Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/Sv_lzSx4YKiyuL0xD7GblClPrbQ.roa
File:                     Sv_lzSx4YKiyuL0xD7GblClPrbQ.roa (raw, json)
Hash identifier:          HCjhJoqKEF9yHAjP8+PwondxVLqeyg7lJlyogqpI9gU=
Subject key identifier:   4A:FF:E5:CD:2C:78:60:A8:B2:B8:BD:31:0F:B1:9B:94:29:4F:AD:B4
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A56E8B01B938DEF2D047C836BE46121C2
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/Sv_lzSx4YKiyuL0xD7GblClPrbQ.roa
Signing time:             Sat 02 Sep 2023 17:20:04 +0000
ROA not before:           Sat 02 Sep 2023 17:20:04 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:56:e8:b0:1b:93:8d:ef:2d:04:7c:83:6b:e4:61:21:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep  2 17:20:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4affe5cd2c7860a8b2b8bd310fb19b94294fadb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:fc:96:bf:d8:9e:6e:90:8b:41:16:fd:47:dd:
                    b0:76:3e:b5:52:a6:ec:5b:d4:1a:b3:8a:97:98:b3:
                    e6:f0:b5:53:64:4c:7a:53:d4:b2:c1:c0:ee:96:55:
                    69:30:9d:46:d0:99:15:64:d6:8b:d1:36:e7:ed:da:
                    84:da:2e:17:92:af:9e:10:aa:4e:c4:73:aa:17:61:
                    02:49:7d:71:b9:7a:7e:5b:f9:c5:70:ab:8a:ab:43:
                    df:d3:01:06:9b:96:6f:af:de:08:4a:ee:44:17:a2:
                    47:8b:2b:f7:97:94:e8:70:d9:03:0e:12:d1:ac:ae:
                    cf:6b:11:3d:0f:41:9d:3f:c8:ca:71:56:4c:b9:c7:
                    08:e3:36:1b:8e:fc:78:ed:7b:bd:cb:8d:db:a0:f1:
                    c7:10:c3:9c:35:ad:85:48:51:c4:72:f0:b3:f9:de:
                    73:3f:01:ee:37:1e:83:ee:56:74:9c:86:e2:79:ae:
                    0a:68:bb:44:79:8f:72:53:22:40:3a:fe:a1:8f:f0:
                    30:5d:8f:ad:20:da:3a:da:c8:8a:32:66:88:c8:08:
                    7c:8e:54:7d:12:af:ab:de:9b:2d:71:ba:79:eb:79:
                    ad:e6:68:5d:a6:cf:d2:b9:e6:87:51:64:64:bb:22:
                    71:71:a2:f8:de:74:e6:ac:16:a6:46:69:9c:70:23:
                    70:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:FF:E5:CD:2C:78:60:A8:B2:B8:BD:31:0F:B1:9B:94:29:4F:AD:B4
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/Sv_lzSx4YKiyuL0xD7GblClPrbQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         46:a8:d4:51:13:ee:db:82:3f:ae:d1:f8:de:f9:98:fc:7e:e7:
         a6:c9:68:db:9c:09:7d:ce:44:bc:65:ff:b4:05:54:c7:c9:39:
         ee:4b:ef:23:6d:f6:74:1f:44:a7:05:eb:41:54:5e:19:02:57:
         7a:f5:f9:3f:06:14:a5:08:bf:e0:b1:6c:8d:03:8c:28:5a:23:
         b5:15:9b:97:63:1f:e5:40:75:ba:df:62:4c:29:17:99:89:9c:
         8b:f7:87:a9:13:7a:c3:51:34:e1:9f:45:d6:7a:e6:19:2c:81:
         fc:a0:9f:61:87:95:cd:59:39:46:85:65:56:33:69:de:41:28:
         9e:59:08:69:ec:f8:8e:c6:8c:75:7d:47:d1:7d:0f:7f:45:ee:
         e4:0c:a3:fb:11:e4:3c:ce:77:70:12:58:7b:93:83:90:9d:36:
         b2:6b:d8:e3:e8:c7:54:9a:89:7b:d7:af:2e:f1:07:7e:38:46:
         0e:5a:1f:d1:25:a9:2d:b5:72:d6:99:69:6e:92:8b:e2:aa:e3:
         ad:e5:30:7b:36:26:e9:c7:25:09:ae:70:cd:0f:21:78:a8:3c:
         a9:47:59:9b:db:b0:c8:b4:1e:72:d9:a4:b8:5e:88:86:db:f0:
         a4:d0:5d:1c:27:c5:c8:69:f3:a0:7b:bf:e7:3e:aa:03:de:d3:
         d1:84:f5:3d
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYpW6LAbk43vLQR8g2vkYSHCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMWYxNGM4NTA3NDVhN2MzMTJlYTJlYjBiZTAzMDUyZTQ5
NjcyNzUwHhcNMjMwOTAyMTcyMDA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YWZmZTVjZDJjNzg2MGE4YjJiOGJkMzEwZmIxOWI5NDI5NGZhZGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofyWv9iebpCLQRb9R92wdj61Uqbs
W9Qas4qXmLPm8LVTZEx6U9SywcDullVpMJ1G0JkVZNaL0Tbn7dqE2i4Xkq+eEKpO
xHOqF2ECSX1xuXp+W/nFcKuKq0Pf0wEGm5Zvr94ISu5EF6JHiyv3l5TocNkDDhLR
rK7PaxE9D0GdP8jKcVZMuccI4zYbjvx47Xu9y43boPHHEMOcNa2FSFHEcvCz+d5z
PwHuNx6D7lZ0nIbiea4KaLtEeY9yUyJAOv6hj/AwXY+tINo62siKMmaIyAh8jlR9
Eq+r3pstcbp563mt5mhdps/SueaHUWRkuyJxcaL43nTmrBamRmmccCNw6wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEr/5c0seGCosri9MQ+xm5QpT620MB8GA1UdIwQY
MBaAFKofFMhQdFp8MS6i6wvgMFLklnJ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQt
ODNmY2QyMjU0ODJhLzEvU3ZfbHpTeDRZS2l5dUwweEQ3R2JsQ2xQcmJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQtODNmY2QyMjU0ODJh
LzEvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEao1FET7tuCP67R+N75
mPx+56bJaNucCX3ORLxl/7QFVMfJOe5L7yNt9nQfRKcF60FUXhkCV3r1+T8GFKUI
v+CxbI0DjChaI7UVm5djH+VAdbrfYkwpF5mJnIv3h6kTesNRNOGfRdZ65hksgfyg
n2GHlc1ZOUaFZVYzad5BKJ5ZCGns+I7GjHV9R9F9D39F7uQMo/sR5DzOd3ASWHuT
g5CdNrJr2OPox1SaiXvXry7xB344Rg5aH9ElqS21ctaZaW6Si+Kq463lMHs2JunH
JQmucM0PIXioPKlHWZvbsMi0HnLZpLheiIbb8KTQXRwnxchp86B7v+c+qgPe09GE
9T0=
-----END CERTIFICATE-----