Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/fcyGuuZ1WBpr9apJKI_cuPcCymM.roa
File:                     fcyGuuZ1WBpr9apJKI_cuPcCymM.roa (raw, json)
Hash identifier:          Of6xLcCeAAf6f2M+ASZTTqOaX5i4Hpns2vXd3YQphBI=
Subject key identifier:   7D:CC:86:BA:E6:75:58:1A:6B:F5:AA:49:28:8F:DC:B8:F7:02:CA:63
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A9EBCD56AE7A0F521655B47BF6EBA83A0
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/fcyGuuZ1WBpr9apJKI_cuPcCymM.roa
Signing time:             Sat 16 Sep 2023 16:04:50 +0000
ROA not before:           Sat 16 Sep 2023 16:04:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
                          2001:67c:64:ffff:0:18a:9ebc:45a7/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:9e:bc:d5:6a:e7:a0:f5:21:65:5b:47:bf:6e:ba:83:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep 16 16:04:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7dcc86bae675581a6bf5aa49288fdcb8f702ca63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:5d:fb:ac:41:1c:4d:17:49:66:f3:64:ac:90:
                    9f:63:f6:47:a0:ea:97:2e:07:e0:36:e4:31:36:ee:
                    65:27:b9:4a:45:7c:f6:80:4f:be:b8:b0:28:32:60:
                    10:0c:f1:80:23:bb:8f:02:78:d5:5a:92:c3:26:24:
                    1e:c4:5b:d7:5d:94:6e:63:7b:7e:e4:18:3f:21:c9:
                    cf:21:ad:84:2f:c2:7b:7c:6c:39:fa:82:a3:6c:61:
                    1d:a3:55:1e:cb:a7:6a:82:9b:b3:6d:04:4a:d8:a2:
                    d9:cf:81:a7:4e:97:00:20:7e:67:79:49:85:45:1a:
                    b5:70:6e:74:da:0a:df:15:8d:7c:b3:f5:c5:41:29:
                    cf:6d:5e:35:86:dc:d6:80:3d:e0:c9:7a:89:b6:bb:
                    c2:b8:ef:01:2e:47:09:f0:2e:76:b3:ff:4e:26:30:
                    52:eb:00:02:27:46:38:18:3d:29:ab:b2:4f:1a:31:
                    72:bb:38:29:27:9a:0a:cd:b7:25:fa:c9:da:19:8e:
                    ca:fb:bf:db:96:2c:81:26:6f:7c:8b:75:5a:f5:28:
                    37:7b:d5:0a:c9:c3:6a:a9:30:4e:ff:09:a1:6a:2d:
                    11:82:f6:15:33:39:18:1e:88:73:7e:6d:24:85:ed:
                    6e:1a:d7:51:5a:b3:21:4d:82:8a:ea:8e:eb:39:66:
                    4c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:CC:86:BA:E6:75:58:1A:6B:F5:AA:49:28:8F:DC:B8:F7:02:CA:63
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/fcyGuuZ1WBpr9apJKI_cuPcCymM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         07:dd:c4:9a:ef:41:d0:c1:ba:83:3e:22:a6:f0:ad:db:a3:fc:
         eb:36:1f:c6:a5:10:13:7f:a4:2b:0d:a0:72:f5:29:d0:47:cc:
         26:fa:b5:ae:aa:91:65:f0:51:65:dc:22:c0:12:f3:1e:8e:9a:
         92:50:4a:9a:73:74:0a:73:8a:3a:9c:96:ae:01:29:e0:51:90:
         66:5a:5d:62:d1:a7:ac:b8:0d:a9:1d:40:86:0d:0b:d1:c4:4b:
         c6:03:67:ad:18:29:45:fb:88:ba:7c:a5:91:df:3d:6b:bc:2f:
         cb:1e:e4:3a:fa:f2:83:62:1d:3c:88:57:2c:10:f4:d4:64:d2:
         cf:45:59:a5:6f:fa:3c:36:9d:67:18:8e:79:91:63:d9:32:28:
         22:30:44:61:32:42:8d:48:07:e5:79:eb:6d:d8:5b:4e:9d:3b:
         29:6b:d3:a0:44:3f:06:10:5e:fc:8d:a3:c7:e8:83:db:71:54:
         c8:33:77:03:26:1e:a2:f2:84:83:f8:81:7c:4a:d0:1a:13:a6:
         07:23:9b:e7:48:ba:61:01:05:c8:d5:62:b8:6f:9d:29:1f:b9:
         d9:18:12:ef:fe:f9:03:eb:11:77:f0:86:df:0b:9b:49:20:9f:
         7f:d0:68:fb:ff:2b:bf:83:03:bf:ab:5a:3b:1b:16:2f:ef:73:
         6e:9b:a3:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----