Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/fMySFQeLaCIP9iTPsw_OslYgPC8.roa
File:                     fMySFQeLaCIP9iTPsw_OslYgPC8.roa (raw, json)
Hash identifier:          chYg3fUtY7cMqHTYKZXA6VmYUUW2cUK4f0oJVuPF32M=
Subject key identifier:   7C:CC:92:15:07:8B:68:22:0F:F6:24:CF:B3:0F:CE:B2:56:20:3C:2F
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018AA6AD4DC5748BE6C4F0A50CEFD1315AAF
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/fMySFQeLaCIP9iTPsw_OslYgPC8.roa
Signing time:             Mon 18 Sep 2023 05:04:50 +0000
ROA not before:           Mon 18 Sep 2023 05:04:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
                          2001:67c:64:ffff:0:18a:a6ac:f03e/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:a6:ad:4d:c5:74:8b:e6:c4:f0:a5:0c:ef:d1:31:5a:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep 18 05:04:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7ccc9215078b68220ff624cfb30fceb256203c2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ac:1c:c9:28:ae:92:73:af:5d:f0:26:01:09:
                    41:f0:31:6d:be:ff:73:89:dd:70:0e:c1:4c:29:c9:
                    57:18:8e:cd:00:cb:d4:a5:ce:1b:64:b1:d1:7d:a2:
                    45:bf:be:57:31:f8:08:1f:d0:64:7c:75:32:07:0a:
                    11:60:5c:40:6a:d9:36:c8:2d:02:59:c5:c1:77:6d:
                    bf:0b:fc:4c:c0:14:4c:50:a0:f6:1d:64:bf:53:c9:
                    ee:13:93:e8:dd:35:5b:db:b4:47:00:91:76:41:36:
                    06:d8:48:e0:51:eb:68:97:e6:f1:23:7b:e9:bf:f6:
                    af:15:8a:19:0b:bf:56:29:fa:40:24:d1:70:2f:04:
                    1d:26:f2:94:bb:97:7a:1e:45:0d:a7:94:2c:1d:a4:
                    3f:e8:58:5f:39:4e:58:1f:d7:15:a1:0a:e4:20:2f:
                    80:b4:5f:89:51:cc:96:29:5d:07:c2:4f:29:2f:d6:
                    ca:1c:e2:2d:df:85:69:a3:ff:45:86:a4:79:9a:a6:
                    4b:b9:1c:9a:d9:12:0d:35:d1:26:dd:47:0d:23:f8:
                    f5:05:7d:b9:74:44:cd:31:a4:82:d7:c9:3d:1c:11:
                    47:b7:40:d4:44:77:50:bd:cd:db:9f:45:de:d1:81:
                    25:70:40:e8:68:68:77:b2:09:dc:46:3d:d1:f0:a9:
                    c4:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:CC:92:15:07:8B:68:22:0F:F6:24:CF:B3:0F:CE:B2:56:20:3C:2F
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/fMySFQeLaCIP9iTPsw_OslYgPC8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         46:0f:ba:70:d6:e0:e4:36:18:55:13:b3:fa:e7:34:62:5d:e0:
         0a:76:66:69:af:77:53:c8:00:48:66:3b:f7:6c:70:5e:1b:e1:
         39:b6:3d:ab:4c:91:f0:69:76:3a:7c:67:b0:d7:9c:91:d3:e0:
         32:ae:3e:4f:11:dd:1f:52:69:3f:db:76:f1:c7:2c:4c:24:ae:
         e8:35:c8:a7:42:ee:5f:04:74:53:15:dc:9a:3d:b2:ec:83:dc:
         9a:7b:0d:3f:16:ee:ef:f0:43:f2:d9:f0:53:bb:4c:73:b0:c7:
         65:9e:21:4c:47:62:f5:dc:ef:67:64:ab:3b:98:77:b7:a6:0a:
         6e:51:ef:96:85:fb:a9:67:b5:32:a6:f2:a2:ed:58:48:36:69:
         c2:d2:4d:58:b1:b0:13:8b:d8:53:fc:11:fa:b3:4e:8d:34:5f:
         c3:bd:77:52:26:5b:96:58:36:4f:6b:9c:c4:ef:95:2b:a2:d5:
         cc:c6:75:15:04:e2:33:2f:3e:29:fc:59:c6:f1:59:d3:c9:60:
         49:6c:17:8a:73:22:1b:3e:01:7c:38:65:12:e1:79:4c:4e:a3:
         aa:39:2a:9f:71:68:33:78:c2:1b:bb:8b:14:ac:07:9c:7a:6e:
         43:56:be:6a:bb:47:d1:36:86:33:13:22:bd:2a:06:66:b2:6f:
         3f:c3:e5:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----