Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/GGyeygcEgnsygmQ6fKfGOurhxfE.roa
File:                     GGyeygcEgnsygmQ6fKfGOurhxfE.roa (raw, json)
Hash identifier:          /mBhfGIv2/ZTnjya9GFV5oq58upaWi6d49zMWTjwNi0=
Subject key identifier:   18:6C:9E:CA:07:04:82:7B:32:82:64:3A:7C:A7:C6:3A:EA:E1:C5:F1
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A6CBDD2FE9C8BA8DCAB61E3B9BFC36CBE
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/GGyeygcEgnsygmQ6fKfGOurhxfE.roa
Signing time:             Wed 06 Sep 2023 23:04:54 +0000
ROA not before:           Wed 06 Sep 2023 23:04:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:18a:6cbd:3dab/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:6c:bd:d2:fe:9c:8b:a8:dc:ab:61:e3:b9:bf:c3:6c:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep  6 23:04:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=186c9eca0704827b3282643a7ca7c63aeae1c5f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:04:75:92:44:18:3a:4d:88:e7:b1:23:04:c3:
                    ee:e0:1a:35:e6:33:6d:b1:24:34:ef:01:de:c6:6e:
                    ec:cf:b9:06:1c:01:bc:74:cb:da:4c:99:5d:51:05:
                    4d:b1:b8:30:0f:d4:82:c3:ba:cb:f8:ef:07:aa:78:
                    c8:7a:71:de:1b:9b:f4:77:d4:59:75:a7:18:52:b1:
                    c9:22:5b:90:e4:30:8f:e3:ad:83:9f:6a:95:35:1b:
                    8e:39:6f:bc:68:99:12:c4:19:87:11:ae:92:89:d1:
                    c6:25:d1:d3:15:64:1d:39:9c:ed:88:a9:1d:66:f0:
                    77:c9:b6:f4:14:0b:cf:dd:6a:a3:e8:6a:27:40:bf:
                    61:5c:b8:73:24:d7:0a:37:df:09:8d:68:2b:fc:63:
                    28:78:b7:b3:83:02:7e:a5:f7:8f:ff:ec:d3:a9:15:
                    41:73:b1:dc:02:5b:1f:b1:d6:72:7a:4e:24:21:55:
                    8e:a0:ff:53:ce:71:01:92:d4:00:34:97:5a:a4:49:
                    b1:d4:0c:09:17:f9:2a:a0:2b:1f:bd:2f:fb:3f:73:
                    76:87:8a:6f:b3:4b:03:04:1b:a6:d5:6b:74:8a:da:
                    00:fb:6c:bd:4f:2d:f9:10:20:79:1a:2a:14:0b:24:
                    2c:d6:63:a5:70:73:40:a2:a6:8e:36:98:75:5f:dd:
                    12:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:6C:9E:CA:07:04:82:7B:32:82:64:3A:7C:A7:C6:3A:EA:E1:C5:F1
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/GGyeygcEgnsygmQ6fKfGOurhxfE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         27:0c:a4:8a:86:f3:4b:42:fd:09:74:4f:c9:f4:c4:fd:d4:1d:
         61:14:c0:8c:0e:35:67:a4:25:02:9a:50:7a:d1:53:d0:4b:fb:
         16:c6:9f:f7:b2:42:8b:0b:9e:6c:ce:1f:70:f7:f8:f3:19:91:
         93:cd:4b:1d:5c:95:61:ef:2e:eb:f1:e0:e7:03:78:3c:c4:fb:
         7a:7c:d2:35:60:da:b1:41:b2:60:8a:5c:45:08:d3:a1:d8:58:
         7d:1b:d4:00:c3:d9:9b:c2:30:89:96:9e:87:00:af:4b:fd:55:
         07:a5:e6:85:10:c2:2f:f8:87:11:2d:73:df:5d:6a:fd:93:a0:
         5f:c5:53:1c:01:e7:bf:a8:d1:21:52:a9:d1:07:92:d1:05:b3:
         9a:79:56:e9:79:08:d7:20:b3:d0:14:ac:20:ef:d1:c0:09:cd:
         1b:89:b9:71:d9:49:67:73:3f:76:fe:6d:49:e1:ce:90:1e:c0:
         6a:8c:d9:c7:cd:8f:82:0d:19:8f:8b:e8:2b:83:37:c9:df:58:
         12:68:57:3a:b7:5e:b0:cb:a8:70:7a:14:e7:27:73:81:22:3a:
         d7:2e:f7:11:61:54:19:54:2c:76:d8:f2:17:fe:e5:23:5f:62:
         88:de:cf:e1:a6:d4:65:76:ca:39:d4:79:22:58:d9:1d:90:d1:
         09:bc:ef:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----