Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/fqfKkHiy-R0anaJOzlX5q3xLOBk.roa
File:                     fqfKkHiy-R0anaJOzlX5q3xLOBk.roa (raw, json)
Hash identifier:          7ev7HY9xVhWGtTDr8mTPRhmluQ/2BbFIgrJkwbJp2Qk=
Subject key identifier:   7E:A7:CA:90:78:B2:F9:1D:1A:9D:A2:4E:CE:55:F9:AB:7C:4B:38:19
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A770A836A64CDF7D5ACD11A81AD6A85DE
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/fqfKkHiy-R0anaJOzlX5q3xLOBk.roa
Signing time:             Fri 08 Sep 2023 23:04:52 +0000
ROA not before:           Fri 08 Sep 2023 23:04:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:18a:7709:f57c/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:77:0a:83:6a:64:cd:f7:d5:ac:d1:1a:81:ad:6a:85:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep  8 23:04:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7ea7ca9078b2f91d1a9da24ece55f9ab7c4b3819
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:2a:bd:8b:2a:b8:33:b9:fd:d3:33:6b:59:11:
                    de:a6:26:e6:eb:92:64:ba:47:4c:e2:b1:9d:08:8a:
                    46:33:1a:f4:b0:20:cf:03:7d:da:5f:2a:55:91:28:
                    54:7f:9b:fc:20:2a:36:6a:1e:bc:3f:2b:6d:f4:d4:
                    03:a0:a0:f2:eb:7c:4f:a6:a2:c0:ca:68:7c:a5:be:
                    f6:72:49:9c:c1:11:8f:43:ba:d1:84:b7:7a:8f:0a:
                    81:cb:11:38:e7:bd:5d:8c:3d:a0:c9:e6:2f:53:22:
                    d4:c2:bb:6f:6d:48:e7:d6:70:7e:53:4b:ce:8d:c8:
                    4f:d0:8d:17:f1:25:3a:ab:09:a0:55:c7:29:43:6b:
                    b7:bc:2a:6e:4d:7c:cc:8a:55:83:d4:5e:03:b4:02:
                    4c:d2:cb:f7:c9:02:88:82:ec:5a:a8:61:37:b8:6a:
                    e3:5b:27:4f:2e:3f:af:53:67:71:b4:91:4b:eb:d3:
                    67:23:d2:2e:da:da:82:06:19:5d:42:9d:e7:82:92:
                    92:db:af:21:0c:a7:a7:5b:37:f2:f8:97:f2:79:fd:
                    09:79:91:0c:6c:e3:89:c9:a9:72:03:e1:3d:9b:bb:
                    dd:ec:da:ab:a8:9d:57:d8:88:bd:cf:f3:11:02:d7:
                    11:3f:1f:eb:3f:63:0f:b9:f5:c3:22:b8:3e:7c:35:
                    15:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:A7:CA:90:78:B2:F9:1D:1A:9D:A2:4E:CE:55:F9:AB:7C:4B:38:19
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/fqfKkHiy-R0anaJOzlX5q3xLOBk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         63:fc:e5:0c:e8:0d:c2:83:97:1d:82:0e:21:09:1b:fe:c5:fb:
         7f:b3:33:36:95:a2:a9:fe:6f:9c:57:0f:4d:5f:db:a9:76:24:
         70:bd:1b:3a:2d:ea:35:d6:c9:90:cd:e2:5e:f9:fe:3f:ab:13:
         c2:1d:4a:ba:e3:7e:70:9b:b1:be:09:81:6d:4b:4d:89:6d:14:
         47:56:e4:58:8f:b1:39:6e:f3:4d:98:b4:6f:66:1e:fe:2a:1c:
         0f:66:ff:8b:4e:a7:c6:06:15:75:8b:39:a0:75:a6:7f:ea:d0:
         f3:9a:ac:ac:fe:43:b0:50:ef:e7:0f:8f:35:82:10:2f:55:b0:
         d8:7e:45:4f:42:31:13:f8:e9:27:0f:57:2e:a0:5c:55:15:b4:
         94:38:97:bb:ad:1e:6a:60:44:d4:73:1c:0b:0e:6a:b9:c0:4b:
         e9:a3:9b:71:10:66:98:f1:e9:1d:6c:d2:c3:73:12:85:4f:12:
         b7:ff:0c:97:0c:33:e9:40:35:0b:cc:4f:ea:c7:06:4a:24:24:
         35:db:b3:bd:74:0d:7e:29:63:99:7c:14:67:56:78:7d:27:19:
         e0:ec:c4:4c:bd:e5:80:dc:f4:19:26:61:17:6a:a9:c2:53:97:
         20:f6:30:27:dd:2e:3d:4b:58:05:d0:55:f0:fe:48:25:99:13:
         16:f0:10:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----