a8:a4:58:0c:44:aa:b0:b3:39:73:
                    2a:c9:41:a5:cf:2b:2c:4b:77:3f:38:a4:23:74:eb:
                    48:d3:0a:46:41:13:85:c6:69:a1:79:20:a4:ce:63:
                    e9:89:28:73:fb:86:2a:4e:00:6f:8b:55:fe:b1:82:
                    af:79:f6:d8:8c:b8:f5:86:77:02:44:2f:eb:b4:5d:
                    34:0f:af:12:ec:c0:1f:0c:df:e1:d1:24:71:3f:4f:
                    09:cd:a0:c5:ee:5a:fe:c1:74:61:79:8b:0b:6a:c8:
                    01:c8:7b:f6:4c:b9:6e:b8:6b:66:52:f4:0f:25:0e:
                    21:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:50:27:9D:31:57:D0:BE:4C:4F:84:05:98:0D:BB:18:7D:89:F6:75
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/l1AnnTFX0L5MT4QFmA27GH2J9nU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         1c:75:6f:4e:d7:c7:56:04:fb:2e:2a:23:71:fb:21:ee:11:bd:
         e9:e8:21:8f:14:00:3c:ca:a4:fe:16:30:ac:d1:e1:6a:7c:54:
         ff:e0:f9:13:0d:6a:65:48:0f:54:4c:7c:f2:b1:70:0f:4e:63:
         b5:54:3e:af:60:1f:c3:f1:8b:4c:4e:18:9f:73:55:65:0b:58:
         53:8c:57:51:fb:fd:a3:fb:a2:13:30:17:47:30:56:ae:a9:f4:
         f8:3d:d2:6f:c0:31:9f:f0:09:4f:84:65:65:86:a0:9f:f3:fe:
         3a:5e:59:68:d1:d6:a9:7d:78:9d:6f:1c:bc:77:a5:7d:06:8d:
         2d:77:94:f1:a7:d0:65:9d:cd:f5:aa:b5:2b:31:32:12:88:cd:
         8e:a1:2c:50:ae:34:24:0d:24:7a:ad:84:b6:2d:1c:ff:d8:46:
         e6:f0:52:55:f7:00:85:4b:df:c0:f9:34:54:b2:cc:d8:92:79:
         a0:91:78:5d:54:05:ff:04:43:09:b2:55:4f:de:32:d6:47:e8:
         1f:e2:30:5e:68:c9:0b:b3:5d:d8:6c:75:95:bd:d9:4d:2e:41:
         3b:65:ea:bf:38:86:cb:1f:28:67:ba:b8:3b:05:6e:c7:40:d1:
         5d:61:57:49:4b:35:85:1d:dc:4b:36:df:34:eb:5b:b1:87:ce:
         12:12:cb:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----