Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/S9s-7JJ5iVLX7M-g1WVjfIZZ9CI.roa
File:                     S9s-7JJ5iVLX7M-g1WVjfIZZ9CI.roa (raw, json)
Hash identifier:          vFkWTNNDvQP3RKmK+Y1lc9xlWIW0zetkHnUVP+tifGk=
Subject key identifier:   4B:DB:3E:EC:92:79:89:52:D7:EC:CF:A0:D5:65:63:7C:86:59:F4:22
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A6DD8B904363CABA164AE4A622351E3AF
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/S9s-7JJ5iVLX7M-g1WVjfIZZ9CI.roa
Signing time:             Thu 07 Sep 2023 04:13:54 +0000
ROA not before:           Thu 07 Sep 2023 04:13:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:6d:d8:b9:04:36:3c:ab:a1:64:ae:4a:62:23:51:e3:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep  7 04:13:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4bdb3eec92798952d7eccfa0d565637c8659f422
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:cd:9e:19:45:4b:38:3e:4e:30:f5:47:e3:8c:
                    b6:c7:cc:b9:21:07:48:99:86:23:94:c9:40:e7:f5:
                    f9:b6:e3:6e:2d:ee:aa:0b:32:7c:41:4e:9e:0d:ac:
                    da:d3:7f:af:7b:e4:c9:a7:c7:04:bf:f8:f9:d8:42:
                    87:c5:ce:20:5a:f5:92:0e:14:a4:18:3e:49:93:68:
                    27:77:1f:39:9a:1c:e8:39:c0:54:1e:2c:be:39:f1:
                    c2:79:c7:0b:8b:75:b0:c5:7f:55:de:dc:fc:25:e6:
                    44:25:5b:d6:08:d2:5c:8a:1f:03:fa:c8:d7:0d:7b:
                    b5:44:12:91:86:a3:51:c6:6c:f8:3a:e2:98:52:9e:
                    be:c6:c6:3d:77:80:d4:35:c2:97:68:5f:1d:22:e0:
                    27:0e:d4:e4:87:2c:ea:09:bb:48:c6:26:f3:e6:36:
                    78:81:db:01:92:0e:99:52:83:be:58:19:25:3f:e1:
                    d4:96:d3:81:8b:1a:35:81:e8:d5:a4:04:f1:12:b6:
                    d6:49:b3:dc:ef:78:f1:18:a4:51:2c:9b:9e:ab:ee:
                    84:ff:c7:d1:e4:4e:59:f0:19:92:bc:70:bf:6c:99:
                    e4:73:50:91:dc:31:38:2e:91:c3:ba:bc:62:78:b0:
                    80:de:cc:82:a6:f3:7f:94:ec:53:06:34:63:44:05:
                    63:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:DB:3E:EC:92:79:89:52:D7:EC:CF:A0:D5:65:63:7C:86:59:F4:22
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/S9s-7JJ5iVLX7M-g1WVjfIZZ9CI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         22:65:13:3c:39:3d:a8:41:ad:10:af:5c:82:8f:36:d1:24:93:
         1c:0f:d4:15:9f:84:9b:c9:b7:f6:d9:fd:35:c9:44:1d:98:26:
         7b:d1:4b:12:8c:c6:e2:6e:b8:da:28:47:e7:4a:12:2b:94:8b:
         95:f5:89:32:9f:52:e6:91:f0:a3:c4:a1:e3:64:e2:a7:4c:95:
         57:d3:e6:40:c8:74:a1:4b:53:7a:e1:8d:ea:a8:d6:8d:a3:9b:
         74:5a:db:6f:68:a3:60:a1:ac:4b:dc:0f:ed:cb:74:61:95:39:
         47:fc:38:dc:f6:b1:5a:c5:7b:d1:bd:04:e4:88:d9:2d:b3:48:
         51:91:41:0a:1e:0e:09:b8:4c:22:f0:f5:ad:e9:0b:b5:a7:83:
         6f:90:c1:41:1e:6d:41:c2:46:35:9e:d4:29:90:6a:a9:c9:0d:
         8d:a6:21:37:a1:38:90:e0:0b:ac:cd:10:4e:63:e2:da:77:fd:
         1c:c7:3e:e2:09:e7:9d:1a:f4:96:04:4c:6e:13:ca:4e:39:4c:
         28:1d:eb:44:0b:62:6d:39:05:9f:28:f2:73:da:de:fa:d1:cf:
         d7:c0:0b:24:78:59:b9:f7:64:f6:4a:74:10:57:d8:e2:f2:ba:
         18:80:6d:68:0e:b8:8f:9a:dc:e3:6d:b7:a8:94:fd:7a:74:11:
         d2:d2:88:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----