Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/FyLIntGFx167Xcw7PGJUXqGdUII.roa
File:                     FyLIntGFx167Xcw7PGJUXqGdUII.roa (raw, json)
Hash identifier:          wfT9qEOaX2pVo/30Fx8h+GGEkeDhdozDYgMw0LNX3w8=
Subject key identifier:   17:22:C8:9E:D1:85:C7:5E:BB:5D:CC:3B:3C:62:54:5E:A1:9D:50:82
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018AA5A2E2EBCD00734F4C2E77002A4E7E85
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/FyLIntGFx167Xcw7PGJUXqGdUII.roa
Signing time:             Mon 18 Sep 2023 00:13:50 +0000
ROA not before:           Mon 18 Sep 2023 00:13:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:a5:a2:e2:eb:cd:00:73:4f:4c:2e:77:00:2a:4e:7e:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep 18 00:13:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1722c89ed185c75ebb5dcc3b3c62545ea19d5082
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e5:5e:dc:cd:3b:c2:56:5f:42:d4:a9:b3:ef:
                    4c:86:52:e2:be:c7:b9:c7:7f:6e:50:0e:a7:2a:14:
                    09:92:5b:49:18:4c:e0:56:49:bf:f2:f8:98:0b:a7:
                    1a:24:8d:7b:fc:90:98:3b:ab:7a:06:ec:ab:fc:c8:
                    99:dd:ac:62:5d:2f:50:5e:fe:5d:d2:95:0a:c4:dc:
                    f1:d7:10:da:5e:5f:e9:90:39:d4:c1:06:d9:73:35:
                    9e:96:40:53:7a:a0:ff:6a:c3:b1:9d:8d:ee:8a:6b:
                    5e:63:25:b6:2f:d2:fa:69:84:f0:69:a3:a5:50:29:
                    a0:9e:29:ea:f7:4d:f6:57:b2:a1:06:38:42:fd:d0:
                    ea:45:47:10:09:bf:60:01:b4:dd:c1:55:63:b1:dc:
                    0b:8d:d7:98:f0:95:19:d4:4e:5e:87:71:7a:ca:4a:
                    0d:ef:33:b0:08:ee:2d:33:19:ae:4f:8c:57:17:61:
                    f5:25:73:37:10:62:40:e7:b7:1a:b6:7b:5d:87:97:
                    32:4c:44:a4:5a:f0:f4:39:b4:22:dd:aa:50:0e:f8:
                    78:1a:87:69:a4:dd:5a:f0:f0:eb:a8:fd:78:0d:0a:
                    9c:5b:64:b1:f2:b8:74:21:54:bb:a4:c9:fb:ed:54:
                    22:a3:d0:42:10:8b:ed:43:c7:73:01:38:d1:86:2d:
                    d1:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:22:C8:9E:D1:85:C7:5E:BB:5D:CC:3B:3C:62:54:5E:A1:9D:50:82
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/FyLIntGFx167Xcw7PGJUXqGdUII.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         71:14:29:6f:78:93:42:26:a6:d9:c2:ab:7d:6b:0e:90:78:94:
         48:fa:52:cf:9c:42:56:9c:9e:3d:4e:9d:4c:a6:08:80:b9:15:
         a5:eb:16:14:e0:da:ce:d5:c0:5a:bb:fb:1d:7c:d6:58:35:91:
         b9:e3:cf:47:5d:e0:80:23:14:ad:b8:d3:5f:28:2f:45:f4:44:
         6c:23:76:f0:ae:4d:30:e8:7c:b3:1d:c6:68:58:28:9f:88:8c:
         28:8c:84:1a:a5:90:9d:06:41:7c:02:83:18:f9:5c:f0:02:f7:
         b3:d3:d3:ba:82:e2:55:c5:37:d7:77:20:40:43:55:0c:9d:1e:
         aa:7a:3f:71:9f:d3:77:e7:42:b6:13:f3:f5:6e:78:3f:94:3a:
         09:0c:e0:6f:37:1a:f1:dc:fb:df:a6:d3:3c:1a:6a:5b:28:3e:
         4b:8d:ea:85:ca:f1:43:48:ae:cc:67:61:b3:b6:0b:1c:eb:d6:
         6a:8d:83:35:79:cf:f2:34:95:e0:e2:9d:99:eb:60:e5:17:a3:
         2e:bf:0b:f4:2b:9a:97:8c:df:14:d4:0b:f2:f1:15:43:c1:5f:
         e1:f2:8d:aa:75:67:40:ad:c1:84:c5:74:ed:55:dd:ab:26:bb:
         05:5e:1d:fa:42:7c:35:b0:da:39:c3:ad:25:95:1c:d1:e0:7a:
         3a:21:a3:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----