Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/30a5OmQ6RYavg-_wat15PxWQbbM.roa
File:                     30a5OmQ6RYavg-_wat15PxWQbbM.roa (raw, json)
Hash identifier:          gRbV7h3rPB6VAWZ95RgxUpepn2UdMODBhQOawXJI8Bc=
Subject key identifier:   DF:46:B9:3A:64:3A:45:86:AF:83:EF:F0:6A:DD:79:3F:15:90:6D:B3
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A76DBD219A27CF5BE5186D83F80E049AA
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/30a5OmQ6RYavg-_wat15PxWQbbM.roa
Signing time:             Fri 08 Sep 2023 22:13:52 +0000
ROA not before:           Fri 08 Sep 2023 22:13:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:76:db:d2:19:a2:7c:f5:be:51:86:d8:3f:80:e0:49:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep  8 22:13:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=df46b93a643a4586af83eff06add793f15906db3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:da:ea:6f:f8:cf:bf:e7:69:e6:c7:18:cd:0c:
                    d1:a7:14:62:9a:53:f3:34:42:d0:4c:92:74:8e:bc:
                    19:a7:d2:03:f1:28:50:d2:9e:c0:bb:84:19:34:68:
                    ff:66:37:f5:3e:6f:b7:53:cf:f6:f4:e9:34:67:d7:
                    10:97:13:62:c6:9f:fb:bb:ef:d1:33:8c:dd:3e:31:
                    67:c3:e5:2d:96:f2:71:ae:1d:99:3d:bb:c6:10:8d:
                    4c:29:fa:cb:b0:1b:95:1c:1b:d1:9f:40:c5:6b:de:
                    76:c6:c7:45:30:cd:43:7d:a0:88:fc:d0:9f:c4:16:
                    e8:0f:d7:d5:40:75:71:1c:3e:73:fe:5c:f4:77:61:
                    3c:e2:e9:e8:32:8d:47:09:32:00:22:3e:d1:49:4e:
                    68:b6:ca:34:70:18:fc:59:93:65:4d:5b:d9:29:b6:
                    ee:32:3a:db:77:c0:b6:d8:c2:f2:c2:ae:9a:cc:36:
                    8a:75:9e:1f:62:4c:7c:16:83:90:98:e5:9b:1b:68:
                    77:0d:b5:fd:65:c4:8e:cb:c5:aa:47:46:3a:f2:6f:
                    e1:38:ab:5f:d9:98:f1:1d:d5:d1:c2:57:f8:01:db:
                    34:15:a6:ce:ca:59:fb:4d:22:3e:8f:d4:8a:8a:3d:
                    d9:70:e9:63:74:14:f5:c9:5e:d1:e1:af:4a:6f:ee:
                    f8:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:46:B9:3A:64:3A:45:86:AF:83:EF:F0:6A:DD:79:3F:15:90:6D:B3
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/30a5OmQ6RYavg-_wat15PxWQbbM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         48:e3:41:88:3d:63:8d:ba:f8:1e:9f:4d:b6:46:9b:cc:e9:d6:
         e0:4d:3c:0a:a3:d5:e4:51:6d:93:47:2a:b9:ed:5d:bb:f8:42:
         c7:14:cf:24:94:25:c6:78:21:7d:c5:ab:70:75:e9:59:1a:bb:
         21:01:9b:9e:36:fe:78:ae:a4:92:3c:ad:c0:9e:b4:8b:e5:3b:
         b4:a3:ea:df:cf:27:8a:fe:f1:f3:ea:72:fa:af:85:2a:ce:90:
         c0:c0:d0:5c:95:42:18:70:b1:59:d2:f7:a9:8c:d5:0d:80:35:
         77:35:3c:26:16:62:fa:de:45:b7:ab:2a:df:d5:26:83:ac:67:
         de:0b:7e:c3:d1:28:87:34:49:5d:15:6e:7b:1f:c1:13:16:b4:
         c2:d2:5f:69:72:93:ae:fc:dd:f9:41:60:e8:8c:87:51:64:d3:
         0b:79:67:8b:14:37:f8:95:81:eb:ef:83:ba:91:4b:06:ac:0b:
         97:46:b1:32:70:fa:7b:29:3a:f9:ff:29:b6:e6:03:44:1e:22:
         6f:04:5b:2d:bd:91:af:db:77:18:87:c5:64:99:ec:ab:7a:62:
         e4:03:1d:65:cf:6a:44:81:68:4d:3c:a4:61:ab:b9:3d:bf:a7:
         7b:51:0c:99:df:e2:11:37:70:28:42:7a:7d:75:c8:42:f8:26:
         69:cc:44:b3
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYp229IZonz1vlGG2D+A4EmqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMWYxNGM4NTA3NDVhN2MzMTJlYTJlYjBiZTAzMDUyZTQ5
NjcyNzUwHhcNMjMwOTA4MjIxMzUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZjQ2YjkzYTY0M2E0NTg2YWY4M2VmZjA2YWRkNzkzZjE1OTA2ZGIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndrqb/jPv+dp5scYzQzRpxRimlPz
NELQTJJ0jrwZp9ID8ShQ0p7Au4QZNGj/Zjf1Pm+3U8/29Ok0Z9cQlxNixp/7u+/R
M4zdPjFnw+UtlvJxrh2ZPbvGEI1MKfrLsBuVHBvRn0DFa952xsdFMM1DfaCI/NCf
xBboD9fVQHVxHD5z/lz0d2E84unoMo1HCTIAIj7RSU5otso0cBj8WZNlTVvZKbbu
Mjrbd8C22MLywq6azDaKdZ4fYkx8FoOQmOWbG2h3DbX9ZcSOy8WqR0Y68m/hOKtf
2ZjxHdXRwlf4Ads0FabOyln7TSI+j9SKij3ZcOljdBT1yV7R4a9Kb+74OQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFN9GuTpkOkWGr4Pv8GrdeT8VkG2zMB8GA1UdIwQY
MBaAFKofFMhQdFp8MS6i6wvgMFLklnJ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQt
ODNmY2QyMjU0ODJhLzEvMzBhNU9tUTZSWWF2Zy1fd2F0MTVQeFdRYmJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQtODNmY2QyMjU0ODJh
LzEvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEjjQYg9Y426+B6fTbZG
m8zp1uBNPAqj1eRRbZNHKrntXbv4QscUzySUJcZ4IX3Fq3B16VkauyEBm542/niu
pJI8rcCetIvlO7Sj6t/PJ4r+8fPqcvqvhSrOkMDA0FyVQhhwsVnS96mM1Q2ANXc1
PCYWYvreRberKt/VJoOsZ94LfsPRKIc0SV0VbnsfwRMWtMLSX2lyk6783flBYOiM
h1Fk0wt5Z4sUN/iVgevvg7qRSwasC5dGsTJw+nspOvn/KbbmA0QeIm8EWy29ka/b
dxiHxWSZ7Kt6YuQDHWXPakSBaE08pGGruT2/p3tRDJnf4hE3cChCen11yEL4JmnM
RLM=
-----END CERTIFICATE-----