Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/m_OaSohLcbmtBfvGnyMFGI67jIg.roa
File:                     m_OaSohLcbmtBfvGnyMFGI67jIg.roa (raw, json)
Hash identifier:          F45MJ9/ky0YmQ6awbUjJSWsSEH2JBVnbi8mMeJhBznI=
Subject key identifier:   9B:F3:9A:4A:88:4B:71:B9:AD:05:FB:C6:9F:23:05:18:8E:BB:8C:88
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018AA19103D728290B8D4D96620B88A46C10
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/m_OaSohLcbmtBfvGnyMFGI67jIg.roa
Signing time:             Sun 17 Sep 2023 05:15:50 +0000
ROA not before:           Sun 17 Sep 2023 05:15:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:a1:91:03:d7:28:29:0b:8d:4d:96:62:0b:88:a4:6c:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep 17 05:15:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9bf39a4a884b71b9ad05fbc69f2305188ebb8c88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e2:68:19:49:8f:f8:0c:2f:f2:01:03:b3:4e:
                    04:53:8f:7a:0e:95:cb:a8:96:7e:06:47:f2:ec:c4:
                    33:12:d1:4a:46:cb:7b:38:01:c2:77:ae:c6:1a:00:
                    d5:78:29:91:08:6c:3a:1b:5c:0c:a3:5e:5b:f7:a0:
                    23:99:ae:6a:c5:ea:52:d8:d8:75:5a:08:67:aa:24:
                    55:b0:78:bc:f9:76:aa:ad:82:7b:8f:d2:ee:fa:2f:
                    93:05:a8:70:47:de:68:50:5d:19:e8:57:23:ce:04:
                    a4:63:63:c0:2b:17:b8:ac:ab:e1:cc:73:f7:45:63:
                    3f:b2:aa:a5:a6:02:4f:e3:90:a2:cd:39:0c:d3:93:
                    22:e0:35:cb:7f:0b:c6:d8:a2:ee:2a:ab:d5:39:08:
                    13:19:62:59:f0:0b:42:d8:5b:7d:ee:37:36:51:d3:
                    77:9b:bf:ea:61:4f:e7:20:44:34:d8:15:f4:89:e0:
                    8c:51:47:c1:2a:1b:75:67:a5:db:52:a8:e9:1b:52:
                    a7:e6:4b:bc:79:c3:30:3f:58:a5:58:ff:67:85:a5:
                    d5:d0:44:12:87:89:79:b6:3d:32:22:9b:b2:3c:3e:
                    ec:b4:66:99:8a:1a:36:de:ef:1c:77:50:ff:28:96:
                    1c:22:57:1a:d6:1f:71:c6:41:de:9b:69:7d:4c:b6:
                    a1:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:F3:9A:4A:88:4B:71:B9:AD:05:FB:C6:9F:23:05:18:8E:BB:8C:88
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/m_OaSohLcbmtBfvGnyMFGI67jIg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         a5:39:06:dc:10:91:25:e8:dc:1c:a4:85:d3:93:a0:4b:5e:03:
         fe:7f:78:fb:23:6a:9d:99:21:72:02:5f:ca:05:0a:36:99:55:
         72:df:c0:44:52:e9:0f:6d:65:21:d8:d1:50:0a:95:78:c9:b5:
         2d:2f:cb:46:c6:dd:ba:03:b6:3f:13:dc:81:6c:d9:4a:2b:2b:
         8b:a7:a7:d8:ac:6d:92:5e:df:2f:38:dc:d1:de:15:a7:e5:14:
         d9:d6:17:5d:f0:47:ff:b6:c4:3a:66:64:3e:11:9a:6c:fe:75:
         31:1f:82:dc:05:9d:4a:43:90:3a:2d:6d:18:ea:f6:fd:51:32:
         c5:b6:13:19:9c:85:63:c4:e1:bf:a9:20:07:b0:45:61:f1:51:
         c9:91:ea:ff:37:ff:5c:5c:21:60:36:32:ab:22:d0:c4:74:d0:
         0c:b0:a2:f0:4a:be:ef:b1:92:9d:e3:2c:b8:a9:00:d3:46:69:
         09:3a:dd:04:2b:47:06:1d:b6:1c:b9:db:10:2b:e7:68:fe:b5:
         77:81:ee:a4:4a:74:38:98:85:64:ba:34:74:fa:db:1a:fb:a3:
         45:82:80:ef:ea:f8:55:72:67:6d:c3:0b:a3:9e:88:04:dc:ec:
         91:59:41:67:23:f1:3f:c7:5b:c7:3e:2a:ff:a7:3c:56:41:9b:
         1b:a1:78:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----