Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/I1QdpXI7_COu2UvL6Np-3pBNW_A.roa
File:                     I1QdpXI7_COu2UvL6Np-3pBNW_A.roa (raw, json)
Hash identifier:          soHA9Ub+qQ5yxN5BlRs9hHbY/zwtjFIFK5+9RrqEmDQ=
Subject key identifier:   23:54:1D:A5:72:3B:FC:23:AE:D9:4B:CB:E8:DA:7E:DE:90:4D:5B:F0
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A763706C8FFA1248A3DA257582AC824BF
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/I1QdpXI7_COu2UvL6Np-3pBNW_A.roa
Signing time:             Fri 08 Sep 2023 19:13:52 +0000
ROA not before:           Fri 08 Sep 2023 19:13:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:76:37:06:c8:ff:a1:24:8a:3d:a2:57:58:2a:c8:24:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep  8 19:13:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=23541da5723bfc23aed94bcbe8da7ede904d5bf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:4b:6b:68:f6:11:c5:07:bc:cd:cf:65:84:a7:
                    ca:42:3f:3a:7e:8a:8e:30:ae:23:d0:52:d4:97:cd:
                    3e:98:e8:73:6a:b3:1c:b3:35:96:f7:13:f7:08:1c:
                    f8:51:70:39:ad:2e:e6:f4:72:87:23:40:41:e0:5e:
                    92:0e:28:11:27:50:bb:b8:c6:e2:22:3f:86:f4:08:
                    74:cc:f6:23:0f:56:15:86:d6:5f:6d:a8:2f:15:c9:
                    50:04:47:87:20:d3:27:8f:6e:91:38:36:08:a1:67:
                    ae:b4:e6:47:db:8c:04:53:72:7c:f1:05:39:0d:e5:
                    8c:d5:ea:5e:62:21:6f:a1:d5:3a:1f:e8:d7:3c:82:
                    6f:dc:42:3d:5f:e2:b0:f9:70:96:e1:d6:51:95:3b:
                    ef:d3:e6:56:36:96:28:34:93:46:68:ad:b5:c0:95:
                    e1:31:56:a1:85:16:e5:14:ee:a9:0d:70:c7:5e:14:
                    5a:99:65:a7:c0:32:80:ed:43:db:6f:c6:a5:40:75:
                    5d:2d:ff:76:ef:13:51:9f:d7:80:36:49:39:1b:9e:
                    2f:d1:58:b4:80:de:a5:4c:9c:b1:0b:56:a0:c3:9c:
                    29:7d:46:4c:18:10:ca:dd:25:e9:e2:08:94:1a:24:
                    94:26:f2:f4:40:dc:2f:73:42:44:91:6e:b9:f3:e1:
                    9d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:54:1D:A5:72:3B:FC:23:AE:D9:4B:CB:E8:DA:7E:DE:90:4D:5B:F0
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/I1QdpXI7_COu2UvL6Np-3pBNW_A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         7a:c8:9f:68:2d:20:21:8d:95:77:88:d5:d2:7d:7c:47:b6:f8:
         9c:fd:31:5a:a0:cf:01:07:f8:6a:b5:cb:ee:88:8d:11:a4:2d:
         07:80:cd:aa:26:4e:55:85:6c:a9:91:da:91:3e:19:3e:10:e1:
         64:bf:61:81:49:ef:d2:e1:bf:6f:24:a0:27:16:4f:4e:13:a5:
         73:4f:a7:ca:a8:bf:06:f5:82:b7:14:0e:d0:99:2b:44:70:9f:
         85:ac:d8:3a:05:ae:88:b4:b0:6c:52:ae:b4:06:55:30:a0:d4:
         f3:cb:37:5e:b3:0a:1c:77:66:a8:a4:48:1c:5e:38:8d:62:fa:
         75:f7:cd:1b:a0:88:7b:59:bc:45:43:d1:b5:4e:d6:a3:52:c3:
         fe:6f:c3:6a:79:bd:d2:7c:3d:a2:9e:de:29:08:50:09:07:66:
         e5:cd:1e:7a:a9:99:30:10:06:67:d4:6f:fa:66:09:f5:94:0e:
         23:bc:7e:22:74:1b:8f:2e:44:52:31:03:11:45:38:3d:cd:93:
         1b:14:ff:a4:6d:fc:d9:31:f5:32:11:5b:e5:02:b7:6f:2c:fa:
         84:01:e3:2e:72:f5:6d:b1:0c:f0:ac:c5:cf:b9:2d:f2:90:81:
         be:62:84:51:41:06:6a:e8:12:ec:0b:fe:f3:29:79:90:77:08:
         f8:d5:6d:ab
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYp2NwbI/6Ekij2iV1gqyCS/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMWYxNGM4NTA3NDVhN2MzMTJlYTJlYjBiZTAzMDUyZTQ5
NjcyNzUwHhcNMjMwOTA4MTkxMzUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMzU0MWRhNTcyM2JmYzIzYWVkOTRiY2JlOGRhN2VkZTkwNGQ1YmYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiktraPYRxQe8zc9lhKfKQj86foqO
MK4j0FLUl80+mOhzarMcszWW9xP3CBz4UXA5rS7m9HKHI0BB4F6SDigRJ1C7uMbi
Ij+G9Ah0zPYjD1YVhtZfbagvFclQBEeHINMnj26RODYIoWeutOZH24wEU3J88QU5
DeWM1epeYiFvodU6H+jXPIJv3EI9X+Kw+XCW4dZRlTvv0+ZWNpYoNJNGaK21wJXh
MVahhRblFO6pDXDHXhRamWWnwDKA7UPbb8alQHVdLf927xNRn9eANkk5G54v0Vi0
gN6lTJyxC1agw5wpfUZMGBDK3SXp4giUGiSUJvL0QNwvc0JEkW658+GdcwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFCNUHaVyO/wjrtlLy+jaft6QTVvwMB8GA1UdIwQY
MBaAFKofFMhQdFp8MS6i6wvgMFLklnJ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQt
ODNmY2QyMjU0ODJhLzEvSTFRZHBYSTdfQ091MlV2TDZOcC0zcEJOV19BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQtODNmY2QyMjU0ODJh
LzEvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHrIn2gtICGNlXeI1dJ9
fEe2+Jz9MVqgzwEH+Gq1y+6IjRGkLQeAzaomTlWFbKmR2pE+GT4Q4WS/YYFJ79Lh
v28koCcWT04TpXNPp8qovwb1grcUDtCZK0Rwn4Ws2DoFroi0sGxSrrQGVTCg1PPL
N16zChx3ZqikSBxeOI1i+nX3zRugiHtZvEVD0bVO1qNSw/5vw2p5vdJ8PaKe3ikI
UAkHZuXNHnqpmTAQBmfUb/pmCfWUDiO8fiJ0G48uRFIxAxFFOD3NkxsU/6Rt/Nkx
9TIRW+UCt28s+oQB4y5y9W2xDPCsxc+5LfKQgb5ihFFBBmroEuwL/vMpeZB3CPjV
bas=
-----END CERTIFICATE-----