Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/D4Dn64eE1E_NdEEkITkXGgTo14s.roa
File:                     D4Dn64eE1E_NdEEkITkXGgTo14s.roa (raw, json)
Hash identifier:          oDWwlbePStZICsNO3TLdijO82hd+uc/7f9u65ZgqRT4=
Subject key identifier:   0F:80:E7:EB:87:84:D4:4F:CD:74:41:24:21:39:17:1A:04:E8:D7:8B
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A8E6E0789C910413DB28DBD1990D606E1
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/D4Dn64eE1E_NdEEkITkXGgTo14s.roa
Signing time:             Wed 13 Sep 2023 12:04:50 +0000
ROA not before:           Wed 13 Sep 2023 12:04:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
                          2001:67c:64:ffff:0:18a:8e6d:9057/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:8e:6e:07:89:c9:10:41:3d:b2:8d:bd:19:90:d6:06:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep 13 12:04:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0f80e7eb8784d44fcd7441242139171a04e8d78b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:de:e0:d0:99:88:f0:99:4d:6f:1c:6b:0a:93:
                    42:e7:37:31:a2:4c:b6:1a:2f:7b:62:e0:f1:71:97:
                    2d:96:ac:a2:2b:94:ff:97:bb:b4:e5:03:96:24:42:
                    65:c5:bc:f9:5f:6a:fa:b2:64:b7:5f:d4:64:82:23:
                    a9:5f:3c:65:55:c2:d0:90:7a:01:19:0c:53:de:f2:
                    74:2d:8e:f0:ca:f4:e7:01:e1:f8:05:eb:12:02:ec:
                    4b:d9:0a:51:9a:3a:1b:ae:8f:92:f0:bc:75:e2:36:
                    c6:f7:cb:53:58:5e:89:e0:45:f2:9a:1b:c5:4e:89:
                    f8:5c:6d:5e:f4:9e:28:c0:7f:4a:72:64:95:ec:e9:
                    79:e3:23:8d:70:d4:31:40:0a:c8:c0:4d:63:cd:10:
                    8c:c2:9b:a0:28:9c:37:c0:dc:60:5d:71:f9:bc:dd:
                    89:02:0f:94:df:03:d8:c0:0b:79:7a:89:78:82:c4:
                    b6:e0:e4:5a:8b:31:a3:ff:a4:83:ac:6d:1a:c4:28:
                    be:55:a1:4c:ac:e1:16:a6:4c:fc:b7:16:6d:e7:f1:
                    f3:5a:53:cb:95:c2:29:59:b4:38:1d:52:a7:97:15:
                    6f:a7:93:6b:ae:0c:c5:9b:8f:40:65:90:c0:0e:dc:
                    4f:44:3c:a2:e4:26:46:e9:c4:72:ed:02:53:74:ea:
                    5d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:80:E7:EB:87:84:D4:4F:CD:74:41:24:21:39:17:1A:04:E8:D7:8B
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/D4Dn64eE1E_NdEEkITkXGgTo14s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         24:99:62:3a:ba:9a:b4:48:6a:e0:ef:73:d0:ae:32:71:6c:de:
         9b:f5:f3:ed:3a:2f:19:bc:1e:2c:10:40:fe:a3:f4:13:c3:88:
         e0:d1:23:60:c1:1b:e7:ee:e3:57:d6:9e:94:93:bd:9d:4b:1e:
         aa:83:18:f8:e6:28:88:38:0d:e9:41:9a:69:3b:92:ca:d3:f2:
         ca:b8:18:5e:e7:ba:28:70:48:6a:b4:0d:62:f4:a9:51:ff:ae:
         bb:9e:84:71:c6:49:7e:b4:47:d5:1c:df:3b:b8:2b:34:db:3e:
         b2:bb:72:53:6b:8c:70:1a:d6:6d:b2:53:66:48:78:bb:75:eb:
         38:7a:e4:3a:41:b6:4f:25:41:cd:dc:5e:79:a5:6d:52:f9:68:
         6a:78:7d:74:b8:74:17:b8:0f:93:64:2a:8b:2d:fa:d3:9b:d5:
         87:01:68:1b:07:56:d9:26:8e:b0:df:d5:97:56:d6:e5:49:46:
         c8:af:f3:60:16:1b:ce:a9:f8:e1:b9:0c:8c:8e:fc:a6:77:79:
         24:ea:a8:ea:ea:a6:3c:07:d4:68:71:8b:00:83:13:ef:ff:6c:
         17:0e:30:c3:cd:62:a1:dd:23:cc:06:6f:62:ce:0c:f8:6f:49:
         08:4e:aa:f5:45:df:27:51:19:51:9c:f4:1a:2b:d5:5e:b8:f1:
         c8:6f:77:5d
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYqObgeJyRBBPbKNvRmQ1gbhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMWYxNGM4NTA3NDVhN2MzMTJlYTJlYjBiZTAzMDUyZTQ5
NjcyNzUwHhcNMjMwOTEzMTIwNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZjgwZTdlYjg3ODRkNDRmY2Q3NDQxMjQyMTM5MTcxYTA0ZThkNzhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu97g0JmI8JlNbxxrCpNC5zcxoky2
Gi97YuDxcZctlqyiK5T/l7u05QOWJEJlxbz5X2r6smS3X9RkgiOpXzxlVcLQkHoB
GQxT3vJ0LY7wyvTnAeH4BesSAuxL2QpRmjobro+S8Lx14jbG98tTWF6J4EXymhvF
Ton4XG1e9J4owH9KcmSV7Ol54yONcNQxQArIwE1jzRCMwpugKJw3wNxgXXH5vN2J
Ag+U3wPYwAt5eol4gsS24ORaizGj/6SDrG0axCi+VaFMrOEWpkz8txZt5/HzWlPL
lcIpWbQ4HVKnlxVvp5NrrgzFm49AZZDADtxPRDyi5CZG6cRy7QJTdOpdqwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFA+A5+uHhNRPzXRBJCE5FxoE6NeLMB8GA1UdIwQY
MBaAFKofFMhQdFp8MS6i6wvgMFLklnJ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQt
ODNmY2QyMjU0ODJhLzEvRDREbjY0ZUUxRV9OZEVFa0lUa1hHZ1RvMTRzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQtODNmY2QyMjU0ODJh
LzEvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACSZYjq6mrRIauDvc9Cu
MnFs3pv18+06Lxm8HiwQQP6j9BPDiODRI2DBG+fu41fWnpSTvZ1LHqqDGPjmKIg4
DelBmmk7ksrT8sq4GF7nuihwSGq0DWL0qVH/rruehHHGSX60R9Uc3zu4KzTbPrK7
clNrjHAa1m2yU2ZIeLt16zh65DpBtk8lQc3cXnmlbVL5aGp4fXS4dBe4D5NkKost
+tOb1YcBaBsHVtkmjrDf1ZdW1uVJRsiv82AWG86p+OG5DIyO/KZ3eSTqqOrqpjwH
1GhxiwCDE+//bBcOMMPNYqHdI8wGb2LODPhvSQhOqvVF3ydRGVGc9Bor1V648chv
d10=
-----END CERTIFICATE-----