Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/6Bsn8gVCtPpFvQraF5q7Bvhk8Qc.roa
File:                     6Bsn8gVCtPpFvQraF5q7Bvhk8Qc.roa (raw, json)
Hash identifier:          dBFnuyVmCGqX3BxkGoiEmCi6Bgev+deGb7OpJ8rC/IY=
Subject key identifier:   E8:1B:27:F2:05:42:B4:FA:45:BD:0A:DA:17:9A:BB:06:F8:64:F1:07
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A54C07CA2FA346ADC686D403E71C73252
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/6Bsn8gVCtPpFvQraF5q7Bvhk8Qc.roa
Signing time:             Sat 02 Sep 2023 07:16:55 +0000
ROA not before:           Sat 02 Sep 2023 07:16:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:54:c0:7c:a2:fa:34:6a:dc:68:6d:40:3e:71:c7:32:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep  2 07:16:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e81b27f20542b4fa45bd0ada179abb06f864f107
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:c1:b1:9b:b5:74:7f:76:fd:72:e9:ba:15:6c:
                    c0:bd:15:10:c8:ec:73:a6:c5:d5:4d:16:4c:bf:60:
                    82:7b:1b:06:58:7d:d2:97:d8:ea:e5:ec:c7:f4:78:
                    3f:17:b8:4f:f1:c9:66:c5:8d:15:6f:e9:d8:17:ab:
                    e8:80:55:f0:a0:93:db:31:b9:dd:0e:66:f6:27:27:
                    b6:18:03:bb:a7:03:00:b8:16:d1:b9:a1:9b:d7:fd:
                    40:95:d8:54:f6:a8:36:f1:c7:f2:a3:9a:d1:51:a3:
                    1f:c0:56:94:0d:52:98:3c:ea:fa:03:5a:12:75:42:
                    de:b9:82:b3:85:d5:ef:0c:46:94:d4:71:ea:88:e3:
                    eb:83:ee:0c:27:4f:61:ee:64:92:08:75:24:af:a0:
                    a9:9e:3d:08:04:e9:16:f2:68:2c:c9:4b:90:39:1d:
                    7d:f5:be:2f:1f:53:03:59:db:2e:cc:5e:59:ed:0d:
                    42:b9:88:c0:a6:64:48:7e:46:de:19:f1:5c:88:b2:
                    63:59:07:c0:50:f6:ed:40:d7:6b:5e:46:94:95:ee:
                    90:b9:75:c4:6c:11:20:10:e9:57:49:f7:6e:c5:90:
                    c1:d0:aa:6d:b3:82:9b:54:e1:b2:67:bc:9c:88:67:
                    e2:ea:d6:13:91:77:a8:60:f5:cf:23:94:f5:5f:5d:
                    78:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:1B:27:F2:05:42:B4:FA:45:BD:0A:DA:17:9A:BB:06:F8:64:F1:07
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/6Bsn8gVCtPpFvQraF5q7Bvhk8Qc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         66:3e:d0:16:f9:d1:64:50:56:c1:27:09:2d:c7:10:14:34:ac:
         d2:e7:27:8e:1d:ee:5f:5a:29:61:5f:85:a3:96:35:5d:6d:de:
         95:97:02:2c:12:a5:5c:26:79:36:3b:ee:e6:3a:8c:02:45:21:
         80:4a:c4:93:76:e9:d4:9a:94:b2:ed:3b:1e:55:24:cf:cb:aa:
         d2:ec:4c:b8:cc:93:a6:eb:40:55:15:de:71:00:9b:ed:49:f8:
         5e:91:e7:f9:83:da:af:7c:6b:40:1d:ec:0f:24:85:43:1b:5b:
         89:8a:3c:d8:e3:72:56:82:35:1d:bb:51:28:18:39:68:2c:d2:
         35:0f:c2:2d:c0:59:12:7c:a5:36:02:2a:31:03:fe:e1:65:78:
         17:06:5b:42:43:14:b2:60:c1:78:10:68:eb:74:95:42:8f:c0:
         5e:9d:56:11:8c:62:b7:e8:d2:71:89:73:10:94:ad:0f:d5:20:
         cc:a7:1b:43:c6:5e:96:02:f9:e0:1a:3b:80:e4:ef:ca:d1:84:
         91:0f:e7:4f:7c:88:80:4c:d0:25:ec:92:f9:29:22:f4:0b:b3:
         ac:e6:a3:61:0c:c5:e1:f3:8d:1d:5c:ed:ce:3c:af:ba:9f:08:
         eb:f8:94:4c:45:85:f6:f3:a9:82:c3:52:c3:dd:26:c9:d4:52:
         14:29:b9:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----