Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/JkdkUT_8ifqMjkbDbsHjvwV7nU4.roa
File:                     JkdkUT_8ifqMjkbDbsHjvwV7nU4.roa (raw, json)
Hash identifier:          z6YgAnysN2Z+wJ4XUNAYAca1GgOuAp49uWo/3a+WATg=
Subject key identifier:   26:47:64:51:3F:FC:89:FA:8C:8E:46:C3:6E:C1:E3:BF:05:7B:9D:4E
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A8F1CE53AA41B81571A7CF3276B8D3256
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/JkdkUT_8ifqMjkbDbsHjvwV7nU4.roa
Signing time:             Wed 13 Sep 2023 15:15:50 +0000
ROA not before:           Wed 13 Sep 2023 15:15:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:8f:1c:e5:3a:a4:1b:81:57:1a:7c:f3:27:6b:8d:32:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep 13 15:15:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=264764513ffc89fa8c8e46c36ec1e3bf057b9d4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a5:87:9e:40:78:c4:d7:36:57:51:0e:62:13:
                    88:e6:77:90:85:cb:60:19:9d:2a:ca:1b:f6:8e:4e:
                    b0:c6:c7:a2:84:ce:dd:e5:b8:80:c4:72:23:46:3f:
                    0a:f6:79:ca:d9:75:2a:9b:d7:1f:21:35:3e:f1:c4:
                    60:3e:30:93:56:26:c7:17:06:85:f2:c0:1b:e6:ea:
                    d2:41:c4:12:bd:35:b7:c4:1f:6d:a6:fd:c1:e7:93:
                    41:be:84:62:45:1f:63:be:e5:46:0e:61:f8:c7:bb:
                    da:1a:aa:d8:e7:a4:6b:e7:67:95:41:ad:3d:3f:6d:
                    5f:49:4d:b1:87:34:f4:9b:e1:aa:aa:09:5f:b6:e3:
                    65:b1:13:d0:96:24:90:80:8d:bd:cb:9a:69:0f:f3:
                    ff:ef:95:77:14:e5:af:4b:fa:3d:94:53:b5:e0:93:
                    52:25:77:51:08:e5:24:60:22:20:8a:1a:96:52:ed:
                    68:86:b5:7e:06:33:aa:4b:59:4a:70:6f:91:b5:5a:
                    11:e9:44:df:e6:e3:81:ec:c2:83:6a:9c:76:c9:7e:
                    ac:95:6d:52:91:e6:38:08:da:35:cb:e6:0d:07:0a:
                    f2:01:0a:06:fb:6b:f3:e5:c7:a3:0f:f1:6d:f0:f0:
                    36:1a:a6:29:98:7b:6c:53:2a:e9:09:03:c8:8a:d0:
                    7f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:47:64:51:3F:FC:89:FA:8C:8E:46:C3:6E:C1:E3:BF:05:7B:9D:4E
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/JkdkUT_8ifqMjkbDbsHjvwV7nU4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         0c:3d:6c:52:b0:61:75:01:33:47:8e:e5:0f:b2:e8:73:bd:dc:
         a1:ea:1e:ec:f8:53:1c:22:93:f6:b1:8a:62:ce:6c:27:af:f8:
         9f:41:9d:46:96:ab:bf:15:86:59:35:b2:39:3a:f0:3e:d2:26:
         c8:0e:6a:fb:da:6e:72:22:41:30:1c:04:c4:f9:19:28:74:77:
         4c:be:ba:d8:f7:61:47:04:e8:ed:3d:12:36:06:f1:96:4c:0f:
         16:c0:4d:60:61:1d:0f:fc:bf:14:4a:31:2c:2b:eb:b1:a3:45:
         81:85:1a:c4:41:5c:c5:16:c8:f9:05:f8:4a:21:3a:00:5e:75:
         7e:57:13:15:2f:96:f5:68:40:b2:4c:36:1b:cf:d8:66:d0:e9:
         94:58:f4:d6:51:19:27:83:95:90:0f:3c:45:fe:44:65:6b:5e:
         6c:0b:09:ce:e7:91:4d:01:69:e6:ce:67:a6:f4:39:54:47:13:
         e1:03:d6:4d:a9:b7:fe:23:e1:91:16:9d:4e:ec:dc:4d:e9:e2:
         b7:11:5f:29:f8:c3:df:68:87:bd:bf:64:12:20:4c:94:85:66:
         4e:66:d9:78:4c:aa:f6:1f:39:fc:57:af:3a:ab:42:a8:f1:e4:
         06:89:87:44:24:ae:ef:be:91:df:5a:0f:76:14:62:dc:99:87:
         8f:ce:f5:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----