Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/1OdslPRy9kHkHDhWSrynJMNG3_M.roa
File:                     1OdslPRy9kHkHDhWSrynJMNG3_M.roa (raw, json)
Hash identifier:          fBO0DJVTpnZtKIDbMtNdz6wqtAXgnjERpjSyl7HgY9w=
Subject key identifier:   D4:E7:6C:94:F4:72:F6:41:E4:1C:38:56:4A:BC:A7:24:C3:46:DF:F3
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018AA2A0ED84178BB9DB48DE977F607F82B0
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/1OdslPRy9kHkHDhWSrynJMNG3_M.roa
Signing time:             Sun 17 Sep 2023 10:12:50 +0000
ROA not before:           Sun 17 Sep 2023 10:12:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:a2:a0:ed:84:17:8b:b9:db:48:de:97:7f:60:7f:82:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep 17 10:12:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d4e76c94f472f641e41c38564abca724c346dff3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f5:e0:c2:ae:73:07:ba:bf:83:8b:7e:4e:a2:
                    4f:d0:87:29:77:ca:00:2f:da:f2:26:04:58:45:b1:
                    b1:a2:ad:54:48:39:ac:4f:db:39:d8:d3:c3:67:92:
                    82:9b:64:a5:6e:b9:98:82:24:5c:73:e3:70:8c:cb:
                    6c:04:12:9c:b2:2c:1d:33:04:7b:cf:68:5c:00:6d:
                    53:92:cc:5a:e2:65:6e:a1:02:5f:54:7d:d6:ec:52:
                    0c:dc:42:43:77:d9:4b:2a:4e:2f:c0:1a:73:0d:2e:
                    16:80:88:44:9b:1b:eb:7f:bb:09:7d:49:fc:12:10:
                    f0:ea:d0:54:12:83:94:93:34:d6:bf:68:8b:b8:f0:
                    c5:70:7c:7e:0a:96:ac:e6:65:35:bb:67:06:b5:65:
                    2e:69:f0:0d:fb:dd:44:b6:11:52:7b:b0:60:dd:6d:
                    3a:f3:9f:cc:85:36:3c:21:8e:fe:fb:35:b4:79:81:
                    b7:73:15:69:58:96:95:e2:fb:3d:3e:b0:b0:14:6d:
                    69:41:18:db:3c:5c:f4:f4:8b:d0:71:93:6d:40:7b:
                    e7:93:85:c7:93:68:33:d7:bc:a5:b3:6d:a1:89:ae:
                    bf:ab:d8:2e:0b:2e:08:07:72:83:7c:81:20:8b:82:
                    8b:cc:97:73:50:cd:76:1d:99:d3:77:f9:63:fd:68:
                    7a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:E7:6C:94:F4:72:F6:41:E4:1C:38:56:4A:BC:A7:24:C3:46:DF:F3
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/1OdslPRy9kHkHDhWSrynJMNG3_M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         40:8d:b0:de:00:ed:81:ad:0e:d9:2f:56:9f:bb:d5:14:db:5b:
         78:22:31:7c:88:3b:5c:3b:44:f0:f0:b6:3a:b1:69:81:03:a4:
         5c:43:07:61:f7:9c:6b:91:1b:4a:9a:3a:66:e9:cf:fa:1d:a4:
         2e:35:0e:23:56:9f:55:32:cf:3f:4e:6b:15:5d:1b:9e:9c:df:
         0e:69:22:b8:89:dc:7e:c5:7c:a2:4a:8d:a1:a9:1d:c3:12:f8:
         a4:8d:dc:ba:a8:1e:3f:64:3c:4c:86:93:6a:9f:ba:c5:42:60:
         17:2b:b7:ea:b6:e6:4e:94:30:44:06:c4:25:26:a4:0b:c2:8e:
         1a:f1:d5:de:56:6c:1b:6d:0b:d0:76:97:90:5b:80:82:8d:de:
         d3:d6:38:61:8c:36:58:d8:27:c9:71:f5:2d:87:66:44:63:63:
         99:34:e5:0d:a7:c1:8e:e7:7b:33:95:aa:a3:71:10:37:a0:29:
         d5:24:14:dd:2d:63:43:6c:eb:f8:45:bb:96:aa:1e:32:e5:c3:
         a2:dd:c9:b2:1b:50:ed:62:f7:e0:4b:2b:92:f7:39:39:46:a3:
         2d:64:d5:c8:06:ea:68:c6:9e:ee:c5:f3:1f:86:9b:ef:b0:62:
         d2:10:99:91:f6:29:d1:f7:15:dd:72:6f:eb:56:8f:ea:6f:c1:
         67:06:31:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----