Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/7RtLmXerAqiPDZC8Td9qZmjzcEU.roa
File:                     7RtLmXerAqiPDZC8Td9qZmjzcEU.roa (raw, json)
Hash identifier:          MzhRGduoPTpl0Jx1K35Oi12zPmI0yJZ9NFnwTPj0LCo=
Subject key identifier:   ED:1B:4B:99:77:AB:02:A8:8F:0D:90:BC:4D:DF:6A:66:68:F3:70:45
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A973A3A2C0D8F5980209897207F338DAD
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/7RtLmXerAqiPDZC8Td9qZmjzcEU.roa
Signing time:             Fri 15 Sep 2023 05:04:50 +0000
ROA not before:           Fri 15 Sep 2023 05:04:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18a:9739:9ed4/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:97:3a:3a:2c:0d:8f:59:80:20:98:97:20:7f:33:8d:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep 15 05:04:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ed1b4b9977ab02a88f0d90bc4ddf6a6668f37045
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:42:4f:7b:0a:2d:38:52:b4:ba:d3:7f:1b:20:
                    a6:cb:e6:9e:9e:94:b3:a9:9f:1c:a2:3a:e9:2f:6b:
                    c9:0c:0f:11:09:82:9a:c6:54:31:da:8e:a0:cb:89:
                    43:a5:f2:88:24:4d:98:73:8f:d2:54:75:8a:84:c7:
                    1a:28:80:a3:a2:d5:0c:bd:f2:f5:1d:46:51:91:ae:
                    7b:7a:3b:fb:71:38:5c:40:06:39:b2:ff:d5:69:36:
                    da:92:ea:ed:82:60:eb:d8:43:ca:8d:13:67:2c:0a:
                    65:6a:61:db:46:31:97:b8:64:bc:64:4b:2f:e1:f1:
                    76:3b:e0:86:8d:dc:b7:d9:67:58:92:c3:14:82:dd:
                    ba:f9:b6:62:83:e1:86:d3:07:52:e8:e5:2d:d6:c6:
                    30:7d:5c:c6:56:5c:d5:5c:f1:d6:1e:0c:fd:f7:bd:
                    61:d0:4b:d6:87:b6:20:fd:87:61:b5:bd:fc:c4:84:
                    fb:f6:b8:33:69:be:00:5a:06:86:cb:32:f0:c9:71:
                    5b:29:59:8f:06:eb:8b:1b:c5:a0:3e:0a:51:01:65:
                    1c:87:15:81:b1:52:6c:44:d6:b2:0f:20:43:69:dc:
                    cd:bc:25:85:75:a1:c1:e4:10:76:f0:4c:ab:20:f4:
                    ae:6d:f8:5b:5e:7b:18:2e:9a:6f:c9:ff:5d:52:cb:
                    96:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:1B:4B:99:77:AB:02:A8:8F:0D:90:BC:4D:DF:6A:66:68:F3:70:45
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/7RtLmXerAqiPDZC8Td9qZmjzcEU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         63:6b:13:7d:0b:1e:f1:3d:38:51:19:40:4a:af:a7:d7:22:bd:
         3e:a5:b8:29:10:da:d4:1f:4e:35:0c:5b:a6:93:d9:06:a7:f0:
         69:94:9f:30:0b:b3:96:a8:a8:2f:76:e4:e9:7a:02:21:29:bf:
         f9:64:e8:3c:9f:9a:03:0c:de:ba:1e:aa:bd:f5:52:20:d3:31:
         2f:60:59:22:5b:a5:89:0a:dc:b1:06:76:12:fb:c1:6d:1e:16:
         a3:6c:63:5c:99:04:69:90:14:64:0d:47:03:ef:57:4b:45:2a:
         b0:d3:9c:69:5a:b4:f7:1d:06:08:2e:d3:16:48:40:cd:89:6e:
         cc:6c:42:6d:96:9e:b4:91:9b:67:f7:b4:a5:86:19:94:50:4b:
         e8:aa:5c:44:71:06:60:19:97:5b:ac:8a:f4:e9:e5:86:7f:18:
         e0:d1:de:e1:0f:22:12:39:e6:d9:47:01:86:b4:57:a9:60:ac:
         fb:35:9f:cc:9d:b6:0f:c8:7b:93:5f:9f:23:5a:70:fc:3d:38:
         99:6c:98:f2:44:71:20:11:54:f6:06:a3:5c:12:a1:64:40:06:
         7e:b6:fd:99:92:41:5a:b4:8b:1a:7a:a6:be:b2:b2:ae:ee:bd:
         f1:f2:40:7f:12:0e:1e:fd:91:0c:c6:8b:e6:93:45:12:28:75:
         20:dd:10:ed
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYqXOjosDY9ZgCCYlyB/M42tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMWYxNGM4NTA3NDVhN2MzMTJlYTJlYjBiZTAzMDUyZTQ5
NjcyNzUwHhcNMjMwOTE1MDUwNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZDFiNGI5OTc3YWIwMmE4OGYwZDkwYmM0ZGRmNmE2NjY4ZjM3MDQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0JPewotOFK0utN/GyCmy+aenpSz
qZ8cojrpL2vJDA8RCYKaxlQx2o6gy4lDpfKIJE2Yc4/SVHWKhMcaKICjotUMvfL1
HUZRka57ejv7cThcQAY5sv/VaTbakurtgmDr2EPKjRNnLAplamHbRjGXuGS8ZEsv
4fF2O+CGjdy32WdYksMUgt26+bZig+GG0wdS6OUt1sYwfVzGVlzVXPHWHgz9971h
0EvWh7Yg/Ydhtb38xIT79rgzab4AWgaGyzLwyXFbKVmPBuuLG8WgPgpRAWUchxWB
sVJsRNayDyBDadzNvCWFdaHB5BB28EyrIPSubfhbXnsYLppvyf9dUsuWWwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFO0bS5l3qwKojw2QvE3famZo83BFMB8GA1UdIwQY
MBaAFKofFMhQdFp8MS6i6wvgMFLklnJ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQt
ODNmY2QyMjU0ODJhLzEvN1J0TG1YZXJBcWlQRFpDOFRkOXFabWp6Y0VVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQtODNmY2QyMjU0ODJh
LzEvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGNrE30LHvE9OFEZQEqv
p9civT6luCkQ2tQfTjUMW6aT2Qan8GmUnzALs5aoqC925Ol6AiEpv/lk6DyfmgMM
3roeqr31UiDTMS9gWSJbpYkK3LEGdhL7wW0eFqNsY1yZBGmQFGQNRwPvV0tFKrDT
nGlatPcdBggu0xZIQM2JbsxsQm2WnrSRm2f3tKWGGZRQS+iqXERxBmAZl1usivTp
5YZ/GODR3uEPIhI55tlHAYa0V6lgrPs1n8ydtg/Ie5NfnyNacPw9OJlsmPJEcSAR
VPYGo1wSoWRABn62/ZmSQVq0ixp6pr6ysq7uvfHyQH8SDh79kQzGi+aTRRIodSDd
EO0=
-----END CERTIFICATE-----