Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/LJvvNho3LGS-adLEL1DIYM8mzII.roa
File:                     LJvvNho3LGS-adLEL1DIYM8mzII.roa (raw, json)
Hash identifier:          bnMfKbKqCy+tCf2VLXTfOh2fP3FPzER1NxAV+aVsY8g=
Subject key identifier:   2C:9B:EF:36:1A:37:2C:64:BE:69:D2:C4:2F:50:C8:60:CF:26:CC:82
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A8461664C2EA848830EA2567D50C06B57
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/LJvvNho3LGS-adLEL1DIYM8mzII.roa
Signing time:             Mon 11 Sep 2023 13:14:50 +0000
ROA not before:           Mon 11 Sep 2023 13:14:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:84:61:66:4c:2e:a8:48:83:0e:a2:56:7d:50:c0:6b:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep 11 13:14:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2c9bef361a372c64be69d2c42f50c860cf26cc82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:84:10:75:88:5d:10:ff:b2:24:3b:b9:04:d5:
                    ac:7c:47:3b:aa:99:fc:24:f1:a6:75:07:21:07:c9:
                    33:11:51:ae:86:eb:43:68:61:ae:cf:e4:dc:0c:8c:
                    f7:61:51:04:4f:d1:47:23:11:71:09:ef:2b:dd:61:
                    2a:dc:62:10:c5:8a:70:d0:06:53:dc:27:c8:09:b9:
                    7e:dc:79:71:e2:f6:32:7b:47:ac:cb:c1:e4:68:8a:
                    21:8f:4b:92:55:c1:9c:0d:be:10:97:79:83:6d:33:
                    80:7b:3d:c9:62:89:20:b5:38:1a:b5:6b:1a:27:20:
                    5b:24:a8:d9:fd:b9:a6:04:b5:11:80:5e:a1:4c:58:
                    f8:a6:3c:b9:69:41:e8:47:f6:43:50:c1:1b:a4:c9:
                    8b:ba:c6:87:cf:ae:4e:5f:8a:dd:8b:81:0e:e0:59:
                    a8:c9:4e:89:3a:d8:cd:82:a3:f7:a0:97:e5:7d:2f:
                    9a:00:4c:a4:a9:e2:5d:dd:6a:c9:39:1a:ce:7b:a6:
                    7e:58:81:35:97:f4:c4:f1:f8:b2:e1:0c:5a:66:9d:
                    0c:64:b9:a4:05:63:f9:50:01:21:95:2a:e1:44:b5:
                    5d:16:d5:40:f7:67:7f:34:7c:d8:e0:98:d5:4d:32:
                    74:57:f4:e8:cc:ea:8f:3f:64:50:31:3b:b1:1e:93:
                    38:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:9B:EF:36:1A:37:2C:64:BE:69:D2:C4:2F:50:C8:60:CF:26:CC:82
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/LJvvNho3LGS-adLEL1DIYM8mzII.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         9e:17:de:30:e6:26:da:91:3b:63:05:b6:82:e9:71:56:c5:c4:
         54:7a:4f:5f:53:1d:ef:eb:6e:18:09:6b:01:ef:9d:be:33:80:
         41:94:d6:b6:2e:e9:a7:67:d3:ad:20:32:41:08:f0:84:9e:56:
         73:2a:9a:f7:7a:7d:ad:83:e1:e2:c8:1f:f6:c2:50:6b:b7:b7:
         bb:00:a8:25:a9:05:09:97:5a:f9:7c:b0:5a:8e:ec:77:49:b3:
         a0:7a:15:3a:a9:b0:e6:84:b4:e0:8a:d6:28:bd:15:63:e2:9f:
         83:75:73:94:5a:9f:d4:1e:4a:87:e3:57:59:a7:19:7d:58:b3:
         a6:3e:a0:6a:5c:37:5d:f2:72:f0:21:9c:b3:d9:54:a4:dd:51:
         f6:72:70:1c:08:3e:de:6e:b1:78:3d:41:6a:6d:7b:6c:28:c9:
         0f:71:e7:0e:21:b7:40:8e:73:29:a7:a2:b0:15:c8:15:66:3c:
         68:be:3a:f1:5d:89:36:51:b8:7c:16:ba:1f:a1:62:e6:38:6e:
         bc:a0:1d:e6:70:f1:2d:10:ce:8b:24:10:2c:fd:3f:7b:4e:a9:
         73:c0:bb:f5:0b:1a:fa:e0:7c:77:37:d1:ef:17:34:24:0a:54:
         34:6e:25:5b:36:d6:cd:ee:39:85:0f:f1:57:da:ec:d1:09:ae:
         4a:61:d8:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----