Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/G4Z6saRTadQRFd8_ay-wEDVFR8I.roa
File:                     G4Z6saRTadQRFd8_ay-wEDVFR8I.roa (raw, json)
Hash identifier:          qaSBzgunC5hebxzVt9XfG32y6+w+wfwXjLAt7uMuaGE=
Subject key identifier:   1B:86:7A:B1:A4:53:69:D4:11:15:DF:3F:6B:2F:B0:10:35:45:47:C2
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A8F12D2AF8FF463F6D09D3F7CEBE8B259
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/G4Z6saRTadQRFd8_ay-wEDVFR8I.roa
Signing time:             Wed 13 Sep 2023 15:04:50 +0000
ROA not before:           Wed 13 Sep 2023 15:04:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18a:8f12:6f7c/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:8f:12:d2:af:8f:f4:63:f6:d0:9d:3f:7c:eb:e8:b2:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep 13 15:04:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1b867ab1a45369d41115df3f6b2fb010354547c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b2:1b:f1:63:85:21:1a:cc:b2:39:26:13:61:
                    bf:e8:66:5d:4d:8f:75:71:90:3b:38:7b:68:8e:17:
                    7d:04:54:27:7a:38:61:4a:23:70:35:84:1d:39:b1:
                    f3:06:be:dd:a2:f0:0a:4e:03:e6:03:c5:98:9f:f7:
                    57:c5:4f:ed:7d:32:b7:e0:fd:e9:3a:9e:1f:45:76:
                    91:eb:15:0d:1e:39:05:2a:a4:3a:62:e7:0e:8a:1b:
                    d4:95:e4:47:09:0d:73:2d:0b:30:00:af:1a:a4:2c:
                    f2:ff:e0:f1:df:d3:6c:d6:f8:60:dd:a5:bd:31:89:
                    64:d2:4b:ee:05:29:ba:82:7b:fd:da:83:50:25:42:
                    ec:8d:06:b3:29:59:dd:03:eb:49:3f:f8:da:d4:5a:
                    8f:00:4a:2b:8c:16:6f:76:c6:d2:45:41:96:78:95:
                    e0:5b:da:82:7f:8e:70:fa:f7:26:a5:93:74:76:51:
                    f5:e7:61:73:f2:91:18:41:8a:c9:76:d3:15:18:7e:
                    eb:07:7d:41:c4:4b:b8:4c:87:a7:0b:2a:e2:b5:9a:
                    36:79:17:bc:e5:8a:0c:59:4e:45:bc:0a:e6:4d:90:
                    c3:a6:b1:f2:52:f6:a0:e8:1d:1e:cf:7b:01:7f:01:
                    b4:a5:52:13:4a:c1:85:9b:0e:3d:81:f7:1d:cf:92:
                    95:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:86:7A:B1:A4:53:69:D4:11:15:DF:3F:6B:2F:B0:10:35:45:47:C2
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/G4Z6saRTadQRFd8_ay-wEDVFR8I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         0c:09:eb:53:6a:81:f9:85:2f:41:b3:b9:a9:19:fb:3b:c9:ce:
         35:54:fa:75:94:bb:a3:82:d2:19:1c:3e:b6:3f:2f:8f:45:a0:
         c8:00:f8:66:57:e5:d2:03:86:7a:25:db:4f:92:d3:25:62:5c:
         8f:18:07:9b:3a:1c:56:79:f1:06:32:ae:96:26:94:9a:6b:c4:
         6f:f4:0a:4b:61:f3:0a:16:54:0b:06:8c:eb:96:17:23:a5:82:
         8d:79:2d:90:91:3e:20:95:93:a0:87:9e:3f:b7:92:f8:1b:87:
         ca:19:90:af:69:9f:c9:21:48:86:ba:6d:4c:e7:54:e6:93:eb:
         0d:3f:3a:f0:ed:be:15:60:ad:bc:b4:09:99:48:38:db:8d:ad:
         9d:f9:23:62:39:2c:be:d6:d0:30:fb:1b:fc:f6:4b:de:94:9c:
         49:da:12:96:1b:ed:0c:a1:3e:2c:05:9d:ad:1d:78:4f:23:6f:
         34:2b:54:e0:9f:65:c6:78:57:be:a1:17:03:33:07:34:e7:d6:
         19:8b:67:97:85:aa:6c:c6:ec:16:c2:f7:6c:4d:2a:41:57:38:
         78:ce:1b:98:5b:91:84:4b:4e:7b:6a:09:c1:33:8c:4f:82:e2:
         f3:a7:fb:18:3a:2a:c2:9a:5a:b7:e5:1f:d2:cd:07:e6:85:2b:
         3f:42:d2:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----