Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/QFvU9znw6TMmwcCe0uCUKoRdkt8.roa
File:                     QFvU9znw6TMmwcCe0uCUKoRdkt8.roa (raw, json)
Hash identifier:          sjzkwgC9ifES1eycSYUmjkBzll3PBA0gwPzWSTKSt3w=
Subject key identifier:   40:5B:D4:F7:39:F0:E9:33:26:C1:C0:9E:D2:E0:94:2A:84:5D:92:DF
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A90257B4B9FA49F7BE506898ADCED60F8
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/QFvU9znw6TMmwcCe0uCUKoRdkt8.roa
Signing time:             Wed 13 Sep 2023 20:04:50 +0000
ROA not before:           Wed 13 Sep 2023 20:04:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18a:9025:da/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:90:25:7b:4b:9f:a4:9f:7b:e5:06:89:8a:dc:ed:60:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep 13 20:04:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=405bd4f739f0e93326c1c09ed2e0942a845d92df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:96:b1:55:6f:a1:25:06:03:ce:ac:c2:05:07:
                    be:db:45:f0:39:ef:05:68:f4:6a:a9:17:37:ea:af:
                    35:8c:98:02:90:36:d1:20:2e:87:28:43:d5:c0:4f:
                    0b:cd:89:0f:47:7a:05:d8:2b:6d:93:61:4d:bf:d2:
                    0a:52:5d:a7:6e:7a:b1:ce:b3:7a:56:77:33:03:c9:
                    f1:08:22:70:ee:b5:62:24:96:e6:93:9a:be:77:ab:
                    51:3b:c1:5e:35:8b:9b:cc:22:7e:ac:8f:01:d3:a1:
                    21:6a:7c:0f:ae:7d:ee:b0:26:7f:fa:d7:58:f4:1d:
                    eb:65:4a:7d:58:17:75:92:15:7e:23:22:fc:4c:ed:
                    47:97:8d:e3:4a:05:7d:c3:3c:6e:53:ef:10:0e:63:
                    d9:f8:c2:e4:95:9b:b9:c3:0b:c9:22:31:be:e8:f9:
                    4c:4a:d1:f0:b7:6e:2d:a7:11:79:3d:11:1d:3d:aa:
                    f4:fa:6d:dd:10:bb:5b:54:37:16:16:52:c7:16:82:
                    d0:14:16:d8:0f:9f:d5:c0:61:8b:6d:0b:9e:e8:bb:
                    a9:c1:0d:cd:17:10:af:75:25:ca:7c:74:6e:46:02:
                    3c:65:fe:a7:2b:e7:5e:b5:f3:9c:6b:39:8f:6e:2b:
                    88:95:7b:f4:80:67:08:4e:b2:da:2a:df:ab:5b:d6:
                    13:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:5B:D4:F7:39:F0:E9:33:26:C1:C0:9E:D2:E0:94:2A:84:5D:92:DF
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/QFvU9znw6TMmwcCe0uCUKoRdkt8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         35:46:fd:79:84:a0:a4:64:83:ba:a8:fd:38:74:5c:ef:51:72:
         79:8e:55:5b:7d:cd:34:87:c1:eb:d9:7e:57:5d:55:1c:cf:13:
         aa:d4:7a:ec:be:70:78:de:90:f5:64:88:10:57:0d:5a:d7:a7:
         ca:af:51:33:c9:06:11:54:6b:23:ea:07:95:41:95:ee:cb:82:
         35:65:b9:f4:72:86:57:77:17:89:5e:8a:a0:6c:15:8d:cd:ea:
         72:f8:8b:d7:0d:91:17:5e:16:30:ce:8a:67:3e:35:9e:f7:05:
         3c:51:3d:27:ab:3a:4f:b2:2d:4d:ec:29:99:58:9a:ff:4f:53:
         c9:d2:5e:81:7a:8e:ac:a3:9a:ec:7d:bb:54:38:cd:04:2e:37:
         02:cc:5c:a8:19:ae:21:70:ab:b9:c4:a1:46:0e:a6:65:3e:da:
         43:7f:28:30:ca:8a:c1:0f:90:d2:9f:7e:5f:f3:7a:7b:d7:13:
         af:71:b7:63:46:9b:4a:ea:72:87:46:62:9d:58:c0:6d:37:6c:
         cc:b1:2b:73:98:5e:d1:33:2b:54:ac:6f:ea:34:d7:2a:64:cf:
         27:84:00:90:56:ed:f2:78:2e:58:38:9d:2f:b7:10:3a:ed:8c:
         7b:73:80:0f:e2:b8:7b:f1:be:39:ae:2b:94:e7:11:e4:1d:e8:
         73:e1:17:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----