Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/MyfnRwtvJO-a9ykfqbXNVAgHywo.roa
File:                     MyfnRwtvJO-a9ykfqbXNVAgHywo.roa (raw, json)
Hash identifier:          0JrPywOpMqZ/crfQR8djta3looN673ITkNpW7ROkaeE=
Subject key identifier:   33:27:E7:47:0B:6F:24:EF:9A:F7:29:1F:A9:B5:CD:54:08:07:CB:0A
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A9BBBCA81D98575CC9E7039C710348E0A
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/MyfnRwtvJO-a9ykfqbXNVAgHywo.roa
Signing time:             Sat 16 Sep 2023 02:04:50 +0000
ROA not before:           Sat 16 Sep 2023 02:04:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18a:9bbb:8ec1/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:9b:bb:ca:81:d9:85:75:cc:9e:70:39:c7:10:34:8e:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep 16 02:04:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=3327e7470b6f24ef9af7291fa9b5cd540807cb0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:5d:8a:b2:3f:64:a2:e1:eb:48:79:39:f3:84:
                    9f:a4:29:77:39:a5:a0:e0:d0:79:38:68:96:a9:b9:
                    73:1c:bb:ee:19:7b:78:97:cd:0a:e7:79:ce:4a:a3:
                    85:7c:17:69:fc:e9:b8:c5:67:d1:7b:4f:3c:eb:da:
                    e4:77:d1:b9:c8:5b:35:3c:38:74:52:4a:f7:02:90:
                    b0:96:22:87:87:9b:fd:ac:7d:32:8b:f4:10:28:1e:
                    8f:ae:54:e3:1d:20:b4:cb:5b:03:ca:e2:4f:fd:95:
                    c8:65:44:cd:c4:0a:51:aa:3f:18:0b:a4:59:e4:10:
                    c8:f2:88:f3:ec:84:4a:b6:cb:48:88:0b:c9:79:43:
                    2f:e2:22:f1:0f:09:9d:80:52:9b:94:c5:c7:f2:5f:
                    71:e2:9b:4c:86:dc:e2:93:28:e2:b8:96:ff:2d:9d:
                    0b:1c:0f:b0:53:ff:58:f3:ff:92:43:e8:b0:c1:48:
                    43:fe:28:01:3d:92:51:fc:93:8d:8d:09:05:56:78:
                    c0:0e:2b:ef:56:ae:ed:08:f5:10:b4:cb:1f:76:b1:
                    5c:71:5c:92:f2:39:9e:9d:1e:41:e3:c4:f2:af:46:
                    b1:f3:b5:a2:c8:10:9c:0f:40:c0:57:c1:3e:12:25:
                    2c:e4:ea:b7:79:b1:4c:85:53:d7:13:29:ff:5b:99:
                    42:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:27:E7:47:0B:6F:24:EF:9A:F7:29:1F:A9:B5:CD:54:08:07:CB:0A
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/MyfnRwtvJO-a9ykfqbXNVAgHywo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         02:d0:e0:2e:fc:71:ec:7b:8c:c0:5d:27:89:fe:46:01:5a:f7:
         0a:b3:b7:4c:16:fc:d5:60:0d:8c:84:7e:e2:95:f8:ec:e1:72:
         10:ef:75:8e:f5:1a:ad:43:51:f5:99:ba:57:c2:30:ca:a0:ed:
         25:a0:88:01:a2:9d:f9:e0:dd:a9:cc:32:5d:1a:59:88:d4:4e:
         61:c4:1c:d8:cb:c3:e3:9a:81:89:7d:10:6a:63:87:95:61:d1:
         87:39:14:ca:5a:e9:9e:cc:52:0f:55:e3:e3:0f:92:c7:30:47:
         e7:d2:ce:66:d5:bc:75:81:ab:da:73:b0:72:d4:36:2d:8f:c8:
         ba:2e:91:7a:26:82:ab:c7:d4:32:e6:55:ba:b4:2d:5d:8e:b7:
         36:fd:7f:e2:de:04:4b:17:30:98:c6:f3:89:1e:fb:86:f0:21:
         61:8d:0e:7d:27:e1:bd:89:d1:73:3c:92:37:58:83:32:f7:62:
         a6:08:d0:70:0a:e6:1b:0b:22:d1:74:e1:5e:b6:d2:e5:09:8f:
         5f:0e:89:87:df:7a:63:5e:2c:35:f6:88:1b:a9:3b:1e:19:81:
         c5:be:fd:b1:63:42:be:56:0a:86:b0:dc:a2:a9:91:7e:0f:2b:
         db:c6:15:08:d8:ba:16:fe:be:f0:cc:79:57:c7:0f:e8:4e:39:
         a9:c6:1d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----