Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/wt050I47n2YKoCcV2t6xT3PPCOo.roa
File:                     wt050I47n2YKoCcV2t6xT3PPCOo.roa (raw, json)
Hash identifier:          kQuGfEOF5etvo2dpxwkOc+RR3ejdFf28uao61SmH2cQ=
Subject key identifier:   C2:DD:39:D0:8E:3B:9F:66:0A:A0:27:15:DA:DE:B1:4F:73:CF:08:EA
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A6546FE0B5F535AB781896042F430FF21
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/wt050I47n2YKoCcV2t6xT3PPCOo.roa
Signing time:             Tue 05 Sep 2023 12:17:45 +0000
ROA not before:           Tue 05 Sep 2023 12:17:45 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:65:46:fe:0b:5f:53:5a:b7:81:89:60:42:f4:30:ff:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep  5 12:17:45 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c2dd39d08e3b9f660aa02715dadeb14f73cf08ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:15:9c:14:b5:df:7c:7d:f6:c1:e5:4a:23:8f:
                    7c:91:46:20:cd:42:01:38:8b:62:91:c2:1b:49:3d:
                    13:67:57:5a:d8:26:d5:b3:21:3c:da:8b:09:83:b7:
                    98:61:1f:ca:4f:2c:50:63:f5:09:f7:3b:e4:54:9a:
                    bd:8e:f4:8f:e9:b8:6c:a9:2f:67:fe:17:6d:4b:c5:
                    e2:60:16:13:0e:2d:b0:23:97:dc:dd:e7:cd:1f:c4:
                    13:cc:fe:17:1d:14:3c:dd:36:66:49:72:96:76:4c:
                    d5:84:05:ec:f0:ee:59:3f:77:f3:9a:d9:f7:09:d6:
                    10:57:95:59:41:3d:95:86:f4:bc:ff:eb:39:02:f8:
                    49:e5:28:73:43:f6:31:b6:27:c8:4e:ab:47:27:bf:
                    1f:c1:e0:42:fe:de:7e:d3:b4:66:fc:3b:65:b8:56:
                    52:74:af:08:c3:f3:3f:dd:05:1a:0c:90:5b:5f:4c:
                    e3:95:f7:08:55:11:80:c4:54:46:2d:ae:68:9a:46:
                    fb:43:2a:09:2f:0e:3a:cf:85:5d:2e:ae:c9:a3:23:
                    20:63:64:81:55:13:ab:19:84:f6:f4:8f:24:6b:a3:
                    fc:1b:78:90:b8:26:41:94:3b:b0:1a:b8:2f:e0:2e:
                    c9:0c:6b:72:1b:f8:bb:bd:12:56:6d:ab:7f:57:94:
                    5f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:DD:39:D0:8E:3B:9F:66:0A:A0:27:15:DA:DE:B1:4F:73:CF:08:EA
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/wt050I47n2YKoCcV2t6xT3PPCOo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         1b:9b:c4:59:fa:06:0a:05:fb:d4:03:87:c5:22:d1:68:0d:b7:
         79:6f:96:03:c3:25:23:d1:55:92:74:7b:58:15:6b:e1:6f:d5:
         90:e4:64:9a:b8:19:94:8a:47:23:d8:bc:f7:b3:e3:11:1a:95:
         3c:80:de:55:49:6d:4e:0c:7d:c8:3e:87:ab:75:43:b7:6e:8c:
         a3:92:92:0a:06:4d:eb:5c:fa:26:21:f4:e6:ae:8b:cd:b5:9f:
         c1:0c:bf:94:1a:d2:b9:88:57:2b:73:cb:df:66:af:60:b0:d3:
         be:8b:02:2b:7f:6e:d7:3b:a0:d7:34:ef:8d:0b:bb:cf:93:bf:
         16:f8:b2:57:0b:68:f9:e5:f3:88:7d:5a:4a:6b:9c:0a:0a:6f:
         99:33:b0:1a:9a:25:55:75:6f:52:29:91:f9:66:b9:56:85:21:
         e0:5b:80:4e:06:f8:cd:d0:c4:09:e6:ad:74:42:58:63:7e:df:
         96:d3:14:1f:9f:7b:1f:57:ae:8e:5c:4b:f9:bc:e5:2d:3c:1c:
         28:08:69:7a:89:eb:33:20:78:cf:af:3f:0d:5c:0b:de:cc:7b:
         30:6e:72:91:ec:e2:92:77:ab:d4:cf:b5:25:f8:e5:26:98:43:
         ac:f9:81:a8:b8:04:ca:3c:b8:16:59:dc:b1:0a:2e:2d:f4:66:
         21:d5:14:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----