Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/M1Ed4A4UybW8j6gUAmH-JgHe57c.roa
File:                     M1Ed4A4UybW8j6gUAmH-JgHe57c.roa (raw, json)
Hash identifier:          t3tWBRopjVtm/lsuAbvtNhSe3pCyFC7zj83MsafA1dc=
Subject key identifier:   33:51:1D:E0:0E:14:C9:B5:BC:8F:A8:14:02:61:FE:26:01:DE:E7:B7
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018AA4510E3D4D941BF4AE708F3438FD6564
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/M1Ed4A4UybW8j6gUAmH-JgHe57c.roa
Signing time:             Sun 17 Sep 2023 18:04:50 +0000
ROA not before:           Sun 17 Sep 2023 18:04:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18a:a450:a210/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:a4:51:0e:3d:4d:94:1b:f4:ae:70:8f:34:38:fd:65:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep 17 18:04:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=33511de00e14c9b5bc8fa8140261fe2601dee7b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:04:61:48:72:1d:b1:da:b1:0f:bd:1b:16:c7:
                    b6:65:ee:9d:61:e2:23:91:f7:b5:68:42:17:39:83:
                    12:e9:16:c0:a3:c5:cb:5d:8e:db:7f:63:9f:b1:5b:
                    b6:c8:0b:6a:a8:ee:a6:8b:30:8b:31:11:0f:c8:a1:
                    0b:ad:05:b1:72:92:c3:56:c2:be:a3:fe:79:ce:d2:
                    f9:53:ee:0d:c8:71:0a:77:a0:07:3d:b7:2f:12:2c:
                    4d:db:49:60:35:44:0e:aa:e6:74:bb:b5:56:0a:2e:
                    9b:a0:ed:f9:10:27:b5:da:b7:c9:a4:3f:92:9f:c4:
                    49:46:ca:f3:06:74:4e:1a:2e:fc:48:13:96:9d:ca:
                    07:db:39:bb:58:d4:23:1a:d1:ac:67:82:bb:14:de:
                    5c:8d:2f:50:61:48:39:3f:ba:4c:05:01:49:db:aa:
                    cc:b0:bb:3a:78:73:22:d7:a4:ad:9e:9f:e2:2d:76:
                    35:9f:0d:ff:7f:80:f8:c8:81:7f:04:73:fe:b6:80:
                    a8:31:3e:be:3b:62:0e:c5:7b:46:a8:d0:89:67:1d:
                    5f:17:97:a8:13:0e:e7:c9:86:a5:5d:51:dc:65:10:
                    3b:31:34:37:64:7d:08:49:7a:02:1d:a2:13:29:75:
                    5d:df:6e:97:e7:d1:30:4d:2b:8c:b8:f4:57:a2:ca:
                    6d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:51:1D:E0:0E:14:C9:B5:BC:8F:A8:14:02:61:FE:26:01:DE:E7:B7
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/M1Ed4A4UybW8j6gUAmH-JgHe57c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         6e:5c:7e:2b:72:f4:af:1d:30:be:0d:99:15:58:72:70:2f:95:
         ed:45:bc:01:2d:3d:24:31:55:b9:24:d3:fa:e9:9c:a0:70:21:
         40:3a:11:4d:f7:42:99:aa:b9:34:eb:77:1c:65:df:1b:79:43:
         09:71:70:68:4e:de:3e:b3:ef:87:98:c8:56:5a:91:f8:bc:47:
         26:1d:a9:1b:bb:bb:b2:46:85:3c:44:0f:62:da:be:57:16:8e:
         8b:5b:ad:c1:bc:3c:c3:86:d6:51:a9:91:b9:cb:2a:c5:ab:6c:
         49:bc:ea:51:00:7b:c3:f9:68:ad:ab:86:39:d8:83:1e:97:bf:
         ef:66:78:df:cd:07:16:1e:7c:b3:37:03:2a:08:65:59:cb:36:
         94:26:47:5c:fb:02:a9:d9:35:9d:55:3d:46:bb:58:01:21:e2:
         2e:51:c9:25:38:dc:85:f1:73:26:52:10:48:b8:c9:85:dc:61:
         4b:94:79:c8:8d:d7:61:c3:8e:f0:2a:4b:6b:ed:fb:28:7e:87:
         82:94:1d:54:59:83:97:7a:74:d9:f1:70:62:ae:b8:ba:31:d7:
         8f:20:65:d4:02:0a:eb:79:21:9f:94:00:a8:bb:ab:2e:6b:94:
         2f:86:cd:18:30:f3:b4:5d:95:35:f9:4c:65:40:f9:fb:44:74:
         8c:f5:a8:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----