Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/F-xvKHM8ka3PT-BjOa2pkKH1p2M.roa
File:                     F-xvKHM8ka3PT-BjOa2pkKH1p2M.roa (raw, json)
Hash identifier:          2QPaq4iPhseF9H+izJWc6kU/8+SuqBa7KlwWxWBZEpM=
Subject key identifier:   17:EC:6F:28:73:3C:91:AD:CF:4F:E0:63:39:AD:A9:90:A1:F5:A7:63
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A8646A0B4FEC0B16C46BF2297D036E367
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/F-xvKHM8ka3PT-BjOa2pkKH1p2M.roa
Signing time:             Mon 11 Sep 2023 22:04:50 +0000
ROA not before:           Mon 11 Sep 2023 22:04:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18a:8646:6112/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:86:46:a0:b4:fe:c0:b1:6c:46:bf:22:97:d0:36:e3:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep 11 22:04:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=17ec6f28733c91adcf4fe06339ada990a1f5a763
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:71:14:7f:0d:79:0b:3e:9e:98:05:82:d4:75:
                    ff:9c:62:85:06:d6:a0:06:24:94:48:a4:d1:27:18:
                    b3:d3:48:2d:a5:48:19:a8:da:f5:f0:15:d1:50:a8:
                    ae:32:f5:cf:92:73:dc:f6:80:ce:51:db:6f:6e:b6:
                    86:e9:54:e0:ff:ad:24:4b:7b:6d:3b:60:d2:4e:39:
                    65:76:c3:18:4c:18:99:d5:86:bc:5a:49:12:f0:ed:
                    83:bb:53:98:3f:0e:8e:87:9e:c7:b4:6b:21:db:5d:
                    c7:88:4c:83:85:6f:3f:76:4f:8a:f9:bc:e0:46:33:
                    ac:22:6a:eb:52:6d:e8:a3:75:6e:b1:1e:38:cd:e0:
                    0a:b2:8e:dd:1b:ba:2d:51:e8:9e:a5:b9:2d:20:2d:
                    eb:cf:ed:81:68:76:0a:a0:35:af:4a:12:6f:be:9c:
                    39:18:3b:47:8f:51:f0:6c:fe:75:74:a6:d4:1d:3e:
                    90:67:3d:b1:cb:63:ba:32:06:0b:73:2d:4c:5c:a9:
                    50:59:d9:08:f6:47:a2:a3:f3:08:60:0c:e5:67:02:
                    72:65:3e:a2:1e:86:01:2e:ad:39:0a:02:b1:8f:04:
                    0f:e8:fa:58:4f:f7:42:ce:2c:4b:c9:b8:65:cd:4f:
                    66:47:c6:56:ca:40:9e:b4:94:4f:ff:f9:dd:51:63:
                    d9:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:EC:6F:28:73:3C:91:AD:CF:4F:E0:63:39:AD:A9:90:A1:F5:A7:63
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/F-xvKHM8ka3PT-BjOa2pkKH1p2M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         58:06:9b:5e:f6:c4:de:aa:54:51:53:b2:89:c1:94:4b:d1:1a:
         86:d1:01:ad:c7:06:59:84:07:1e:4a:49:4a:cc:97:fb:18:c4:
         55:57:06:11:f6:d1:8f:57:0b:89:7a:10:7b:b3:bf:ea:b3:07:
         b4:79:f8:52:ab:dd:0f:2c:8c:dc:b9:69:67:16:97:f1:d9:65:
         9d:d6:e9:a6:07:02:41:42:71:20:06:14:76:87:93:f1:79:97:
         b2:7e:b9:ae:4e:86:b5:cc:0b:9a:fd:e3:06:7d:c9:c4:04:5f:
         7f:72:cd:11:95:62:4c:39:7d:1a:02:4c:36:68:3d:06:b3:a5:
         21:07:da:eb:4c:d0:e6:0a:5e:56:61:1b:93:10:5e:04:39:d2:
         b9:e2:f6:98:16:6a:3e:b4:23:60:ee:b5:f0:04:18:5c:8d:62:
         84:cf:87:0f:79:1f:e6:77:bb:ba:b2:e3:ea:8e:a3:18:4c:4f:
         2a:09:94:ce:7d:c7:5a:a0:24:1d:11:44:ed:83:ea:27:d7:c8:
         62:af:c5:18:36:8c:a9:ed:66:48:9f:76:65:b2:9a:42:be:f2:
         bb:02:07:82:5a:8d:f2:bc:3c:61:cf:fc:4e:2e:6e:9d:58:2e:
         02:02:ea:cd:b2:e2:44:2e:84:fe:75:4e:46:a7:79:96:ec:d3:
         58:51:1d:2d
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYqGRqC0/sCxbEa/IpfQNuNnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMWYxNGM4NTA3NDVhN2MzMTJlYTJlYjBiZTAzMDUyZTQ5
NjcyNzUwHhcNMjMwOTExMjIwNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxN2VjNmYyODczM2M5MWFkY2Y0ZmUwNjMzOWFkYTk5MGExZjVhNzYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXEUfw15Cz6emAWC1HX/nGKFBtag
BiSUSKTRJxiz00gtpUgZqNr18BXRUKiuMvXPknPc9oDOUdtvbraG6VTg/60kS3tt
O2DSTjlldsMYTBiZ1Ya8WkkS8O2Du1OYPw6Oh57HtGsh213HiEyDhW8/dk+K+bzg
RjOsImrrUm3oo3VusR44zeAKso7dG7otUeiepbktIC3rz+2BaHYKoDWvShJvvpw5
GDtHj1HwbP51dKbUHT6QZz2xy2O6MgYLcy1MXKlQWdkI9keio/MIYAzlZwJyZT6i
HoYBLq05CgKxjwQP6PpYT/dCzixLybhlzU9mR8ZWykCetJRP//ndUWPZmQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBfsbyhzPJGtz0/gYzmtqZCh9adjMB8GA1UdIwQY
MBaAFKofFMhQdFp8MS6i6wvgMFLklnJ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQt
ODNmY2QyMjU0ODJhLzEvRi14dktITThrYTNQVC1Cak9hMnBrS0gxcDJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQtODNmY2QyMjU0ODJh
LzEvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFgGm172xN6qVFFTsonB
lEvRGobRAa3HBlmEBx5KSUrMl/sYxFVXBhH20Y9XC4l6EHuzv+qzB7R5+FKr3Q8s
jNy5aWcWl/HZZZ3W6aYHAkFCcSAGFHaHk/F5l7J+ua5OhrXMC5r94wZ9ycQEX39y
zRGVYkw5fRoCTDZoPQazpSEH2utM0OYKXlZhG5MQXgQ50rni9pgWaj60I2DutfAE
GFyNYoTPhw95H+Z3u7qy4+qOoxhMTyoJlM59x1qgJB0RRO2D6ifXyGKvxRg2jKnt
ZkifdmWymkK+8rsCB4JajfK8PGHP/E4ubp1YLgIC6s2y4kQuhP51TkaneZbs01hR
HS0=
-----END CERTIFICATE-----