Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/XQyapx2xqrn6t8y-p-xfVvpdlhI.roa
File:                     XQyapx2xqrn6t8y-p-xfVvpdlhI.roa (raw, json)
Hash identifier:          bckh+IH1jHj1DWmmiN0gnv6nmDyg/vwd98aQ59Yq95o=
Subject key identifier:   5D:0C:9A:A7:1D:B1:AA:B9:FA:B7:CC:BE:A7:EC:5F:56:FA:5D:96:12
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A80F0B24EE9E3427121D1003FF0309D12
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/XQyapx2xqrn6t8y-p-xfVvpdlhI.roa
Signing time:             Sun 10 Sep 2023 21:12:52 +0000
ROA not before:           Sun 10 Sep 2023 21:12:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:80:f0:b2:4e:e9:e3:42:71:21:d1:00:3f:f0:30:9d:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep 10 21:12:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5d0c9aa71db1aab9fab7ccbea7ec5f56fa5d9612
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:bd:28:ad:d4:85:86:d8:55:99:51:be:c6:9e:
                    b7:93:35:8d:3b:e3:61:2e:a3:a6:91:42:c3:11:b7:
                    c7:2c:4c:da:e6:41:a4:32:f4:96:56:51:93:4d:8e:
                    6a:1b:d0:46:11:d1:80:d6:19:4f:80:43:fe:ca:38:
                    a5:9e:73:5d:1e:fc:77:9f:bd:c2:fe:85:e6:e7:e3:
                    75:91:da:44:64:a7:95:9d:bb:cc:34:a6:b8:5d:74:
                    49:49:93:3f:55:54:92:67:1c:01:17:8f:8f:11:bf:
                    42:ca:a6:ae:9c:a3:a4:1e:e6:64:e5:b8:cc:aa:d1:
                    4b:29:68:3d:fb:30:81:c9:32:e6:23:e6:58:27:45:
                    49:79:33:1d:27:01:4e:56:45:24:e5:a2:99:c3:3e:
                    fd:b5:6b:83:19:8c:6b:6a:6f:7c:e5:40:f4:94:06:
                    51:a4:8e:78:9c:66:ac:b8:58:cc:1b:f2:10:59:52:
                    f3:c4:7e:f1:79:b9:f1:2d:f9:ad:b3:88:c5:16:c0:
                    13:6b:60:2c:02:c1:a1:84:da:ac:f5:e7:0e:75:10:
                    f1:25:56:55:10:37:c6:25:e9:b9:8c:66:a4:de:be:
                    a3:8f:70:d9:8b:c0:90:02:84:c1:d9:04:98:f8:81:
                    23:4d:7e:88:6f:e9:c4:12:e6:8a:f1:0c:12:a9:c3:
                    f8:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:0C:9A:A7:1D:B1:AA:B9:FA:B7:CC:BE:A7:EC:5F:56:FA:5D:96:12
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/XQyapx2xqrn6t8y-p-xfVvpdlhI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         7c:1a:20:ec:9d:5a:2e:da:df:97:4e:ec:e1:4c:6e:91:27:b0:
         d1:a0:f5:5b:93:10:b3:55:f0:b6:87:a7:03:34:4e:e4:2e:0b:
         47:a9:66:04:8b:da:29:f2:d4:96:e7:06:b9:67:1a:80:b0:b1:
         47:5e:fd:c9:f9:11:65:df:3e:21:9c:96:e4:2b:ee:f6:d9:bd:
         51:d0:61:5c:7a:57:0f:89:8d:40:9c:f9:b3:5d:96:e6:61:d6:
         ed:56:ee:5f:ca:98:b1:db:25:00:66:d8:19:28:38:8e:7e:7a:
         b9:fc:2b:57:13:76:d8:1a:f3:99:56:61:93:14:70:6f:fd:96:
         b8:44:17:34:56:45:df:50:26:09:b2:6c:b7:88:50:7a:75:c9:
         48:7e:25:16:1b:26:ad:3d:4a:ce:17:e3:a3:a5:cd:45:38:a6:
         d5:93:cf:b1:d0:e7:b8:33:85:f2:b5:53:03:1a:34:50:bb:35:
         0d:92:28:85:78:77:03:5b:c0:a0:32:e4:8b:f4:7a:88:20:21:
         48:83:11:ca:63:ca:f1:2d:7e:45:ae:7c:95:9e:d1:db:b6:b1:
         5b:89:81:b8:07:de:bc:37:17:b0:b3:c6:b0:d8:fc:35:98:73:
         b4:e9:80:04:3e:6e:e7:28:a0:ab:68:28:23:bf:37:eb:c0:2d:
         be:d9:99:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----