Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/2TkMMfICnqRHwHV_iTjZpf0qJSE.roa
File:                     2TkMMfICnqRHwHV_iTjZpf0qJSE.roa (raw, json)
Hash identifier:          DsOH5+02FxN3WSb2CPXbhjJI2rZJIJ+8b1pRTw9CkJc=
Subject key identifier:   D9:39:0C:31:F2:02:9E:A4:47:C0:75:7F:89:38:D9:A5:FD:2A:25:21
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A9A7986BA0B9F5D13705ADF5932051A38
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/2TkMMfICnqRHwHV_iTjZpf0qJSE.roa
Signing time:             Fri 15 Sep 2023 20:12:50 +0000
ROA not before:           Fri 15 Sep 2023 20:12:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:9a:79:86:ba:0b:9f:5d:13:70:5a:df:59:32:05:1a:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep 15 20:12:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d9390c31f2029ea447c0757f8938d9a5fd2a2521
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:2d:aa:8a:88:bc:50:a6:4c:3a:f9:a8:a4:ac:
                    a0:05:b8:a9:62:05:a7:0d:c6:f3:57:e8:40:0c:d3:
                    f0:42:38:2a:6d:86:2c:63:63:0c:dd:fc:4a:4d:20:
                    6a:bf:e1:a1:27:24:08:e2:f6:10:a6:30:d5:4e:e7:
                    1d:24:ab:ba:c5:13:de:55:3a:2b:64:35:a9:b1:24:
                    bc:0f:00:ff:44:9e:ae:c4:02:c5:dc:b7:28:8f:82:
                    fc:bb:98:1c:1a:fa:4b:ec:fc:6d:77:26:9f:bc:8d:
                    9d:ec:59:36:13:54:94:35:8b:8e:4f:23:aa:d6:88:
                    33:4b:7f:e5:e0:35:25:ff:d4:95:56:55:94:94:f4:
                    21:26:f5:95:73:c6:d1:2f:a9:c5:d4:7e:80:45:3e:
                    d7:7b:6b:8b:5d:6c:5b:76:a4:35:f7:ea:86:38:a5:
                    f3:48:4b:5c:76:a4:3c:7a:75:cc:75:f0:16:52:07:
                    e6:7c:30:fc:ef:4c:33:20:92:54:7c:29:b9:62:52:
                    0a:76:c7:10:c3:1a:a2:71:db:b4:de:88:d8:25:0a:
                    36:ef:8c:33:61:c4:b6:8c:64:76:2b:aa:ff:c1:13:
                    ec:cb:5e:3b:0c:85:69:b7:7b:d4:7f:bd:b7:88:2c:
                    48:04:e7:62:98:05:d9:e9:14:09:4e:34:38:41:3e:
                    0e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:39:0C:31:F2:02:9E:A4:47:C0:75:7F:89:38:D9:A5:FD:2A:25:21
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/2TkMMfICnqRHwHV_iTjZpf0qJSE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         7b:b5:4c:31:96:87:66:66:54:b6:a0:78:b6:30:2d:38:83:42:
         9d:56:af:66:85:1d:0c:53:85:c9:d7:75:8d:0e:24:b4:9c:b5:
         c0:3e:64:1e:72:0d:9b:6a:2a:b3:69:80:dd:dd:71:a3:3a:92:
         96:aa:48:95:01:58:16:4c:d2:96:88:f5:3f:f7:fb:26:51:0d:
         27:6e:d8:d9:b6:5c:0b:a2:a7:3d:49:10:ab:97:5a:0e:e6:04:
         07:a7:ab:de:12:55:a1:02:d6:d5:9d:51:00:bf:f4:22:2e:83:
         56:4d:6b:27:aa:47:d6:64:dc:55:de:36:47:ae:dd:57:ef:ae:
         8f:82:aa:ff:f9:f5:5a:72:04:c8:e8:cc:2e:60:2a:7c:11:81:
         f3:ec:b0:93:2b:46:3b:64:aa:00:4c:93:fa:1b:af:55:e8:86:
         2f:30:3f:07:32:42:93:0d:69:fe:73:84:fd:29:c7:5c:3c:70:
         9f:87:c6:f3:cc:e7:42:ec:a9:c5:ac:0e:7a:0c:2a:93:e1:49:
         1c:28:f0:4e:e9:fb:b8:47:d0:f5:41:bb:fa:ac:38:64:24:3d:
         3c:67:9c:b9:ff:52:a3:18:86:fa:14:dd:f6:dd:f4:17:05:0d:
         8b:1c:f2:af:16:71:d8:a9:2f:24:2c:9e:0d:47:dd:17:3f:c1:
         5d:ad:e3:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----