Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/rJ1yNllVP69sAqO-P_xW5BPPv7E.roa
File:                     rJ1yNllVP69sAqO-P_xW5BPPv7E.roa (raw, json)
Hash identifier:          2grLlMHEloOfXLWChkimy9CxIOsfd7JQCQAD/46LLA4=
Subject key identifier:   AC:9D:72:36:59:55:3F:AF:6C:02:A3:BE:3F:FC:56:E4:13:CF:BF:B1
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A9CA0AC6E1D84B88368CEEF7C20690CD1
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/rJ1yNllVP69sAqO-P_xW5BPPv7E.roa
Signing time:             Sat 16 Sep 2023 06:14:50 +0000
ROA not before:           Sat 16 Sep 2023 06:14:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:9c:a0:ac:6e:1d:84:b8:83:68:ce:ef:7c:20:69:0c:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep 16 06:14:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ac9d723659553faf6c02a3be3ffc56e413cfbfb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:7d:13:9f:d2:8c:81:36:b5:dd:0d:39:83:e1:
                    dd:d1:0c:a3:b5:45:a5:43:ab:01:3f:27:78:6e:12:
                    ef:9a:78:b1:54:b5:c1:9a:b6:f5:6f:52:b8:66:49:
                    bd:2f:fe:87:89:b4:17:eb:34:f1:4c:76:b8:03:73:
                    e1:12:2f:7d:67:95:8b:3f:cb:af:6a:ef:d1:04:81:
                    70:d8:12:5a:59:3e:8f:5c:fc:40:a9:fc:72:7d:93:
                    f2:02:76:20:57:42:7a:b1:71:53:d4:30:75:af:ee:
                    ad:6b:37:c6:c5:84:f5:aa:b5:b4:7f:a5:6c:c1:07:
                    3b:ca:fa:1a:0d:f7:e4:f9:8c:f2:6d:3a:2a:e1:b2:
                    38:92:32:0a:13:b9:07:47:a7:bb:54:62:f2:d3:e9:
                    4d:b2:52:79:c2:aa:8e:a3:b0:95:5f:f5:38:a8:c2:
                    7c:5d:0a:21:59:39:e8:91:b5:56:2c:56:46:6b:56:
                    96:c2:9e:bc:7e:f5:e6:1b:3a:a2:9c:b3:1c:4d:29:
                    19:ba:e7:8a:96:3c:ed:c6:1b:e7:03:78:69:59:02:
                    f3:7d:ab:fd:0d:0f:eb:3b:89:9c:06:bd:e8:59:62:
                    43:80:86:c0:4b:0e:6b:a2:5f:e2:fc:66:9c:ce:15:
                    42:6d:3f:5a:ed:a4:f9:1d:5d:e3:3c:ed:a2:92:3b:
                    fc:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:9D:72:36:59:55:3F:AF:6C:02:A3:BE:3F:FC:56:E4:13:CF:BF:B1
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/rJ1yNllVP69sAqO-P_xW5BPPv7E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         4f:e9:05:1e:73:e3:f2:f6:f6:31:7a:e6:92:ab:23:2d:7a:91:
         e4:5d:0e:24:30:d7:46:7d:72:e4:bf:f1:0a:af:84:df:30:49:
         93:85:af:98:22:0f:c2:01:38:47:fb:bb:61:b4:a4:25:cb:ed:
         0a:2f:99:e6:eb:43:e1:99:2d:73:82:8a:c4:8b:68:75:d7:e5:
         88:6c:53:1d:4f:2f:99:14:55:ca:d5:b9:8c:28:c5:e0:9c:87:
         75:4d:e4:1a:86:3f:eb:d5:f7:cb:63:36:42:0b:83:a2:d1:4d:
         10:1b:d6:02:19:89:8c:d9:91:6c:83:be:48:70:78:69:20:c3:
         b9:ab:01:29:45:64:d8:9c:8a:8e:2e:8e:39:b7:56:9f:15:51:
         21:60:e7:ce:0b:66:f9:9e:49:a5:b4:a6:a6:9f:fb:ef:9c:0d:
         a5:d9:09:7e:e2:67:21:38:b0:f4:1b:9c:e9:10:4c:b8:12:37:
         4c:7d:08:68:cb:6b:a1:db:6e:fc:c8:89:a2:34:2c:a8:25:97:
         bf:80:07:5b:68:b9:23:64:af:6c:b9:1a:d4:5a:c9:43:0c:70:
         e4:a3:7e:ce:91:2a:f6:05:be:70:d9:9b:d7:7f:6c:4f:69:88:
         38:a4:be:83:fd:12:d7:48:66:e2:69:26:9b:ba:33:ac:29:3d:
         14:14:c9:6f
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYqcoKxuHYS4g2jO73wgaQzRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMWYxNGM4NTA3NDVhN2MzMTJlYTJlYjBiZTAzMDUyZTQ5
NjcyNzUwHhcNMjMwOTE2MDYxNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYzlkNzIzNjU5NTUzZmFmNmMwMmEzYmUzZmZjNTZlNDEzY2ZiZmIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkX0Tn9KMgTa13Q05g+Hd0QyjtUWl
Q6sBPyd4bhLvmnixVLXBmrb1b1K4Zkm9L/6HibQX6zTxTHa4A3PhEi99Z5WLP8uv
au/RBIFw2BJaWT6PXPxAqfxyfZPyAnYgV0J6sXFT1DB1r+6tazfGxYT1qrW0f6Vs
wQc7yvoaDffk+YzybToq4bI4kjIKE7kHR6e7VGLy0+lNslJ5wqqOo7CVX/U4qMJ8
XQohWTnokbVWLFZGa1aWwp68fvXmGzqinLMcTSkZuueKljztxhvnA3hpWQLzfav9
DQ/rO4mcBr3oWWJDgIbASw5rol/i/GaczhVCbT9a7aT5HV3jPO2ikjv8twIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFKydcjZZVT+vbAKjvj/8VuQTz7+xMB8GA1UdIwQY
MBaAFKofFMhQdFp8MS6i6wvgMFLklnJ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQt
ODNmY2QyMjU0ODJhLzEvckoxeU5sbFZQNjlzQXFPLVBfeFc1QlBQdjdFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQtODNmY2QyMjU0ODJh
LzEvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAE/pBR5z4/L29jF65pKr
Iy16keRdDiQw10Z9cuS/8QqvhN8wSZOFr5giD8IBOEf7u2G0pCXL7QovmebrQ+GZ
LXOCisSLaHXX5YhsUx1PL5kUVcrVuYwoxeCch3VN5BqGP+vV98tjNkILg6LRTRAb
1gIZiYzZkWyDvkhweGkgw7mrASlFZNicio4ujjm3Vp8VUSFg584LZvmeSaW0pqaf
+++cDaXZCX7iZyE4sPQbnOkQTLgSN0x9CGjLa6HbbvzIiaI0LKgll7+AB1touSNk
r2y5GtRayUMMcOSjfs6RKvYFvnDZm9d/bE9piDikvoP9EtdIZuJpJpu6M6wpPRQU
yW8=
-----END CERTIFICATE-----