Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/PxEG99NKoudLUm9yP7LU8imZtiI.roa
File:                     PxEG99NKoudLUm9yP7LU8imZtiI.roa (raw, json)
Hash identifier:          7vSE4qSzo9Mq70tDLgKVWusGOYeyh5yiIb862FvAj+c=
Subject key identifier:   3F:11:06:F7:D3:4A:A2:E7:4B:52:6F:72:3F:B2:D4:F2:29:99:B6:22
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A74F4C3004235AF991035FDACF2734CCC
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/PxEG99NKoudLUm9yP7LU8imZtiI.roa
Signing time:             Fri 08 Sep 2023 13:21:52 +0000
ROA not before:           Fri 08 Sep 2023 13:21:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:74:f4:c3:00:42:35:af:99:10:35:fd:ac:f2:73:4c:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep  8 13:21:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=3f1106f7d34aa2e74b526f723fb2d4f22999b622
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c0:a8:7a:9b:89:81:dc:d5:cd:ee:ee:8d:41:
                    46:f3:0a:6c:79:0f:9c:a5:99:73:fc:58:ca:da:2c:
                    13:cd:eb:b8:d7:34:fe:09:f8:a2:e5:f8:bf:4b:d4:
                    64:02:37:a0:f5:4b:2e:11:3b:ef:e6:9c:e3:bc:7e:
                    fd:f9:7d:ee:5f:b8:e5:53:7d:99:55:1b:cf:b5:d9:
                    20:e8:f3:ac:b3:3d:81:04:b0:8d:f0:a7:6f:1a:c9:
                    2f:c4:64:14:a2:45:09:ef:47:d7:98:36:2e:7e:dd:
                    2a:42:98:c5:bb:f9:06:70:50:89:c0:96:e0:00:25:
                    ce:57:eb:c1:c8:0d:67:42:46:7f:59:5c:c6:62:e7:
                    a9:ca:c9:1f:b3:09:1a:7d:b4:c8:80:af:8e:7c:f6:
                    65:ed:13:af:56:41:60:84:3d:56:74:a1:1a:1b:c2:
                    99:5b:5a:47:63:e8:16:42:84:de:96:67:ff:ad:d1:
                    a7:0c:ea:40:29:d9:4f:a9:34:f5:84:a4:23:02:26:
                    15:80:15:c1:39:bf:b1:9e:fb:70:a6:e8:55:34:3f:
                    8a:c6:5d:c9:3b:99:06:fe:a1:9a:43:d8:b5:ee:66:
                    d1:2e:35:0c:a6:03:8b:68:c9:2c:db:4b:67:dd:a7:
                    ba:d6:2a:95:12:af:e6:5e:16:ff:c3:81:8f:39:f1:
                    0b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:11:06:F7:D3:4A:A2:E7:4B:52:6F:72:3F:B2:D4:F2:29:99:B6:22
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/PxEG99NKoudLUm9yP7LU8imZtiI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         1f:b6:78:c2:ea:1f:1c:91:e8:84:67:95:4a:db:c6:47:0a:fd:
         f2:b5:17:02:5f:48:f1:b1:c0:c6:2c:40:95:3e:32:3d:ed:4e:
         19:57:0b:9c:1a:25:15:c1:b8:af:26:04:11:6e:d6:3e:12:44:
         1b:7c:3e:fd:c0:7c:5a:fc:69:38:1e:ea:35:d7:74:3e:2f:94:
         2f:5c:ed:90:4d:09:2b:5a:3b:70:e1:41:2a:7c:7e:25:cf:83:
         df:58:bd:99:3b:85:db:8f:0a:7e:05:b0:11:9a:04:22:04:ff:
         2b:d1:f8:5b:07:79:1b:91:c7:01:43:6b:3b:59:59:6b:6f:9e:
         b0:f6:4c:0b:48:8c:4a:a0:f3:27:50:d0:9a:50:b0:58:28:b9:
         cd:a9:ed:1b:ce:15:30:39:c1:5c:69:16:c0:ab:a6:0b:03:77:
         41:a4:f0:a6:d3:2e:2e:c6:2e:37:dc:67:9f:7d:0d:4a:7e:f7:
         ab:d4:83:61:12:b1:8d:e9:f9:55:3f:d3:fa:bf:f8:e8:da:f8:
         fb:f3:54:46:80:59:e9:8d:f1:23:2a:ee:3a:fd:ec:e3:e2:82:
         58:a2:8d:ca:ca:a4:d6:d1:b2:29:86:27:63:6c:67:e3:21:22:
         af:32:78:bc:c8:1d:90:3e:a0:27:a7:90:72:5d:bd:29:7a:52:
         f4:c9:70:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----