Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/SdPD_JRP_g43iwn4cob9gGdlRGU.roa
File:                     SdPD_JRP_g43iwn4cob9gGdlRGU.roa (raw, json)
Hash identifier:          UDwJJ/YAauM96LFG+Q1N280N3M92pVvsTYscXNizz0E=
Subject key identifier:   49:D3:C3:FC:94:4F:FE:0E:37:8B:09:F8:72:86:FD:80:67:65:44:65
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A62E9EB7B116705B81C55B7986E66B782
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/SdPD_JRP_g43iwn4cob9gGdlRGU.roa
Signing time:             Tue 05 Sep 2023 01:16:51 +0000
ROA not before:           Tue 05 Sep 2023 01:16:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:62:e9:eb:7b:11:67:05:b8:1c:55:b7:98:6e:66:b7:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep  5 01:16:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=49d3c3fc944ffe0e378b09f87286fd8067654465
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ae:b4:95:06:d8:62:a5:e9:55:c9:e1:11:21:
                    f0:96:e1:b4:2c:43:7a:49:bf:75:2d:3b:84:0d:d9:
                    32:76:ec:dd:da:7d:7d:ee:91:90:9d:c2:fa:95:94:
                    3c:6d:2d:91:9f:e8:b4:c0:df:3d:8d:88:2b:5e:33:
                    ae:3c:ea:d3:17:3d:55:81:75:16:dd:76:99:e2:58:
                    ba:61:b0:f7:61:74:93:e8:28:56:cf:a5:1b:41:9d:
                    9b:a1:78:bd:09:98:cb:0f:dd:c8:ae:1a:ae:f4:4a:
                    c0:bd:f2:65:07:67:80:7d:2e:ed:2a:c7:a3:f8:81:
                    f5:eb:9e:6c:ee:e2:c0:6d:4d:fa:b9:cc:60:5b:cb:
                    3b:c1:81:68:19:3c:a0:ed:52:e8:94:6a:5b:8b:da:
                    04:2e:e1:c4:b2:f8:af:31:33:fe:47:bc:20:8c:cb:
                    45:4e:be:7c:c0:09:6d:70:17:55:f9:e6:b6:b7:bf:
                    06:79:56:87:39:17:6b:68:c7:38:33:9d:4a:97:98:
                    f7:d7:68:69:96:0d:5a:98:53:3b:15:57:b4:7c:ff:
                    8e:ea:86:a9:05:13:fc:a3:e0:aa:a0:bd:26:82:ff:
                    ca:3e:db:da:40:fe:e9:38:aa:09:38:10:59:41:ca:
                    70:44:7b:1f:28:1d:5f:36:c4:92:27:29:1a:39:33:
                    1e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:D3:C3:FC:94:4F:FE:0E:37:8B:09:F8:72:86:FD:80:67:65:44:65
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/SdPD_JRP_g43iwn4cob9gGdlRGU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         37:ba:af:59:d6:f6:0f:0a:02:24:02:b6:21:fa:db:19:fd:b4:
         73:01:42:92:8d:c9:57:35:88:af:93:05:d3:45:80:bf:61:3f:
         38:97:fb:b9:c9:e4:24:6b:22:6d:ff:73:b3:56:2f:0e:87:00:
         84:77:39:46:8a:b5:d2:5b:61:c7:93:6d:5b:53:ff:a8:98:3e:
         f0:86:2a:79:62:ab:cb:c7:37:ad:c7:c5:28:21:cc:ca:ab:2e:
         96:ce:74:1a:60:34:b3:61:74:42:56:c9:e1:da:f9:12:be:43:
         be:61:1a:f4:e3:31:0a:cd:a1:a5:07:d3:e0:49:38:83:cf:83:
         83:a4:cf:54:30:1f:a1:75:0d:bd:1e:d2:78:0b:46:bc:a1:5d:
         9d:45:a8:b8:d1:56:6d:05:34:7d:53:81:72:c8:21:f3:b4:3e:
         28:5e:33:7b:7a:c3:83:66:7e:31:37:a5:1b:ca:21:7e:fb:ee:
         38:c3:cf:6d:26:77:32:09:b2:f1:91:12:9f:07:8b:03:0c:c0:
         1e:a7:c0:7e:a0:61:18:a6:1b:66:dc:98:e2:c9:42:de:fe:ab:
         9c:af:57:96:44:4a:5f:d7:c3:f3:87:76:8c:42:59:a7:0f:75:
         ab:16:8e:86:b8:b2:9b:ad:ba:9d:9a:ee:68:ae:fe:ce:81:17:
         92:be:2f:0e
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYpi6et7EWcFuBxVt5huZreCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMWYxNGM4NTA3NDVhN2MzMTJlYTJlYjBiZTAzMDUyZTQ5
NjcyNzUwHhcNMjMwOTA1MDExNjUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OWQzYzNmYzk0NGZmZTBlMzc4YjA5Zjg3Mjg2ZmQ4MDY3NjU0NDY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtK60lQbYYqXpVcnhESHwluG0LEN6
Sb91LTuEDdkyduzd2n197pGQncL6lZQ8bS2Rn+i0wN89jYgrXjOuPOrTFz1VgXUW
3XaZ4li6YbD3YXST6ChWz6UbQZ2boXi9CZjLD93Irhqu9ErAvfJlB2eAfS7tKsej
+IH1655s7uLAbU36ucxgW8s7wYFoGTyg7VLolGpbi9oELuHEsvivMTP+R7wgjMtF
Tr58wAltcBdV+ea2t78GeVaHORdraMc4M51Kl5j312hplg1amFM7FVe0fP+O6oap
BRP8o+CqoL0mgv/KPtvaQP7pOKoJOBBZQcpwRHsfKB1fNsSSJykaOTMe4QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEnTw/yUT/4ON4sJ+HKG/YBnZURlMB8GA1UdIwQY
MBaAFKofFMhQdFp8MS6i6wvgMFLklnJ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQt
ODNmY2QyMjU0ODJhLzEvU2RQRF9KUlBfZzQzaXduNGNvYjlnR2RsUkdVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQtODNmY2QyMjU0ODJh
LzEvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADe6r1nW9g8KAiQCtiH6
2xn9tHMBQpKNyVc1iK+TBdNFgL9hPziX+7nJ5CRrIm3/c7NWLw6HAIR3OUaKtdJb
YceTbVtT/6iYPvCGKnliq8vHN63HxSghzMqrLpbOdBpgNLNhdEJWyeHa+RK+Q75h
GvTjMQrNoaUH0+BJOIPPg4Okz1QwH6F1Db0e0ngLRryhXZ1FqLjRVm0FNH1TgXLI
IfO0PiheM3t6w4NmfjE3pRvKIX777jjDz20mdzIJsvGREp8HiwMMwB6nwH6gYRim
G2bcmOLJQt7+q5yvV5ZESl/Xw/OHdoxCWacPdasWjoa4sputup2a7miu/s6BF5K+
Lw4=
-----END CERTIFICATE-----