Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/TeNEHuXHUdB2tyzd6w9_7wOxL2A.roa
File:                     TeNEHuXHUdB2tyzd6w9_7wOxL2A.roa (raw, json)
Hash identifier:          f+m0hvmOcuhUu/DsmXYiLUKskITqiP9v8K035Gci6Lk=
Subject key identifier:   4D:E3:44:1E:E5:C7:51:D0:76:B7:2C:DD:EB:0F:7F:EF:03:B1:2F:60
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A92C2BB266556412ACEE5BB07B2B310E9
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/TeNEHuXHUdB2tyzd6w9_7wOxL2A.roa
Signing time:             Thu 14 Sep 2023 08:15:50 +0000
ROA not before:           Thu 14 Sep 2023 08:15:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:92:c2:bb:26:65:56:41:2a:ce:e5:bb:07:b2:b3:10:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep 14 08:15:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4de3441ee5c751d076b72cddeb0f7fef03b12f60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:d6:d8:c5:1a:7a:08:d9:67:85:ab:c9:c5:76:
                    bb:94:a7:fe:5f:4f:b2:24:1f:37:42:c7:65:a1:c9:
                    9b:1c:09:0d:d7:49:e1:6d:00:42:a9:b2:46:70:82:
                    21:75:96:e6:24:c9:24:6d:02:00:7f:3d:30:a4:65:
                    a3:38:56:1d:b1:04:e3:7f:5b:03:6d:5a:30:9d:8a:
                    bc:fc:f2:61:3a:8a:d8:32:aa:4a:30:26:9b:c1:6e:
                    4c:f9:9e:ac:e9:0c:ad:de:45:04:0e:20:ae:57:66:
                    23:c6:32:5b:be:cf:a7:a1:b8:ce:87:1c:b1:34:75:
                    45:85:1d:32:cb:1f:4e:6e:77:8d:23:86:d5:97:5c:
                    a1:00:44:9e:55:8b:4d:49:79:e9:64:76:c1:5f:9a:
                    c0:1d:1d:b8:dc:73:a7:f6:5c:dd:4d:93:a7:7d:47:
                    0f:77:97:79:1b:bd:57:2d:11:0a:65:a9:c3:b8:8e:
                    09:f0:2b:d6:4b:6d:ab:9f:9f:a7:f0:b0:4e:aa:de:
                    49:a4:0f:12:36:0b:b2:84:ab:1f:a3:37:fb:ef:c0:
                    a1:60:83:db:8d:72:cb:1b:5a:d3:c9:8b:e7:65:f3:
                    c8:65:cd:25:38:7d:0e:37:dd:9f:5a:37:1e:71:90:
                    87:6c:7c:b6:18:f5:77:29:33:3d:c2:c6:39:84:df:
                    53:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:E3:44:1E:E5:C7:51:D0:76:B7:2C:DD:EB:0F:7F:EF:03:B1:2F:60
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/TeNEHuXHUdB2tyzd6w9_7wOxL2A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         72:a0:fa:67:19:53:c6:60:5c:2a:9e:7a:7c:bb:63:97:be:cb:
         5a:1e:52:c4:7d:a7:bb:7c:dd:db:ef:6a:06:43:43:82:28:38:
         4c:16:bb:0a:21:a6:29:42:76:7f:ea:c6:ac:c3:65:6e:03:c0:
         cb:2d:98:c5:91:31:fe:87:10:b9:bf:dc:59:2c:b6:22:5e:86:
         7b:6b:d8:3f:48:c0:b9:93:e7:e5:c7:7a:52:60:6f:64:70:82:
         1e:5f:83:a7:20:12:52:1f:a1:c2:23:07:87:de:af:1b:37:4a:
         da:c4:e8:8b:17:99:a1:4a:aa:42:8e:04:44:a7:70:e8:b2:3a:
         b2:e7:ee:76:79:ec:10:cd:48:c0:e0:4e:1d:05:69:c1:8f:40:
         14:e8:b2:6b:b7:05:79:44:56:41:15:04:17:e6:96:44:48:ea:
         ba:b8:5d:f4:7a:46:a8:01:4d:e8:2e:e1:d9:9d:09:c2:ca:0d:
         42:95:69:ae:4c:5b:ea:15:53:52:a6:a3:24:c4:e5:bc:7b:e7:
         42:89:f1:81:3c:b7:43:af:a7:a9:7e:14:5f:9d:2f:25:cf:80:
         f4:21:09:ed:12:9e:cd:cb:f5:07:4b:b0:af:33:f1:92:40:79:
         f4:27:fc:e1:48:7c:68:3b:12:db:9c:57:75:f2:01:18:e7:8a:
         04:e0:66:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----