Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/L5DDy9kyf9AVImfd95o_YcwJ5mc.roa
File:                     L5DDy9kyf9AVImfd95o_YcwJ5mc.roa (raw, json)
Hash identifier:          7IwQuYPxyiWjLtb015ZWklBM6Uym+cHo6Sxn2BafQwU=
Subject key identifier:   2F:90:C3:CB:D9:32:7F:D0:15:22:67:DD:F7:9A:3F:61:CC:09:E6:67
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A951B51DF7B3880D20266AA5C2255F242
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/L5DDy9kyf9AVImfd95o_YcwJ5mc.roa
Signing time:             Thu 14 Sep 2023 19:11:50 +0000
ROA not before:           Thu 14 Sep 2023 19:11:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:95:1b:51:df:7b:38:80:d2:02:66:aa:5c:22:55:f2:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep 14 19:11:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2f90c3cbd9327fd0152267ddf79a3f61cc09e667
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c5:10:9b:d3:fd:e1:3d:89:7e:80:c9:76:ff:
                    c0:ca:bc:66:d0:c8:86:76:1b:40:de:cd:30:5a:58:
                    0f:23:0c:e2:f8:64:c4:e1:35:d8:e5:28:88:2e:9a:
                    e1:6b:43:dc:07:52:55:ff:f0:2e:1e:0f:32:44:99:
                    49:16:9e:45:14:1d:20:3f:b3:78:6c:95:85:b5:2d:
                    f7:fe:e5:8e:9b:d2:41:a5:39:05:81:d5:e2:c4:46:
                    2c:2e:d3:8f:f0:e2:e8:64:24:d3:54:75:97:4d:06:
                    5b:a9:d7:65:28:23:2b:d4:53:df:14:ee:2e:0f:22:
                    29:de:57:88:ff:43:36:0c:d2:7f:cb:87:88:52:75:
                    95:a4:22:c7:65:cc:7a:91:56:17:93:da:76:c2:31:
                    f3:12:9a:e6:b2:b5:9b:5a:2b:28:bd:bb:3b:97:c6:
                    fd:de:5d:7b:8b:d3:49:16:68:b3:61:2b:60:e0:91:
                    9f:16:d6:0a:eb:e9:37:6e:21:f6:68:63:61:1f:22:
                    e2:0d:4e:5c:03:19:e2:89:4d:6b:21:28:dc:f2:22:
                    7f:2e:a3:71:01:41:f0:a5:bf:04:4e:79:0c:e2:df:
                    cc:d7:c5:73:d8:b1:90:78:35:34:5c:33:22:5b:63:
                    02:f2:b4:7c:88:28:d4:d8:db:8d:f0:77:a7:78:eb:
                    82:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:90:C3:CB:D9:32:7F:D0:15:22:67:DD:F7:9A:3F:61:CC:09:E6:67
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/L5DDy9kyf9AVImfd95o_YcwJ5mc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         6a:5d:95:7a:b3:d3:cf:85:9f:4a:11:4b:d3:3f:39:f0:ae:71:
         29:a5:37:22:10:da:63:f5:38:12:aa:2c:cd:80:6b:7b:8c:7f:
         77:f1:04:8b:a4:60:38:fb:73:48:df:8e:2d:4d:eb:ba:1a:b5:
         01:5a:1e:6e:8f:d6:c4:67:88:87:5c:0a:87:4b:0c:5e:c5:d4:
         44:f9:93:8b:73:45:2e:60:73:f5:d0:b2:3c:c0:dd:36:8b:d3:
         ee:fe:d0:20:d8:e3:86:84:dd:af:87:36:79:e9:87:b2:c7:ec:
         c3:79:a8:c4:e7:9e:83:1b:8a:8e:c4:b1:e0:9e:c3:bf:32:fb:
         32:e0:5e:c4:91:83:32:68:bc:2f:88:36:c4:93:ab:ac:28:f8:
         bf:3a:ec:53:6f:73:75:3b:5c:cd:95:db:fd:c3:7d:1a:e4:6a:
         e2:42:4d:3e:6e:44:de:9c:c6:81:ce:8f:98:8c:d0:75:32:d9:
         3a:89:d2:3b:e7:10:56:f9:45:2f:9e:eb:8b:50:87:4b:eb:ad:
         7f:e4:57:3f:f6:c1:de:cb:ce:98:15:bb:87:0d:23:16:9c:5a:
         cc:09:62:3c:55:a4:09:5e:47:ca:e0:df:46:8f:e3:86:88:74:
         f5:a9:f7:e6:94:3a:43:74:27:f1:0e:ff:29:04:72:7f:4c:1a:
         de:fc:5c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----