Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/4-5solMGeJL2PkLQVqAoOCzsmoc.roa
File:                     4-5solMGeJL2PkLQVqAoOCzsmoc.roa (raw, json)
Hash identifier:          AOLodb4SaEaO+SLQZTegtWjU/wEfNK1BJxLCdv11n34=
Subject key identifier:   E3:EE:6C:A2:53:06:78:92:F6:3E:42:D0:56:A0:28:38:2C:EC:9A:87
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A7C391CE561E452B1E00D7E5C10217CCD
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/4-5solMGeJL2PkLQVqAoOCzsmoc.roa
Signing time:             Sat 09 Sep 2023 23:13:52 +0000
ROA not before:           Sat 09 Sep 2023 23:13:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:7c:39:1c:e5:61:e4:52:b1:e0:0d:7e:5c:10:21:7c:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep  9 23:13:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e3ee6ca253067892f63e42d056a028382cec9a87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:a7:74:34:a2:fe:91:6c:3d:1c:33:a6:6f:fd:
                    01:76:73:1f:3e:e6:a7:9d:49:81:6a:bf:d7:39:e5:
                    21:18:b0:97:98:e0:86:19:63:4e:26:eb:78:df:84:
                    e3:69:cd:89:9a:35:cf:92:a1:5b:35:c8:29:b8:5b:
                    db:56:91:7e:22:a6:88:8d:a3:9e:ad:ce:48:20:29:
                    1c:04:8f:6b:7a:fd:74:1d:93:a5:02:a6:2d:74:2a:
                    9b:17:1d:dd:89:a5:cd:bb:59:13:61:02:dc:2e:7d:
                    41:30:d1:2c:ce:94:2b:9d:3b:44:7b:4c:b8:50:8f:
                    ab:bd:f5:49:8b:8b:5e:3e:ba:ae:48:6a:25:84:41:
                    32:7a:db:db:22:41:45:0b:4e:67:62:b5:97:e5:9a:
                    ff:fb:43:f5:99:5e:55:c0:26:26:d6:e9:b0:2f:f1:
                    d5:c0:f8:96:b3:15:93:f3:99:86:7e:97:41:d3:42:
                    77:b4:cb:30:1e:84:00:ad:21:59:b7:80:ef:90:65:
                    87:a7:41:9f:5d:8f:8b:56:53:62:06:cc:d0:01:1a:
                    21:41:68:d5:4c:c8:08:96:a4:70:31:e5:19:ba:fb:
                    31:b1:ab:79:0b:ac:c1:e0:aa:d7:ec:ec:07:60:0b:
                    9c:e6:2d:22:65:5e:f2:70:09:25:7b:1b:ec:97:f7:
                    b2:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:EE:6C:A2:53:06:78:92:F6:3E:42:D0:56:A0:28:38:2C:EC:9A:87
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/4-5solMGeJL2PkLQVqAoOCzsmoc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         64:8e:19:70:73:c9:dd:ba:b5:f5:21:87:c3:1d:cc:ef:61:5e:
         bb:1d:77:c4:78:d4:24:34:70:e0:1e:de:45:78:63:c1:c1:ec:
         21:c4:c7:5e:8f:63:05:3b:f5:60:01:1a:36:1c:30:32:86:38:
         1f:12:02:80:31:f9:8c:7b:7c:a9:1b:ca:1f:30:c3:84:79:cd:
         e9:89:06:73:9b:a0:4a:4e:a9:41:2c:40:56:e0:36:7d:12:47:
         3b:26:83:22:9d:76:b6:65:01:a1:c9:54:6b:ff:5c:df:f0:3f:
         a4:12:7c:e7:4a:47:6a:31:63:92:22:ff:54:73:fe:3a:cd:3f:
         6e:33:8e:97:30:56:7e:50:b8:b6:eb:de:5d:de:fc:e7:06:44:
         5d:65:03:ca:b7:37:79:cd:6b:af:89:bc:e9:a0:ca:6b:2a:0a:
         85:11:30:ee:2b:3f:c1:6c:2f:39:f4:32:81:0c:06:f0:88:68:
         e5:63:38:9a:45:b4:e8:ea:c1:e3:03:db:33:17:75:18:2c:6b:
         a9:a5:1b:e8:cb:ee:7e:45:44:1d:91:73:d5:21:df:4b:31:12:
         ee:60:98:fa:c0:5f:31:1c:a8:c7:08:b8:8d:3f:0d:1b:f5:0a:
         ad:62:b6:a0:83:ec:1d:1b:a2:22:88:9d:ce:4b:a5:14:a4:a3:
         73:df:d8:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----