Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/M9VySQByCNZDjdtvUkvIZfOCa9I.roa
File:                     M9VySQByCNZDjdtvUkvIZfOCa9I.roa (raw, json)
Hash identifier:          W4LLw0ZUaZOF4zF5pGq5XFB4HyFrBXbpabZ61+VmjPI=
Subject key identifier:   33:D5:72:49:00:72:08:D6:43:8D:DB:6F:52:4B:C8:65:F3:82:6B:D2
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018AA3E3322837A8A0F09C278A23E9E8FB07
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/M9VySQByCNZDjdtvUkvIZfOCa9I.roa
Signing time:             Sun 17 Sep 2023 16:04:50 +0000
ROA not before:           Sun 17 Sep 2023 16:04:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18a:a3e2:aefa/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:a3:e3:32:28:37:a8:a0:f0:9c:27:8a:23:e9:e8:fb:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep 17 16:04:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=33d57249007208d6438ddb6f524bc865f3826bd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ac:5c:d0:a3:5e:41:fe:7a:cf:22:7b:31:aa:
                    05:20:f6:3a:ec:22:1b:1a:1c:bb:0d:bd:7c:de:29:
                    5d:52:e2:86:5d:a9:f5:e3:fe:55:27:f8:4b:58:90:
                    7d:a6:4b:25:14:7a:c5:72:9f:0d:b8:df:e4:cc:ae:
                    6c:db:19:c4:c8:c6:f5:8f:44:6c:98:65:2e:ee:37:
                    c0:5b:b7:6f:bc:00:9f:20:a6:d2:89:58:55:e9:cc:
                    5e:48:6d:fc:50:44:1b:b3:ee:6b:7a:60:90:6d:33:
                    2f:b4:43:59:b8:45:4a:e1:a0:28:c7:e1:3e:ec:43:
                    98:4c:91:ed:5c:b5:e5:a1:2d:f5:21:eb:7a:10:47:
                    28:e8:7e:1d:60:d5:5f:47:4a:39:2d:bd:a0:40:d5:
                    b0:13:e6:c8:87:b1:f0:ea:65:6c:ff:fd:5c:cf:89:
                    ca:7e:ff:d4:34:fa:80:88:fc:a2:79:eb:0b:bd:da:
                    fc:cd:1c:09:e9:2d:11:c8:7e:fb:04:7b:de:cd:16:
                    b4:9c:00:20:a0:4f:63:59:9b:73:23:4d:ee:50:16:
                    dd:aa:6e:c4:24:54:cd:85:3c:0e:30:2e:52:4b:95:
                    5c:e4:20:2f:cf:2f:38:55:b5:16:40:1b:b2:ea:33:
                    eb:a2:c0:1f:94:e0:70:61:d9:44:59:af:8c:0d:cb:
                    08:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:D5:72:49:00:72:08:D6:43:8D:DB:6F:52:4B:C8:65:F3:82:6B:D2
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/M9VySQByCNZDjdtvUkvIZfOCa9I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         19:45:db:5c:b9:c4:fc:2d:29:77:3f:c7:53:f1:43:d5:79:77:
         e9:53:52:09:2e:55:19:f6:5d:5d:5a:34:57:ce:25:50:ca:9f:
         97:d4:0f:81:73:b6:78:70:c5:07:91:67:0a:ab:86:86:36:7f:
         1c:7c:c7:a6:98:07:a1:d3:52:31:c4:4b:79:78:ba:d0:0b:2e:
         05:8e:e1:5a:51:b8:2e:f4:7a:6c:bd:5e:bf:e3:86:dc:1e:ca:
         14:c3:5f:25:b6:fe:14:c7:1d:bf:31:b4:6e:2e:82:9f:ce:d7:
         6b:f9:f2:58:aa:77:27:7e:09:87:71:17:f4:3a:72:6c:e8:42:
         2c:ef:bf:e7:4b:89:e7:32:fe:ac:48:fc:c5:1d:b7:3d:eb:c1:
         77:0b:df:19:9e:ea:6b:23:88:11:54:24:e7:c1:97:93:95:67:
         29:07:c1:09:a5:98:18:c9:96:e8:82:4c:ae:05:2c:21:2d:33:
         0c:3e:ad:5b:a6:82:8b:e5:c7:90:ab:d3:85:ab:68:19:52:c8:
         f0:b6:ab:a6:fb:77:f2:25:81:4d:41:a0:77:9b:02:aa:97:15:
         1b:59:58:e2:5e:b4:87:44:a0:ba:a3:0a:8b:ae:7e:84:a4:51:
         c9:eb:55:a5:68:b4:70:9c:df:e8:70:65:fc:2a:d0:39:67:97:
         d5:c4:9b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----