Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/GmcWuc64eSjqfz7iHOvxw27Ttvs.roa
File:                     GmcWuc64eSjqfz7iHOvxw27Ttvs.roa (raw, json)
Hash identifier:          NUb8BmiWY+U5RMVKH1jFL+qdY3//IOmOQp2rcNOz3pI=
Subject key identifier:   1A:67:16:B9:CE:B8:79:28:EA:7F:3E:E2:1C:EB:F1:C3:6E:D3:B6:FB
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A55A0035B2DDF10288C827A89E30B443F
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/GmcWuc64eSjqfz7iHOvxw27Ttvs.roa
Signing time:             Sat 02 Sep 2023 11:21:04 +0000
ROA not before:           Sat 02 Sep 2023 11:21:04 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:55:a0:03:5b:2d:df:10:28:8c:82:7a:89:e3:0b:44:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep  2 11:21:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1a6716b9ceb87928ea7f3ee21cebf1c36ed3b6fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:96:69:11:8e:d9:3e:1d:be:17:34:e9:7f:ae:
                    4d:06:ed:e1:39:ce:60:cc:1b:77:4d:f2:fc:1b:9a:
                    fc:a3:ec:58:7f:2d:bb:fa:ae:41:65:f3:f3:19:d9:
                    a1:2b:1c:e6:63:cd:08:41:16:c8:94:73:28:85:20:
                    57:db:e3:34:63:79:6d:1f:00:c5:e5:7e:19:37:c2:
                    0b:22:5c:6d:9c:dc:a6:ab:b1:5c:76:33:d6:0c:52:
                    31:53:a7:07:c4:fc:62:80:39:4c:6e:9a:fc:f7:65:
                    11:28:f7:0c:61:ed:35:48:32:0e:ca:d0:f4:02:69:
                    c3:c1:c4:79:77:0d:e9:e7:47:39:9d:ba:53:81:f5:
                    14:b9:b0:d1:71:2e:b7:00:2c:8e:09:85:44:be:f2:
                    a9:c1:4b:ea:50:ce:7d:0e:7d:f7:6f:d6:4d:11:96:
                    97:e8:ae:30:47:16:67:37:2b:df:76:0c:c4:23:c0:
                    92:8c:08:06:29:2b:e0:53:31:73:f7:72:1b:09:ea:
                    89:f8:12:a1:be:2e:de:75:94:b2:e7:86:84:fa:b2:
                    31:21:9b:9a:11:a5:d4:73:58:d6:87:86:0e:ac:16:
                    50:66:ee:13:ae:af:d4:38:17:20:a2:ea:f4:aa:e3:
                    f8:1b:7a:bf:31:a1:2a:47:4d:99:f2:47:d7:17:1d:
                    a0:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:67:16:B9:CE:B8:79:28:EA:7F:3E:E2:1C:EB:F1:C3:6E:D3:B6:FB
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/GmcWuc64eSjqfz7iHOvxw27Ttvs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         03:e9:4b:42:0f:73:a7:b1:a4:bf:9b:62:43:10:c5:88:10:b2:
         8b:24:49:61:c2:e1:f9:04:0f:90:de:0a:6e:eb:4c:f6:5f:da:
         b8:06:e9:3d:59:d2:2e:14:0d:22:8d:39:35:38:29:35:94:2b:
         16:1a:d2:0b:11:16:61:08:be:a5:f6:b7:46:89:db:64:a9:a0:
         06:f9:d8:42:5a:05:f7:e9:a9:53:8c:d1:58:4d:95:d3:a4:5b:
         41:5c:d1:67:29:75:18:99:72:3e:93:bc:46:cf:2e:71:fe:23:
         a5:6d:16:e7:ec:22:d6:c8:70:ac:d0:6b:3a:84:41:70:00:9d:
         a8:7d:2b:d8:e5:52:a5:99:91:fe:44:f7:c2:fe:fa:49:5b:c7:
         2b:ce:2b:6d:78:6c:b7:a3:dc:83:53:16:fe:87:28:c7:9e:bb:
         21:59:3c:91:85:e5:df:06:49:c4:04:19:4d:89:e6:e6:9f:ef:
         5d:bc:c3:a6:c5:33:2a:6a:cc:1a:1d:7e:66:ce:36:9f:ac:ef:
         1a:ba:25:67:a4:3c:24:5e:27:26:97:6b:15:0d:26:79:16:ed:
         f8:a0:85:ac:52:8b:7f:dc:2f:92:d7:2f:88:f3:63:5b:5c:9a:
         4e:7e:de:48:2e:86:d0:b7:2c:89:56:ee:15:fd:4e:0c:bd:4a:
         9b:57:72:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----