Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/DeiRabsmpupH5kVtdMjCNqtoyzA.roa
File:                     DeiRabsmpupH5kVtdMjCNqtoyzA.roa (raw, json)
Hash identifier:          Bj6aXwwPmpsgR7EJvjuT58GrahmGSvlXcfImhjE4mEM=
Subject key identifier:   0D:E8:91:69:BB:26:A6:EA:47:E6:45:6D:74:C8:C2:36:AB:68:CB:30
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A5677EF305DA6C313B4A87C647296B864
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/DeiRabsmpupH5kVtdMjCNqtoyzA.roa
Signing time:             Sat 02 Sep 2023 15:16:55 +0000
ROA not before:           Sat 02 Sep 2023 15:16:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:56:77:ef:30:5d:a6:c3:13:b4:a8:7c:64:72:96:b8:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep  2 15:16:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0de89169bb26a6ea47e6456d74c8c236ab68cb30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ea:78:d7:46:c2:ae:97:12:b5:be:63:40:7e:
                    9a:6c:52:98:31:48:b8:7a:11:a0:6b:23:51:59:13:
                    8a:f7:44:b9:df:62:2a:ef:a1:46:06:4a:af:92:9e:
                    d6:81:c2:a5:d2:49:63:31:6f:bc:7d:b7:21:0c:16:
                    a4:b0:19:4b:73:98:c2:ea:b5:88:05:00:02:c8:25:
                    97:c8:18:29:31:74:97:da:ac:14:1a:00:59:ba:67:
                    5f:a3:b4:f7:0c:96:ac:0c:3e:c9:3c:14:88:0b:3a:
                    9f:1e:28:52:79:63:15:c5:14:9d:3c:fe:40:54:15:
                    c5:36:a1:59:26:17:5d:2c:35:a1:0f:50:0d:5b:fa:
                    f5:1e:76:39:64:e2:ce:70:80:b1:7a:08:f0:82:9f:
                    f3:47:dd:7b:d7:cb:0d:6e:a4:a0:60:ea:63:f6:20:
                    e1:f2:27:a8:e5:e1:2a:5d:e4:00:67:fc:f0:ad:29:
                    32:fb:01:e3:ce:27:49:43:79:55:be:39:ea:91:80:
                    cc:92:51:78:69:39:b1:73:f0:82:d6:be:d9:c5:01:
                    f2:72:f5:c7:25:51:de:45:8d:a0:c3:07:de:3e:76:
                    e2:11:49:3f:ad:4a:d1:72:03:df:86:d9:6f:b3:fc:
                    69:8c:39:98:04:27:f1:b0:a7:01:e2:a1:32:25:e4:
                    ee:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:E8:91:69:BB:26:A6:EA:47:E6:45:6D:74:C8:C2:36:AB:68:CB:30
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/DeiRabsmpupH5kVtdMjCNqtoyzA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         57:43:59:42:4e:2b:3b:27:53:04:11:82:e0:50:03:5c:f5:25:
         7e:4a:5c:32:96:a0:b5:f0:56:2f:27:d4:52:52:5c:58:09:26:
         df:5a:b0:60:81:42:cb:52:71:7a:24:89:75:93:a0:ec:a6:16:
         b0:19:0b:2a:11:3c:7c:17:cd:f6:33:ac:3b:9a:34:af:d4:b6:
         3a:37:da:47:da:07:69:cf:d4:9b:46:3e:0d:36:d8:53:f9:9d:
         6b:a0:98:bd:20:0a:92:a0:9c:d7:3c:9d:d0:86:d2:64:fd:bd:
         d2:82:a4:95:8c:f2:6a:ca:84:b0:64:6b:88:26:85:47:4d:48:
         70:48:0a:30:a3:6b:48:62:a5:43:43:ce:c6:8e:07:6a:32:00:
         70:76:02:d1:47:a2:ce:c5:32:4a:64:9d:57:3a:a7:45:46:21:
         ed:28:f8:4d:ce:fa:00:b0:e3:80:48:22:61:16:c4:a2:c8:0d:
         ee:be:cf:62:c7:e5:56:89:ba:9a:b5:95:d4:de:a3:2c:1e:f1:
         92:9e:19:ae:3f:bf:20:93:1f:74:f0:ce:aa:02:61:b4:16:67:
         ad:43:d6:a9:60:6d:da:d2:4c:84:d9:fb:fe:b7:b0:e9:01:92:
         c0:3d:9f:75:cc:1c:37:0a:ec:51:f1:76:09:bf:9a:b1:23:91:
         00:84:51:57
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYpWd+8wXabDE7SofGRylrhkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMWYxNGM4NTA3NDVhN2MzMTJlYTJlYjBiZTAzMDUyZTQ5
NjcyNzUwHhcNMjMwOTAyMTUxNjU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZGU4OTE2OWJiMjZhNmVhNDdlNjQ1NmQ3NGM4YzIzNmFiNjhjYjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtup410bCrpcStb5jQH6abFKYMUi4
ehGgayNRWROK90S532Iq76FGBkqvkp7WgcKl0kljMW+8fbchDBaksBlLc5jC6rWI
BQACyCWXyBgpMXSX2qwUGgBZumdfo7T3DJasDD7JPBSICzqfHihSeWMVxRSdPP5A
VBXFNqFZJhddLDWhD1ANW/r1HnY5ZOLOcICxegjwgp/zR91718sNbqSgYOpj9iDh
8ieo5eEqXeQAZ/zwrSky+wHjzidJQ3lVvjnqkYDMklF4aTmxc/CC1r7ZxQHycvXH
JVHeRY2gwwfePnbiEUk/rUrRcgPfhtlvs/xpjDmYBCfxsKcB4qEyJeTuKwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFA3okWm7JqbqR+ZFbXTIwjaraMswMB8GA1UdIwQY
MBaAFKofFMhQdFp8MS6i6wvgMFLklnJ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQt
ODNmY2QyMjU0ODJhLzEvRGVpUmFic21wdXBINWtWdGRNakNOcXRveXpBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQtODNmY2QyMjU0ODJh
LzEvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFdDWUJOKzsnUwQRguBQ
A1z1JX5KXDKWoLXwVi8n1FJSXFgJJt9asGCBQstScXokiXWToOymFrAZCyoRPHwX
zfYzrDuaNK/Utjo32kfaB2nP1JtGPg022FP5nWugmL0gCpKgnNc8ndCG0mT9vdKC
pJWM8mrKhLBka4gmhUdNSHBICjCja0hipUNDzsaOB2oyAHB2AtFHos7FMkpknVc6
p0VGIe0o+E3O+gCw44BIImEWxKLIDe6+z2LH5VaJupq1ldTeoywe8ZKeGa4/vyCT
H3TwzqoCYbQWZ61D1qlgbdrSTITZ+/63sOkBksA9n3XMHDcK7FHxdgm/mrEjkQCE
UVc=
-----END CERTIFICATE-----