Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/JnbnStZEE16K8LTrBqPJ-N2C-VI.roa
File:                     JnbnStZEE16K8LTrBqPJ-N2C-VI.roa (raw, json)
Hash identifier:          YQPN+Syz0GoZneS81sAH+LcLrOYRQjJfGV8AhNlmvVQ=
Subject key identifier:   26:76:E7:4A:D6:44:13:5E:8A:F0:B4:EB:06:A3:C9:F8:DD:82:F9:52
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A755A62571EAB6FF279012889C1E12885
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/JnbnStZEE16K8LTrBqPJ-N2C-VI.roa
Signing time:             Fri 08 Sep 2023 15:12:52 +0000
ROA not before:           Fri 08 Sep 2023 15:12:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:75:5a:62:57:1e:ab:6f:f2:79:01:28:89:c1:e1:28:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep  8 15:12:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2676e74ad644135e8af0b4eb06a3c9f8dd82f952
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:fd:48:b9:e1:b2:a9:f1:30:7f:72:8d:15:c2:
                    64:f3:9d:8a:73:1f:34:a8:0a:0c:32:0b:cb:5c:36:
                    5d:13:f2:15:06:c3:02:ab:00:40:41:9a:90:a5:40:
                    3a:94:3a:ee:ef:e4:00:9c:0f:92:7a:ac:0e:bb:76:
                    0b:44:ab:50:86:15:d5:ae:1e:a6:90:b6:ff:05:f3:
                    55:a1:4c:1e:35:2f:d3:dc:ff:ec:9f:47:c3:d9:32:
                    89:e8:45:32:83:a2:58:bb:42:5b:f5:78:5a:68:7a:
                    70:dc:e0:a4:b0:c4:2b:a5:80:4a:0e:9b:48:c2:40:
                    91:eb:67:64:25:10:5b:f7:ed:e4:18:ef:7f:ed:23:
                    80:54:7e:21:94:32:a5:a2:1e:d9:85:02:b5:87:c6:
                    8d:cc:55:af:f6:ee:52:4f:2e:71:87:a5:6a:c8:41:
                    aa:45:e0:40:22:5c:30:3b:b4:f4:64:99:6f:f8:12:
                    9e:be:63:e8:39:14:5c:71:a2:fb:c0:3b:f2:d8:74:
                    a8:e7:5a:7d:54:11:e1:23:60:c8:eb:82:cf:c2:5f:
                    e7:72:bd:e5:f5:df:aa:40:73:36:62:b8:e4:37:8b:
                    d2:55:35:e3:6b:ed:db:83:09:67:4f:4b:4b:e2:09:
                    5f:1a:5d:dd:b4:3b:f6:3e:ec:aa:75:be:8e:33:f3:
                    15:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:76:E7:4A:D6:44:13:5E:8A:F0:B4:EB:06:A3:C9:F8:DD:82:F9:52
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/JnbnStZEE16K8LTrBqPJ-N2C-VI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         7d:77:08:14:f5:c9:65:a7:96:43:c1:37:06:2e:aa:2f:16:4d:
         96:95:58:ee:d8:e7:17:3a:91:c5:65:57:33:c2:0c:42:c8:f2:
         d3:71:50:58:b3:99:9e:79:9f:71:24:aa:e4:36:ba:62:12:38:
         dc:28:89:ed:c1:19:8b:58:cb:d9:be:87:a6:9b:a4:46:fb:0e:
         39:c9:e0:d2:84:26:52:de:5c:a9:a8:b8:e4:98:b6:36:12:9d:
         26:1f:61:5e:a6:24:08:0d:f0:9d:9e:c5:07:dc:b3:32:69:bc:
         04:3c:cb:92:5a:35:e3:cb:07:26:de:a2:1c:f0:c5:b7:6c:15:
         35:bc:69:67:6e:88:a0:25:92:5e:a7:75:e1:18:9d:0d:6d:40:
         87:98:a2:3f:1f:54:79:39:9e:63:14:07:3b:80:49:8a:60:d7:
         0e:35:0a:f7:18:b2:6a:71:08:49:7b:ba:04:17:3d:a3:09:52:
         e6:9d:9c:44:11:3b:cc:94:5d:0a:e6:b8:9a:45:2b:a7:de:c5:
         eb:b8:53:69:65:0e:ef:5c:12:14:9b:a1:23:85:a1:94:fd:8d:
         52:e0:00:0e:9f:09:42:05:ad:a0:61:1d:1c:0a:6a:71:12:a7:
         6a:11:67:5d:14:77:79:ca:38:a9:79:7e:c1:1e:90:fa:71:35:
         1d:c1:76:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----