Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/ECdaAh-LCkxp4Bv-eW12EYgJPKk.roa
File:                     ECdaAh-LCkxp4Bv-eW12EYgJPKk.roa (raw, json)
Hash identifier:          RHOWUIQfh34HyDOUtJnfBhHaA+GqY5tmDSye3rKIzfw=
Subject key identifier:   10:27:5A:02:1F:8B:0A:4C:69:E0:1B:FE:79:6D:76:11:88:09:3C:A9
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A7E8E0A981932DD87E84EB1586E776609
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/ECdaAh-LCkxp4Bv-eW12EYgJPKk.roa
Signing time:             Sun 10 Sep 2023 10:05:52 +0000
ROA not before:           Sun 10 Sep 2023 10:05:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18a:7e8d:25e4/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:7e:8e:0a:98:19:32:dd:87:e8:4e:b1:58:6e:77:66:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep 10 10:05:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=10275a021f8b0a4c69e01bfe796d761188093ca9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f8:54:a4:18:91:81:71:2c:5c:99:df:01:81:
                    a7:91:f9:76:c1:5b:a6:13:08:09:9e:80:29:a4:e1:
                    7d:2c:dd:41:65:be:c6:db:e5:5d:16:aa:ac:81:10:
                    fd:61:29:7e:14:07:bf:77:8a:f9:58:0c:e1:72:ce:
                    49:80:96:8c:49:40:fd:2a:be:e5:bf:73:3a:5c:86:
                    8d:9b:67:cd:f0:59:52:8c:68:cf:0b:dc:a1:75:bd:
                    18:1e:27:f1:7d:dc:3b:89:5b:12:22:cf:f6:fe:10:
                    49:b8:fe:67:50:88:5a:4a:35:ec:14:fa:bb:2c:e4:
                    36:2d:4e:d4:19:e2:e3:33:cf:4c:92:4c:04:63:8e:
                    25:e2:9a:a4:9d:df:f1:4c:75:c2:3a:6d:f9:1b:16:
                    f5:e5:d6:d8:f8:cd:8c:5b:5e:f6:0d:d3:d7:c4:86:
                    69:5b:83:11:cf:2a:17:c9:85:38:6b:ae:86:66:52:
                    d6:20:38:03:46:22:db:61:55:0d:b0:22:5b:0c:fb:
                    d0:49:d9:2b:69:b0:ea:10:b2:6e:2e:69:dc:4d:91:
                    91:f6:44:32:f1:f8:da:89:aa:cb:cb:3a:ee:a7:5c:
                    84:05:9d:1d:e3:c8:a9:54:fd:63:5d:5d:b0:b3:51:
                    a8:dc:75:40:dd:1a:83:f3:2f:81:23:ec:3e:ba:55:
                    40:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:27:5A:02:1F:8B:0A:4C:69:E0:1B:FE:79:6D:76:11:88:09:3C:A9
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/ECdaAh-LCkxp4Bv-eW12EYgJPKk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         91:3c:52:44:00:dd:16:1f:95:db:31:74:aa:cc:a8:b2:44:db:
         94:b5:16:ee:b5:9a:6f:28:0b:25:d3:b1:83:93:a1:c7:ad:a5:
         c2:c9:e0:da:25:ae:78:e5:82:95:1a:d8:f7:f2:2f:c4:96:12:
         e6:be:c9:38:9e:f3:67:31:07:70:7a:ad:e6:dd:dc:95:bc:04:
         b0:87:83:55:51:9f:88:76:f6:a3:a5:67:e3:2e:ec:1c:e7:22:
         04:01:3f:8c:a9:97:8a:40:98:ac:49:84:f4:15:f7:7d:3c:be:
         b6:70:64:1f:44:ea:52:88:4f:bd:5e:c8:ba:1d:9f:f6:0a:c9:
         b1:bf:74:da:ff:5b:5c:ff:2a:f3:46:5b:81:e6:e4:4c:b0:16:
         2c:f6:14:5e:4c:09:fc:8b:63:f0:f9:f7:7a:dd:a5:37:a1:f1:
         38:73:9a:f2:39:c8:d4:fe:46:80:f3:24:c2:2c:98:c3:4d:37:
         1c:0e:74:3b:26:03:6c:be:ae:7a:03:38:89:30:58:53:0a:be:
         8b:74:a2:c3:3d:2a:94:b4:88:16:45:58:67:0d:98:84:e4:67:
         49:0f:d3:d6:6c:87:f5:65:ca:43:f6:d0:fe:23:ff:20:c9:68:
         7f:75:47:4a:3a:9e:ad:b2:26:da:64:ea:05:6c:76:77:a2:1b:
         71:b6:c9:db
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYp+jgqYGTLdh+hOsVhud2YJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMWYxNGM4NTA3NDVhN2MzMTJlYTJlYjBiZTAzMDUyZTQ5
NjcyNzUwHhcNMjMwOTEwMTAwNTUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMDI3NWEwMjFmOGIwYTRjNjllMDFiZmU3OTZkNzYxMTg4MDkzY2E5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPhUpBiRgXEsXJnfAYGnkfl2wVum
EwgJnoAppOF9LN1BZb7G2+VdFqqsgRD9YSl+FAe/d4r5WAzhcs5JgJaMSUD9Kr7l
v3M6XIaNm2fN8FlSjGjPC9yhdb0YHifxfdw7iVsSIs/2/hBJuP5nUIhaSjXsFPq7
LOQ2LU7UGeLjM89MkkwEY44l4pqknd/xTHXCOm35Gxb15dbY+M2MW172DdPXxIZp
W4MRzyoXyYU4a66GZlLWIDgDRiLbYVUNsCJbDPvQSdkrabDqELJuLmncTZGR9kQy
8fjaiarLyzrup1yEBZ0d48ipVP1jXV2ws1Go3HVA3RqD8y+BI+w+ulVAgQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBAnWgIfiwpMaeAb/nltdhGICTypMB8GA1UdIwQY
MBaAFKofFMhQdFp8MS6i6wvgMFLklnJ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQt
ODNmY2QyMjU0ODJhLzEvRUNkYUFoLUxDa3hwNEJ2LWVXMTJFWWdKUEtrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQtODNmY2QyMjU0ODJh
LzEvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJE8UkQA3RYfldsxdKrM
qLJE25S1Fu61mm8oCyXTsYOTocetpcLJ4NolrnjlgpUa2PfyL8SWEua+yTie82cx
B3B6rebd3JW8BLCHg1VRn4h29qOlZ+Mu7BznIgQBP4ypl4pAmKxJhPQV9308vrZw
ZB9E6lKIT71eyLodn/YKybG/dNr/W1z/KvNGW4Hm5EywFiz2FF5MCfyLY/D593rd
pTeh8ThzmvI5yNT+RoDzJMIsmMNNNxwOdDsmA2y+rnoDOIkwWFMKvot0osM9KpS0
iBZFWGcNmITkZ0kP09Zsh/VlykP20P4j/yDJaH91R0o6nq2yJtpk6gVsdneiG3G2
yds=
-----END CERTIFICATE-----