Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/6rIDCiwbucqbhGMDs3v4YZW1r4k.roa
File:                     6rIDCiwbucqbhGMDs3v4YZW1r4k.roa (raw, json)
Hash identifier:          1WeJw7nM/WK8z/YPEhX5S1yf+oAGCYlzWj5cbCOjvmQ=
Subject key identifier:   EA:B2:03:0A:2C:1B:B9:CA:9B:84:63:03:B3:7B:F8:61:95:B5:AF:89
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A9DE958F4DC7B1C35D5AE2040C5BE0950
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/6rIDCiwbucqbhGMDs3v4YZW1r4k.roa
Signing time:             Sat 16 Sep 2023 12:13:50 +0000
ROA not before:           Sat 16 Sep 2023 12:13:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:9d:e9:58:f4:dc:7b:1c:35:d5:ae:20:40:c5:be:09:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep 16 12:13:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=eab2030a2c1bb9ca9b846303b37bf86195b5af89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:76:89:cb:0d:4a:9c:9f:0d:10:aa:11:b1:01:
                    3b:be:92:70:55:d4:7c:a6:11:9c:c6:df:30:13:33:
                    7e:e0:90:55:95:04:dd:ee:31:f4:ff:a5:8e:b6:24:
                    f1:3a:0c:47:88:38:88:97:53:f9:a6:d8:8d:a6:f2:
                    36:45:74:06:81:69:3c:59:fa:1d:aa:71:5a:d5:73:
                    00:3c:3e:cf:1e:0a:3a:c9:95:92:3f:53:ef:a4:73:
                    a2:81:c1:3a:05:9e:e8:8f:2a:51:56:84:92:f4:9e:
                    bc:43:ae:7c:26:0d:19:33:7f:ba:20:cb:3a:1d:4f:
                    a7:00:97:36:17:2d:f9:bb:59:b1:e8:e4:48:90:83:
                    2e:0e:f4:43:78:09:cc:b1:e4:f2:2f:cf:ab:09:4e:
                    8d:21:e7:54:0f:86:38:cf:7f:2c:24:c7:17:34:3b:
                    02:03:e2:86:82:8e:e2:82:d8:c6:b0:39:cf:5c:76:
                    1d:72:e4:49:f2:49:68:d0:8d:e8:60:3a:58:3c:fe:
                    d0:9c:79:9f:b7:5d:77:49:b9:3c:78:e4:99:99:8c:
                    8d:a9:38:65:22:51:01:f6:3b:db:36:fe:d5:9e:de:
                    90:cd:e0:fb:bd:0e:d2:25:52:29:75:51:58:91:10:
                    2a:ca:85:87:d8:a5:02:d2:55:28:ae:1a:05:57:73:
                    b8:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:B2:03:0A:2C:1B:B9:CA:9B:84:63:03:B3:7B:F8:61:95:B5:AF:89
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/6rIDCiwbucqbhGMDs3v4YZW1r4k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         34:09:f3:e0:60:ad:27:c2:47:cc:15:5d:99:56:60:b4:01:4b:
         cc:82:6d:f1:d1:b6:01:0a:f7:27:45:a4:9f:ab:47:99:d9:9f:
         a7:b1:9a:b8:46:42:4b:e9:b3:cd:59:75:ac:a9:a3:bc:97:3e:
         77:72:8e:f6:22:ac:45:37:26:72:95:6b:90:eb:da:77:df:15:
         24:95:71:ad:26:7a:49:19:70:0e:66:3a:2f:19:70:aa:8f:fd:
         49:8c:09:74:a5:9a:3d:3c:ee:f9:e8:93:06:20:b3:4c:36:17:
         c4:44:c7:7c:19:da:ea:32:5d:3f:19:d5:9f:50:f7:d8:23:1d:
         95:75:29:46:d4:e8:4f:c2:82:a8:47:ee:01:50:fc:d2:e8:5d:
         24:78:f1:52:b1:3b:ac:ed:2b:0b:d4:80:bc:43:e4:59:a9:54:
         20:c4:78:2e:7c:3e:bf:53:52:19:82:e6:5d:9d:37:03:e8:95:
         50:f7:08:fe:08:a2:c0:66:ad:b7:c0:ee:b2:6c:c9:43:7e:ed:
         bb:45:41:f8:44:5b:0e:54:5d:c2:9e:0d:f9:b6:58:a8:31:7d:
         e6:14:29:0a:f6:8b:b6:01:2a:80:a4:0a:c9:4f:d3:7c:60:17:
         3f:88:bd:89:6c:30:14:be:f1:39:d8:3e:2b:41:31:47:dd:f9:
         10:4b:9a:19
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYqd6Vj03HscNdWuIEDFvglQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMWYxNGM4NTA3NDVhN2MzMTJlYTJlYjBiZTAzMDUyZTQ5
NjcyNzUwHhcNMjMwOTE2MTIxMzUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYWIyMDMwYTJjMWJiOWNhOWI4NDYzMDNiMzdiZjg2MTk1YjVhZjg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHaJyw1KnJ8NEKoRsQE7vpJwVdR8
phGcxt8wEzN+4JBVlQTd7jH0/6WOtiTxOgxHiDiIl1P5ptiNpvI2RXQGgWk8Wfod
qnFa1XMAPD7PHgo6yZWSP1PvpHOigcE6BZ7ojypRVoSS9J68Q658Jg0ZM3+6IMs6
HU+nAJc2Fy35u1mx6ORIkIMuDvRDeAnMseTyL8+rCU6NIedUD4Y4z38sJMcXNDsC
A+KGgo7igtjGsDnPXHYdcuRJ8klo0I3oYDpYPP7QnHmft113Sbk8eOSZmYyNqThl
IlEB9jvbNv7Vnt6QzeD7vQ7SJVIpdVFYkRAqyoWH2KUC0lUorhoFV3O40wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOqyAwosG7nKm4RjA7N7+GGVta+JMB8GA1UdIwQY
MBaAFKofFMhQdFp8MS6i6wvgMFLklnJ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQt
ODNmY2QyMjU0ODJhLzEvNnJJRENpd2J1Y3FiaEdNRHMzdjRZWlcxcjRrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQtODNmY2QyMjU0ODJh
LzEvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADQJ8+BgrSfCR8wVXZlW
YLQBS8yCbfHRtgEK9ydFpJ+rR5nZn6exmrhGQkvps81Zdaypo7yXPndyjvYirEU3
JnKVa5Dr2nffFSSVca0mekkZcA5mOi8ZcKqP/UmMCXSlmj087vnokwYgs0w2F8RE
x3wZ2uoyXT8Z1Z9Q99gjHZV1KUbU6E/CgqhH7gFQ/NLoXSR48VKxO6ztKwvUgLxD
5FmpVCDEeC58Pr9TUhmC5l2dNwPolVD3CP4IosBmrbfA7rJsyUN+7btFQfhEWw5U
XcKeDfm2WKgxfeYUKQr2i7YBKoCkCslP03xgFz+IvYlsMBS+8TnYPitBMUfd+RBL
mhk=
-----END CERTIFICATE-----