Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/JBZ6pCB_XQQkMg3jsObnrHRNRVE.roa
File:                     JBZ6pCB_XQQkMg3jsObnrHRNRVE.roa (raw, json)
Hash identifier:          XPYu6I7FTpFXFYFVAhnTPRwJTQEOAi+g2ajxryWpMSQ=
Subject key identifier:   24:16:7A:A4:20:7F:5D:04:24:32:0D:E3:B0:E6:E7:AC:74:4D:45:51
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A921D063F5A81978B375C29119F056483
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/JBZ6pCB_XQQkMg3jsObnrHRNRVE.roa
Signing time:             Thu 14 Sep 2023 05:14:50 +0000
ROA not before:           Thu 14 Sep 2023 05:14:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:92:1d:06:3f:5a:81:97:8b:37:5c:29:11:9f:05:64:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep 14 05:14:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=24167aa4207f5d0424320de3b0e6e7ac744d4551
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c4:e5:3c:46:a6:64:9c:55:f4:ea:0f:07:9d:
                    1c:f8:5f:bf:6c:11:57:c8:8c:59:0a:95:50:ef:0b:
                    59:72:1a:b3:cd:e1:57:47:10:0c:87:f4:ff:9c:d7:
                    5a:46:6d:3f:76:fb:ee:8f:45:69:10:9b:2d:65:d8:
                    cd:47:0d:73:28:7b:16:74:50:4f:e4:54:9b:5e:be:
                    6e:65:c0:05:6b:7d:64:fb:f9:6e:ea:e7:91:ac:73:
                    e1:86:88:b2:ca:48:c3:a6:7a:78:c3:76:9e:b0:c0:
                    e7:47:6e:76:a7:85:67:fc:70:60:0e:d6:91:94:28:
                    ce:95:6a:65:2d:83:13:d2:60:23:0a:95:b0:3e:a6:
                    c8:1e:a8:fe:45:0d:ce:2f:d8:8a:d0:fb:a9:d2:2e:
                    8b:ca:e3:f1:e9:cc:54:be:36:85:f5:e3:da:95:b0:
                    d4:45:9b:55:da:b6:2e:dd:fc:ab:d2:4c:c1:f0:2b:
                    18:95:6c:79:9f:0d:66:a1:fa:d3:2c:41:8b:9c:0c:
                    60:38:8e:84:63:08:e9:10:20:71:71:ef:3f:93:a8:
                    10:62:de:45:ea:18:51:72:d1:2c:36:57:53:c0:0b:
                    da:aa:1c:5d:90:d1:80:9c:87:8c:93:e4:e6:93:3c:
                    9f:69:88:25:2a:b9:16:a1:b0:63:65:d7:b4:78:4c:
                    83:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:16:7A:A4:20:7F:5D:04:24:32:0D:E3:B0:E6:E7:AC:74:4D:45:51
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/JBZ6pCB_XQQkMg3jsObnrHRNRVE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         69:65:23:c3:00:2c:d1:0a:fb:fe:ca:c6:7d:ea:b3:8c:5c:eb:
         e2:77:bf:04:d0:32:80:10:bc:5d:29:a0:67:48:a2:60:51:66:
         00:c6:10:26:a6:09:9a:c8:90:bc:21:3e:44:c9:d4:8d:06:5b:
         14:05:88:a0:76:e1:3d:1a:b2:b6:e0:67:b5:84:c6:f4:03:22:
         3d:d0:96:fb:c8:d4:ea:ff:7a:fd:73:61:6d:55:50:6d:69:ad:
         d9:e6:18:0b:0a:29:ce:f9:9d:81:2d:7c:20:d8:6f:4e:bf:1e:
         e7:61:9d:9d:a3:f2:40:a7:b3:9f:21:0e:83:ab:81:88:b6:d3:
         03:3f:16:58:be:41:3d:fd:e2:7f:83:b2:07:7d:f6:a6:8c:73:
         f5:4f:7b:81:26:51:d8:ed:7b:ee:07:0b:6a:e6:79:4e:e3:4d:
         12:d9:44:d9:bb:81:a9:a7:32:c8:f0:d6:f9:cb:6f:6b:7e:40:
         84:c4:d0:0b:6b:90:92:b6:9a:85:e5:24:b9:2c:ec:08:00:ef:
         74:89:88:5e:61:0b:aa:a9:4b:61:52:1b:18:2b:cf:34:87:46:
         91:f2:25:52:cf:9c:e2:9c:75:20:18:c4:7f:6d:30:8c:b7:77:
         d2:96:e9:e4:a7:ea:0f:54:8e:92:76:02:1e:fe:a5:c6:d9:11:
         9b:2e:9d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----