Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/s5eJ_hJbnOot5r_9h0Df1p5rA7U.roa
File:                     s5eJ_hJbnOot5r_9h0Df1p5rA7U.roa (raw, json)
Hash identifier:          wZNi9lAxmJLpEsoZLDmVbkjn0wHFkfOyST7Ks44cDH4=
Subject key identifier:   B3:97:89:FE:12:5B:9C:EA:2D:E6:BF:FD:87:40:DF:D6:9E:6B:03:B5
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A4A69D67900A40BF2A1CDB18D1FF4C808
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/s5eJ_hJbnOot5r_9h0Df1p5rA7U.roa
Signing time:             Thu 31 Aug 2023 07:06:04 +0000
ROA not before:           Thu 31 Aug 2023 07:06:04 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:18a:4a69:86b9/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:4a:69:d6:79:00:a4:0b:f2:a1:cd:b1:8d:1f:f4:c8:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Aug 31 07:06:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b39789fe125b9cea2de6bffd8740dfd69e6b03b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:4a:f2:09:6c:e1:6d:95:aa:7c:d9:37:0d:6e:
                    48:49:e0:f3:e7:15:87:89:c7:52:ed:15:95:b9:f9:
                    99:34:de:1f:c5:b0:1d:e9:19:4b:97:23:22:e0:2f:
                    e6:12:9e:d5:a8:29:33:e9:3e:95:1b:7f:97:74:85:
                    1e:d8:b5:7a:a1:31:97:ac:49:21:17:bb:cf:92:ff:
                    c0:f1:3b:3b:60:1a:62:74:e6:47:0e:3e:75:1e:f2:
                    e3:7d:54:a3:b7:72:b9:32:8a:bc:6f:90:8d:da:3a:
                    bd:f9:5c:15:98:ac:1d:16:44:af:31:63:6a:4d:2d:
                    d9:8e:f8:73:63:81:35:0b:09:27:57:51:cf:ff:75:
                    91:b4:8b:79:f6:1d:bb:b2:71:6e:b2:8b:87:e9:ab:
                    8c:d1:05:8c:41:e5:3e:99:39:89:57:f6:65:68:18:
                    36:b6:57:c0:d1:f5:4f:ce:b3:44:51:89:39:1c:da:
                    2b:83:de:37:ad:b0:c1:fa:8d:1a:03:b8:ee:93:54:
                    3f:21:31:6e:83:de:8b:fd:aa:14:e6:44:67:c7:55:
                    08:2d:cb:63:61:aa:1e:61:56:ef:2f:08:22:47:91:
                    b9:71:d5:2f:7b:a2:a2:8b:83:0f:fa:62:b7:1f:ad:
                    c2:52:51:8e:d6:d2:15:12:1c:ed:dd:2e:80:04:bf:
                    36:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:97:89:FE:12:5B:9C:EA:2D:E6:BF:FD:87:40:DF:D6:9E:6B:03:B5
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/s5eJ_hJbnOot5r_9h0Df1p5rA7U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         85:39:d3:1a:85:d2:90:42:d3:2d:8c:3d:14:6f:7d:bd:68:4f:
         4c:e0:28:a2:8b:e0:a5:10:3e:3c:1b:c8:e4:dd:81:f8:f1:b3:
         07:c7:ee:48:d2:c2:fa:7f:bc:b2:26:f2:34:4b:6f:f3:ad:d3:
         8d:56:46:d7:e5:7c:3e:59:59:39:82:7a:6a:79:59:c9:24:e9:
         3f:0c:6e:2c:83:6e:fd:d1:02:b7:55:08:75:9a:55:58:6b:4a:
         61:0f:79:57:d8:7d:9e:42:25:6c:90:90:5d:f0:24:1d:f0:31:
         ca:79:87:34:a5:c5:21:b9:0c:2f:98:6d:13:c1:5d:d3:b0:a4:
         75:b6:9b:8f:38:4d:02:3f:40:49:94:b0:a2:55:01:2d:7c:d2:
         e1:ee:b5:66:41:a8:41:23:52:16:bd:df:b4:7e:fa:24:eb:e6:
         29:c9:7d:f9:e7:f2:4e:fe:87:1c:fb:e6:78:ea:6d:cf:26:6d:
         16:38:7c:9a:b0:f6:c2:20:34:1e:05:0f:d9:b3:5b:ac:ee:fe:
         14:d2:ee:39:fe:9b:d5:df:a5:bb:94:01:29:9a:22:24:95:70:
         5e:4d:1a:93:e1:62:ac:d7:a6:28:3a:ef:84:02:31:c7:5a:9c:
         40:6c:07:b5:d2:c9:64:52:7e:44:4c:35:d0:b5:05:50:7b:7b:
         02:51:ef:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----