Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/N4chuxy-7wcnd8QIaIVZdyIu1KM.roa
File:                     N4chuxy-7wcnd8QIaIVZdyIu1KM.roa (raw, json)
Hash identifier:          neXcJeLNZJYgqke1VgSCbiXwquBciZ/T9czooUIpWjA=
Subject key identifier:   37:87:21:BB:1C:BE:EF:07:27:77:C4:08:68:85:59:77:22:2E:D4:A3
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A8BE3166F3E89ED8446D42A2F3D9E1A60
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/N4chuxy-7wcnd8QIaIVZdyIu1KM.roa
Signing time:             Wed 13 Sep 2023 00:13:50 +0000
ROA not before:           Wed 13 Sep 2023 00:13:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:8b:e3:16:6f:3e:89:ed:84:46:d4:2a:2f:3d:9e:1a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep 13 00:13:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=378721bb1cbeef072777c40868855977222ed4a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:7b:e7:9f:6b:1b:5c:0f:40:b2:32:a2:ad:f0:
                    91:a7:7e:a3:06:4f:1f:34:77:77:33:e9:8c:9b:1f:
                    70:e4:54:4b:7e:08:8b:ac:ef:35:6e:d9:65:59:2b:
                    b5:98:26:ea:58:10:34:eb:5b:7f:eb:de:9c:bd:16:
                    69:2e:5e:fc:d9:5e:c6:0d:24:32:8a:a5:0f:e4:17:
                    6f:5f:05:73:ed:cc:cb:ee:c8:bf:77:ed:7d:16:3a:
                    bd:2c:33:a2:bd:54:65:ef:7c:7b:86:3a:11:20:4c:
                    ab:5f:cf:91:90:ef:41:30:d5:80:18:68:c0:9d:0a:
                    64:81:c6:9a:5f:96:16:0b:25:20:76:9f:bb:f7:f2:
                    3d:43:7e:2d:be:5c:43:0d:88:b0:c3:b4:d6:4e:ac:
                    f9:d7:86:56:d0:73:da:aa:0d:2f:b5:fc:8c:de:5d:
                    57:5e:05:7e:10:81:95:61:93:b2:59:00:de:11:b2:
                    c3:c8:de:f2:c3:01:cc:8b:98:49:01:e5:5f:59:14:
                    8b:89:44:91:45:c4:ab:11:95:07:34:b0:3b:de:df:
                    85:ed:c0:71:98:3e:03:2f:04:1a:4f:38:68:09:c2:
                    3a:c4:01:37:11:c7:18:43:78:90:7c:3c:04:d6:f8:
                    d8:5d:1b:0a:cd:82:00:45:03:57:34:c0:b4:0b:e2:
                    7d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:87:21:BB:1C:BE:EF:07:27:77:C4:08:68:85:59:77:22:2E:D4:A3
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/N4chuxy-7wcnd8QIaIVZdyIu1KM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         72:b2:37:fe:76:1d:11:1b:73:77:13:bb:df:3d:03:de:34:9d:
         4c:58:54:80:26:46:f6:bc:3e:27:9c:3b:de:11:74:29:97:5d:
         1a:96:39:59:8c:9b:39:a6:d0:99:46:e2:ee:98:e9:16:b3:3f:
         5d:40:e3:91:68:8c:f6:4a:e5:8a:1e:21:74:32:8a:78:70:67:
         31:16:a3:6c:8d:0d:a1:56:8c:47:7c:33:91:4c:7a:3a:6f:71:
         af:3e:fa:c1:57:65:26:2f:8a:ba:1b:91:d0:47:c0:4a:bc:4a:
         dc:5e:2d:af:c8:9b:85:54:4f:3f:1e:dc:c1:b4:8c:c4:08:d9:
         85:ca:9e:31:f1:33:88:c3:bd:d0:8d:0b:4a:79:95:83:bd:3e:
         7d:0d:8e:1c:cc:2e:54:45:4b:ea:9a:43:c8:04:ab:93:e8:78:
         91:ae:3b:23:ef:db:02:30:4c:b9:bb:df:d4:73:76:3b:e7:a3:
         b6:c4:9d:c8:73:8d:89:47:6e:94:e9:a2:f3:98:cd:92:35:54:
         5a:5d:32:e1:b8:8e:06:d6:ee:64:bb:4c:f5:e8:8b:67:0a:d7:
         69:10:69:d2:f4:85:6c:f2:9d:3d:f9:f0:65:13:d8:60:af:3f:
         02:4d:11:f9:9e:89:4f:57:0a:99:87:94:d5:b9:2f:ca:43:7c:
         09:4b:ec:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----