Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/Muq4uVZjwv58nFyrgblGl-h1EBw.roa
File:                     Muq4uVZjwv58nFyrgblGl-h1EBw.roa (raw, json)
Hash identifier:          cAlJnKxo6g3fP6xDM4XaJUf+6Go5wKATBYNz07sp2Fs=
Subject key identifier:   32:EA:B8:B9:56:63:C2:FE:7C:9C:5C:AB:81:B9:46:97:E8:75:10:1C
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A98F900A6DD224DC5012358BCC8106B2A
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/Muq4uVZjwv58nFyrgblGl-h1EBw.roa
Signing time:             Fri 15 Sep 2023 13:12:50 +0000
ROA not before:           Fri 15 Sep 2023 13:12:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:98:f9:00:a6:dd:22:4d:c5:01:23:58:bc:c8:10:6b:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep 15 13:12:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=32eab8b95663c2fe7c9c5cab81b94697e875101c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c8:f0:fe:d4:77:ca:48:8b:85:29:de:2c:35:
                    0b:51:40:ac:d3:f3:3c:17:07:82:6b:ac:9d:f4:b5:
                    0f:9d:42:bf:59:c8:e3:ee:b1:b5:ac:1c:e2:4b:a8:
                    81:d9:63:bf:6d:11:d8:bd:3d:f0:58:95:a1:dc:f1:
                    a9:1f:f7:06:fd:89:be:af:1c:a8:67:f4:0e:4f:b5:
                    fc:01:8a:07:5a:81:98:f5:a1:72:18:c9:84:ef:61:
                    a2:df:96:ee:1b:36:44:ea:c2:19:cc:cc:59:73:83:
                    cb:d1:c8:c9:6b:7b:db:c2:87:4b:f0:89:df:36:42:
                    63:dc:17:21:8b:c0:e7:0a:5d:6c:f0:a3:60:8c:c7:
                    ee:0e:7f:6f:ff:17:6b:bc:c4:a5:10:ad:19:16:42:
                    dd:85:b9:72:92:98:ea:f4:47:75:e9:2a:42:53:ed:
                    44:cb:f2:f4:a7:dc:6c:d0:06:f2:32:06:77:8a:5e:
                    cb:f3:40:c1:ef:37:18:dc:a0:c3:bc:f0:e3:90:63:
                    cc:0d:c9:4d:a8:3e:03:cd:42:e5:cf:eb:6d:17:66:
                    e2:72:e7:fc:eb:46:04:e8:eb:c0:f6:a2:1f:09:8b:
                    69:a5:65:ca:66:58:36:15:dd:28:62:8e:53:90:70:
                    39:87:13:ac:5f:c3:60:f7:eb:1f:be:d0:d1:37:70:
                    6e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:EA:B8:B9:56:63:C2:FE:7C:9C:5C:AB:81:B9:46:97:E8:75:10:1C
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/Muq4uVZjwv58nFyrgblGl-h1EBw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         13:f1:93:7b:75:07:5c:0d:dc:1e:e7:32:72:fb:45:1f:6d:54:
         2a:ff:10:dc:63:fb:b0:a9:1e:4c:b1:66:ed:a6:3d:19:47:8c:
         68:e5:44:70:f8:87:e3:ec:a8:bb:d3:63:1a:b0:8d:17:d8:aa:
         13:d2:97:f1:e4:93:8a:b2:fe:25:25:a1:28:e1:3d:89:f6:64:
         3f:d9:fc:75:83:2d:b6:69:7d:d5:83:62:27:79:53:df:b3:72:
         8c:e7:16:0e:e7:e5:9f:d3:86:00:7b:b7:a6:2d:98:a9:04:f0:
         f8:c1:12:de:54:f1:2a:2e:38:0d:d2:c2:8d:cf:b1:ef:b1:33:
         ca:05:f9:db:df:dc:78:bf:74:25:49:6f:50:62:79:54:29:26:
         c5:01:05:08:e4:f7:22:93:2b:14:a3:a7:2c:06:1a:dd:63:7f:
         99:87:5a:d1:ee:0a:9c:81:b2:b2:8f:96:d7:06:8d:ad:89:cf:
         8b:5a:8d:5b:2b:e1:ac:73:1f:8d:61:09:23:47:bb:fd:ee:cb:
         20:3f:f6:c5:52:e0:1c:77:11:0e:5b:a2:e9:19:e3:5b:9d:c0:
         72:68:21:55:01:91:f0:c4:71:ae:8a:d4:ec:5f:d0:50:97:58:
         de:c9:3e:6d:d5:05:f4:96:a9:34:73:56:d6:75:46:7a:ce:1e:
         09:3f:83:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----