Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/woIxCkE20-QzJHIhzmqS6DRnalM.roa
File:                     woIxCkE20-QzJHIhzmqS6DRnalM.roa (raw, json)
Hash identifier:          O5PMdDdhEp8/88wupac/5ZYCxsWAaT+r77WAQeAjTuM=
Subject key identifier:   C2:82:31:0A:41:36:D3:E4:33:24:72:21:CE:6A:92:E8:34:67:6A:53
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A9DB095953087426FCB79A4A6D968936C
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/woIxCkE20-QzJHIhzmqS6DRnalM.roa
Signing time:             Sat 16 Sep 2023 11:11:50 +0000
ROA not before:           Sat 16 Sep 2023 11:11:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:9d:b0:95:95:30:87:42:6f:cb:79:a4:a6:d9:68:93:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep 16 11:11:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c282310a4136d3e433247221ce6a92e834676a53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:eb:98:14:28:e1:ea:83:eb:cd:a9:38:41:7d:
                    c4:87:89:7f:88:e2:f3:a1:61:d1:48:95:ac:00:e1:
                    ee:96:54:df:f0:09:fe:45:40:cb:38:11:03:86:8f:
                    cc:30:06:f4:51:a2:31:1a:b5:0b:df:f8:64:d5:e4:
                    56:66:1c:2e:f6:05:81:e9:19:09:1e:00:d1:ff:6a:
                    1d:0b:80:96:b1:b7:ef:b0:89:a9:3f:9a:56:96:1e:
                    8b:cf:80:71:cb:8e:02:b9:d7:07:61:86:32:d7:19:
                    ef:f4:a7:de:a8:87:85:a4:13:7b:52:c0:7a:c6:91:
                    d8:e5:86:7c:fb:87:be:a0:02:54:52:1e:7b:19:50:
                    3f:52:15:2b:17:d6:f1:ba:62:3d:70:50:5d:30:b9:
                    c5:b5:d0:ea:a9:21:22:39:f8:51:63:64:4d:3a:77:
                    09:49:51:55:be:ca:fa:6c:d9:df:d8:7b:68:59:95:
                    74:f1:06:73:db:82:f3:85:73:3b:87:9b:23:fa:42:
                    40:46:17:52:55:81:fe:60:59:72:04:16:f1:6c:cc:
                    52:40:71:a9:d3:ad:f3:f1:a7:fa:1a:1d:a9:56:eb:
                    db:9a:6e:a5:9f:49:6e:81:3d:3c:38:d0:03:8c:72:
                    1e:86:12:6b:ec:3d:22:a8:0b:a1:d0:94:38:aa:1a:
                    e3:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:82:31:0A:41:36:D3:E4:33:24:72:21:CE:6A:92:E8:34:67:6A:53
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/woIxCkE20-QzJHIhzmqS6DRnalM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         2c:9e:16:fc:af:29:42:6b:e1:be:35:fb:a9:9f:22:36:66:ec:
         84:71:be:74:1d:06:43:d4:7f:fa:f9:8d:80:66:88:98:3c:6d:
         b0:b4:f5:0d:a2:b8:c9:3b:b6:f4:9f:79:21:0d:22:bd:dc:ce:
         5c:dd:23:41:7e:b6:fa:0c:d1:fb:48:88:64:af:46:cd:3c:00:
         b0:75:41:1e:90:01:db:ba:19:59:24:a3:6c:c2:ff:34:08:5e:
         1d:b0:c7:3f:40:b2:72:37:91:b0:82:0e:48:a7:a5:be:01:7b:
         8d:0f:ea:ff:7c:02:3b:26:5f:6d:47:01:2c:d0:8d:69:45:c2:
         4f:ea:3e:94:18:61:e3:7a:1a:1d:22:87:1f:27:e0:f7:e8:57:
         9b:d4:bd:51:47:9f:b2:56:a0:5f:0a:53:0c:f6:bd:0f:2a:bb:
         b8:47:2f:e2:a4:b2:84:55:a0:04:c2:03:91:48:48:1a:5f:49:
         c2:c2:45:0b:74:ee:c6:e5:35:82:fb:39:a5:e5:79:5a:3c:b0:
         fc:d3:8f:74:2b:8b:8b:da:b3:ed:fc:64:86:c5:8a:2f:74:29:
         12:2e:93:cf:54:0e:f0:64:bd:06:74:7d:cd:cc:4a:f0:2d:f8:
         9f:28:83:f9:a6:22:b0:62:8d:17:89:32:27:12:8f:7c:93:7a:
         26:37:85:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----