Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/xt7LsB2pClS-DgA7OK_bz9Gx5jo.roa
File:                     xt7LsB2pClS-DgA7OK_bz9Gx5jo.roa (raw, json)
Hash identifier:          JqQ/LAolNYY709ZUPUB2M/Z2jgt2Fk0KFu0WiesdhOs=
Subject key identifier:   C6:DE:CB:B0:1D:A9:0A:54:BE:0E:00:3B:38:AF:DB:CF:D1:B1:E6:3A
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A8C51DE3296F6EC0591BE3AABA2E41305
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/xt7LsB2pClS-DgA7OK_bz9Gx5jo.roa
Signing time:             Wed 13 Sep 2023 02:14:50 +0000
ROA not before:           Wed 13 Sep 2023 02:14:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:8c:51:de:32:96:f6:ec:05:91:be:3a:ab:a2:e4:13:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep 13 02:14:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c6decbb01da90a54be0e003b38afdbcfd1b1e63a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:84:15:c4:09:72:77:1a:47:21:0b:63:b2:56:
                    c1:cd:29:88:57:e1:31:f2:b3:fc:86:bf:b9:43:56:
                    43:2a:17:3f:07:f4:5f:55:f9:99:a4:f1:f5:a4:ef:
                    c2:29:2f:b7:41:23:bc:e3:35:2d:59:36:b7:60:1b:
                    bd:48:4d:3f:4c:74:64:14:5c:b1:2e:56:e3:6d:6b:
                    33:72:48:0a:06:13:e5:7d:3b:44:0b:f7:46:99:c7:
                    b5:24:6b:81:9e:b3:06:a6:6c:05:a0:0b:fd:8b:6e:
                    86:95:a1:5b:d9:df:03:25:73:d3:4e:50:51:97:06:
                    43:d7:da:76:e1:54:f4:06:51:3d:a7:5d:a0:9f:b3:
                    3e:35:72:c7:3c:bf:ed:2f:d6:bc:7f:0a:b7:75:db:
                    21:e7:b8:bf:f4:f0:70:00:02:06:32:0d:a2:b5:91:
                    fd:8b:0f:0c:17:88:97:fc:46:b9:00:77:a9:99:71:
                    1a:af:d7:6e:78:9b:35:d9:f3:40:89:0e:cd:87:3d:
                    28:46:f4:7e:27:2c:98:fd:cf:00:6d:83:15:6d:6c:
                    75:74:12:17:40:05:3f:45:1e:49:30:e9:55:4e:eb:
                    95:ef:c0:bd:98:33:68:9b:e6:4f:d4:90:b6:33:c7:
                    53:db:76:61:29:69:5f:ad:63:55:d0:05:b1:ca:1c:
                    a3:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:DE:CB:B0:1D:A9:0A:54:BE:0E:00:3B:38:AF:DB:CF:D1:B1:E6:3A
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/xt7LsB2pClS-DgA7OK_bz9Gx5jo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         43:71:36:a0:97:ab:a5:37:95:b8:84:37:ac:6b:f4:b5:d5:f7:
         25:7a:0f:1d:79:02:a3:40:73:4c:a1:f4:8b:6d:ea:7b:67:38:
         4a:69:94:cd:a0:23:1c:21:42:0b:e6:72:d8:6f:90:37:3b:6f:
         92:43:ad:6d:ab:cc:b6:fa:ae:03:b1:76:07:db:5f:b7:1d:b7:
         1e:ac:f3:4c:a3:18:a8:f0:ca:53:36:c6:d2:26:58:82:a6:5a:
         f3:1b:df:44:21:75:70:80:49:7c:f7:47:40:08:f9:a0:04:ef:
         31:c1:14:bb:d8:4a:03:8a:9c:c9:e7:64:c5:54:9e:02:28:91:
         bd:cb:34:b6:c0:a4:61:d6:db:65:bf:01:ce:fb:82:2a:6c:fc:
         b0:60:e1:54:c6:ea:ae:ba:47:12:71:d3:4c:8d:38:c2:fa:da:
         e3:94:df:33:52:61:e5:f3:30:ca:18:af:46:5c:f1:1f:f8:8a:
         3d:2d:69:c2:09:45:ae:a4:63:b3:b8:26:45:a6:05:2c:7e:6f:
         31:2a:53:de:2a:8d:f8:d4:f7:53:6c:de:14:cd:28:da:18:92:
         c9:c5:ed:64:38:3b:62:5f:a7:2c:15:72:b2:c7:8c:01:28:26:
         53:e9:ca:13:cf:a7:97:41:27:b8:c9:17:55:71:37:a9:cd:93:
         01:b9:c1:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----