Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/7LIr0BGUSddEipIjFYEsYJBDePg.roa
File:                     7LIr0BGUSddEipIjFYEsYJBDePg.roa (raw, json)
Hash identifier:          WW9DStHPC+9AvhifSum9kABFeB29RJ0eB5NEZnvSRx8=
Subject key identifier:   EC:B2:2B:D0:11:94:49:D7:44:8A:92:23:15:81:2C:60:90:43:78:F8
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A77B5B7E8A7A8747B7E94DC9E5965B873
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/7LIr0BGUSddEipIjFYEsYJBDePg.roa
Signing time:             Sat 09 Sep 2023 02:11:52 +0000
ROA not before:           Sat 09 Sep 2023 02:11:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:77:b5:b7:e8:a7:a8:74:7b:7e:94:dc:9e:59:65:b8:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep  9 02:11:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ecb22bd0119449d7448a922315812c60904378f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:00:e3:76:17:a9:2e:5a:d3:1b:70:5e:8f:6f:
                    f0:8d:dd:df:1a:0e:d6:89:02:45:67:74:c8:58:15:
                    33:c3:bd:2a:09:49:1a:7e:06:b6:b2:53:51:8a:70:
                    70:7b:f6:a6:ad:f3:62:8b:62:4c:c6:22:cd:b6:9e:
                    25:aa:50:96:66:49:cc:5d:9f:ef:f7:5d:3b:0f:60:
                    ea:07:6d:94:91:95:2d:95:84:76:af:6a:bd:36:5e:
                    55:ff:e2:a7:b7:d3:2f:47:35:ab:93:7a:f5:67:b2:
                    75:e4:b4:64:11:8a:12:cb:39:f3:8c:01:17:0a:44:
                    aa:c9:e8:b8:ae:80:2a:2b:ef:9d:34:8e:a6:f2:75:
                    58:c7:bd:16:79:d0:21:d3:98:f6:56:45:fd:3a:c0:
                    6a:70:d2:d7:b5:3d:7d:c7:cf:fb:cb:b5:53:3f:71:
                    0e:5f:86:d5:0b:94:0c:3c:f3:e3:07:b3:24:56:c1:
                    8b:d7:8a:2f:3a:53:71:0f:2c:ac:a4:66:4f:3e:d7:
                    cb:92:91:eb:83:b0:22:3b:2f:d3:14:ca:b0:55:34:
                    67:c7:70:24:2e:1e:c1:24:dd:03:5f:3a:e8:3f:b1:
                    f1:e1:93:71:b3:61:d8:16:a5:51:ea:11:eb:8c:0f:
                    14:bc:f8:13:11:e8:85:41:e8:d1:25:46:ef:5c:bf:
                    2f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:B2:2B:D0:11:94:49:D7:44:8A:92:23:15:81:2C:60:90:43:78:F8
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/7LIr0BGUSddEipIjFYEsYJBDePg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         0b:fd:98:ba:8a:d0:cb:3b:5b:2f:36:57:3d:ae:78:be:25:e4:
         34:a4:ed:47:1b:7d:32:f9:c6:50:7c:b6:90:30:0d:2b:ac:32:
         4e:ef:80:05:b8:b6:0b:30:70:76:76:9c:2d:b8:39:48:9c:37:
         94:ed:d0:94:b1:6d:ff:10:c5:8d:0c:ee:c7:43:98:bc:dc:3e:
         26:6e:8e:73:d1:88:d4:5a:b4:d6:01:16:10:8a:e4:17:0c:b6:
         43:63:b6:9b:30:7b:ae:80:f3:44:fd:cb:89:b5:d6:9a:9b:1b:
         8f:74:d7:fe:8e:e3:c4:ab:dc:ea:7d:a6:69:54:f2:57:e8:34:
         12:34:ab:10:41:42:ff:4a:9e:c9:66:7f:ea:43:06:d3:86:ea:
         6e:5d:4e:1c:cc:e9:7a:08:89:66:7f:1d:2a:ab:92:9b:b3:6e:
         4f:6a:66:0b:46:52:d1:88:c1:53:0f:c3:c5:c5:44:76:77:17:
         dd:c1:86:37:de:be:11:2f:b1:67:5c:e5:72:d0:de:0a:b7:ba:
         79:cd:c7:5d:4f:97:d2:0c:28:de:53:fd:9c:61:1b:51:c8:f0:
         ac:6e:e0:ce:21:e8:51:85:59:95:ad:c2:a0:19:c1:53:9e:6e:
         bc:ad:f9:41:94:b6:5b:05:62:6d:88:d5:a3:7a:b6:cd:da:d4:
         c5:5d:a7:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----