Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/pZcdg1Tf8SyRpElcHbfjw2GP2aI.roa
File:                     pZcdg1Tf8SyRpElcHbfjw2GP2aI.roa (raw, json)
Hash identifier:          gQwOGVyxXUEFr9QR6QpEwc+6PGkCMO1TiV47/8/ft1c=
Subject key identifier:   A5:97:1D:83:54:DF:F1:2C:91:A4:49:5C:1D:B7:E3:C3:61:8F:D9:A2
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A7C0059D1EC7201E1A76F61E698D7D70A
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/pZcdg1Tf8SyRpElcHbfjw2GP2aI.roa
Signing time:             Sat 09 Sep 2023 22:11:52 +0000
ROA not before:           Sat 09 Sep 2023 22:11:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:7c:00:59:d1:ec:72:01:e1:a7:6f:61:e6:98:d7:d7:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep  9 22:11:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a5971d8354dff12c91a4495c1db7e3c3618fd9a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:73:e2:dc:f7:95:07:87:2a:c4:82:70:5d:0c:
                    a6:ce:6a:f6:17:87:c5:94:f7:c8:ad:f2:db:03:48:
                    76:05:47:0a:7a:b6:89:15:38:6e:ac:9a:de:e0:78:
                    e8:0f:60:75:dd:60:7a:d8:42:e6:d9:ab:8b:b0:90:
                    5f:b9:08:5b:c9:84:6a:b2:c1:52:1d:c8:ba:52:ec:
                    0e:9d:4a:70:d6:59:7d:22:2b:d7:e1:bd:ab:73:9f:
                    c9:53:3f:2b:89:30:bc:8c:fe:7e:06:79:c2:8f:33:
                    da:3f:ad:9b:d1:2b:c1:f0:ff:d1:89:25:73:c4:3c:
                    db:2f:61:15:2e:5c:5d:97:a9:ea:6b:3e:0c:0f:9f:
                    aa:b6:cb:38:4c:2d:d3:58:88:fb:d3:80:e0:91:19:
                    ca:08:3c:92:03:bd:b6:68:32:20:6b:d1:ba:64:b0:
                    50:66:f8:61:72:35:a1:a9:93:aa:c7:5d:be:53:87:
                    30:fc:ca:ad:0a:a0:80:90:96:10:fe:31:25:83:95:
                    65:34:72:ea:fb:45:98:f9:68:bd:91:27:8e:16:df:
                    3f:fa:4b:10:ed:0c:fd:fb:40:02:b9:e5:3e:a8:78:
                    7b:13:8d:a1:d4:b3:82:81:d9:2a:59:2e:95:ef:fa:
                    a6:28:e2:11:98:8e:1e:e1:a9:5e:94:40:29:e9:4d:
                    54:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:97:1D:83:54:DF:F1:2C:91:A4:49:5C:1D:B7:E3:C3:61:8F:D9:A2
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/pZcdg1Tf8SyRpElcHbfjw2GP2aI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         95:71:2d:cb:22:06:fd:e1:c4:33:d8:31:a4:2b:77:6c:0d:65:
         e3:76:c7:51:a6:a2:c4:fb:ef:2b:39:cd:dd:74:3b:1b:17:9d:
         8f:ea:ef:92:bc:ce:82:81:ae:11:35:13:5a:ee:ad:9a:6a:43:
         75:c2:72:7d:fe:6a:ca:da:8b:1b:78:de:55:65:a6:7c:6c:60:
         11:e3:b0:70:2e:f1:53:41:08:d8:cf:e2:1a:29:56:85:08:3b:
         2f:49:0b:df:dc:c7:c5:35:f6:87:1d:55:c5:98:ba:7c:33:88:
         d5:21:48:40:47:0a:1f:a1:1a:b5:02:fd:0d:8e:bb:68:de:f6:
         0e:4f:82:8d:f2:92:03:e2:46:c7:b2:2d:76:4d:d9:d9:79:65:
         ca:6b:b0:de:38:20:a5:68:8d:d7:de:9d:53:c8:28:8b:14:15:
         5b:9a:5c:d0:33:ef:d0:a0:ec:4e:46:bd:20:a0:53:da:4f:82:
         ff:89:4a:40:ff:3c:af:8e:0c:27:a1:bb:f6:4f:0a:cc:22:f7:
         cd:04:7b:25:15:05:8f:99:52:3d:f1:07:37:4c:3f:37:9d:9f:
         e2:ae:fb:ee:5d:85:9a:47:2f:3d:81:2c:c3:cf:1f:91:fc:9c:
         c5:f0:3f:ac:14:4d:84:52:31:c5:a0:c5:9b:e1:8b:83:7a:5d:
         e0:12:0e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----