Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/FrhsarUSJG7aG2n96BPI9sGn0j4.roa
File:                     FrhsarUSJG7aG2n96BPI9sGn0j4.roa (raw, json)
Hash identifier:          xjDOvv3p4EeOhdKtTfijgmMc0XN3kn1dFTNFJ9Aetgw=
Subject key identifier:   16:B8:6C:6A:B5:12:24:6E:DA:1B:69:FD:E8:13:C8:F6:C1:A7:D2:3E
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A9B16FF0F8C43893265649708B1CAD7BD
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/FrhsarUSJG7aG2n96BPI9sGn0j4.roa
Signing time:             Fri 15 Sep 2023 23:04:50 +0000
ROA not before:           Fri 15 Sep 2023 23:04:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18a:9b16:b5a2/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:9b:16:ff:0f:8c:43:89:32:65:64:97:08:b1:ca:d7:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep 15 23:04:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=16b86c6ab512246eda1b69fde813c8f6c1a7d23e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ff:b2:40:0d:dd:4f:45:a4:27:35:bf:d4:57:
                    69:b9:82:ef:0e:e3:54:4c:bd:cc:4a:a1:d5:df:4c:
                    3b:85:83:61:10:c6:f1:72:be:8d:e5:82:fd:df:68:
                    ee:6e:27:61:cc:fc:91:93:ee:a2:d4:46:dc:2f:d8:
                    6e:55:98:20:0f:09:9a:c0:50:c7:fa:40:5f:9e:be:
                    9a:d5:cb:66:2f:24:f5:ec:b3:47:0d:3e:e8:d0:95:
                    25:b3:49:fd:8b:e2:10:f7:5e:93:0b:15:7c:d8:15:
                    1a:04:ef:a3:cc:30:53:36:47:3e:62:78:01:6d:79:
                    e1:99:4f:62:b3:6a:92:c5:3b:9a:03:a3:df:a2:a0:
                    da:4c:63:70:c8:bb:32:38:17:e7:11:0c:5d:a3:de:
                    7e:8d:04:e1:37:dd:d0:b1:66:f9:2f:85:9b:26:c5:
                    bf:7c:83:2b:48:53:46:ed:2e:61:1a:be:d2:42:93:
                    31:89:60:a5:9f:61:e3:9e:1f:ef:7d:2f:b6:4d:43:
                    1c:a3:7c:40:af:b8:00:ca:bd:96:f7:02:3f:35:ee:
                    c4:11:23:c4:52:fd:dc:7a:a3:2d:d7:c7:af:61:80:
                    bf:89:c8:f4:3e:e4:76:82:6a:66:2e:83:47:77:f0:
                    cf:d9:68:97:66:d8:0e:25:7b:f8:57:79:f8:10:37:
                    38:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:B8:6C:6A:B5:12:24:6E:DA:1B:69:FD:E8:13:C8:F6:C1:A7:D2:3E
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/FrhsarUSJG7aG2n96BPI9sGn0j4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         40:d1:1b:bf:dc:b4:1f:42:0e:b7:ad:83:ee:0a:8f:f2:69:aa:
         d6:e0:ad:5e:9d:5e:72:a0:18:0e:24:bf:d6:b3:5c:31:44:08:
         da:ca:c0:35:96:31:f7:d1:c1:9e:52:a0:34:ea:15:22:f0:b7:
         5e:5f:04:0c:e2:88:cf:d5:e2:95:86:a8:a7:16:72:cb:d4:ac:
         15:aa:92:e4:4d:ac:0f:45:ae:e5:8a:c4:c1:ea:a2:63:00:63:
         2b:c5:35:2a:cb:ec:ad:ae:fd:8a:72:d6:2c:13:b0:71:f3:fd:
         11:0c:d4:0d:ae:a1:cf:15:62:6a:28:9b:58:51:bd:84:72:99:
         08:5f:27:dd:2a:7a:c5:ab:fa:91:1a:71:1d:ea:8a:93:37:d5:
         8d:87:36:62:ea:18:49:b5:f3:d7:1f:c4:40:8b:c9:cd:ce:61:
         ed:b5:24:09:df:b5:85:8b:7f:0c:a5:c9:40:8f:d2:63:39:90:
         1b:88:82:29:42:d2:05:31:de:e3:b9:4d:c0:16:6c:ab:90:c4:
         fb:6d:b5:8e:c0:f2:e9:14:46:c9:06:ff:00:d7:7f:e0:06:9a:
         d8:77:01:07:fa:16:87:5f:cb:aa:93:15:de:8d:30:b0:41:2a:
         4b:98:24:a7:b8:cd:5a:7d:4a:d3:19:30:96:c5:b2:4b:80:eb:
         63:47:7b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----