Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/YZ16Ns57MGz6Ytrq_T-Tz7Oi6Lk.roa
File:                     YZ16Ns57MGz6Ytrq_T-Tz7Oi6Lk.roa (raw, json)
Hash identifier:          AnXizJPkyuA0VH+rcFJKqjWZwN56JyAFlODXam1D7FA=
Subject key identifier:   61:9D:7A:36:CE:7B:30:6C:FA:62:DA:EA:FD:3F:93:CF:B3:A2:E8:B9
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A491F54F3F6925370AF45793EFCB94E10
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/YZ16Ns57MGz6Ytrq_T-Tz7Oi6Lk.roa
Signing time:             Thu 31 Aug 2023 01:05:04 +0000
ROA not before:           Thu 31 Aug 2023 01:05:04 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:18a:491e:b09d/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:49:1f:54:f3:f6:92:53:70:af:45:79:3e:fc:b9:4e:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Aug 31 01:05:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=619d7a36ce7b306cfa62daeafd3f93cfb3a2e8b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ec:85:76:0f:23:7e:27:61:26:2a:e8:e8:5e:
                    38:49:2c:2b:da:5c:c2:a0:1b:77:26:33:c6:65:91:
                    0b:87:07:0b:bb:2f:2f:4b:29:2f:f7:6f:72:4e:4f:
                    f9:6a:03:f7:4c:31:e8:3b:43:fa:32:02:db:b9:c8:
                    03:29:c8:af:93:e9:cd:f5:51:0c:38:d8:a8:01:cc:
                    3b:8b:ab:2b:45:ce:bf:ac:79:be:a6:f3:26:e3:33:
                    33:96:81:0e:1b:d4:60:09:91:55:e4:27:a4:8a:9f:
                    b0:dc:de:4a:4c:87:f4:b4:c2:41:9f:01:7a:26:bd:
                    65:d7:9b:e6:27:eb:b4:57:a9:b1:e8:34:bf:07:c2:
                    90:01:76:28:18:e8:c0:4a:28:7b:42:e3:e2:be:23:
                    b1:57:bc:dc:76:83:91:4d:10:ff:5c:10:96:02:15:
                    10:46:6b:cb:69:78:8c:d3:24:b1:ff:53:56:82:25:
                    e9:77:5c:1e:c4:bc:59:da:58:4f:3d:af:cd:b0:d0:
                    0a:0e:a3:02:4e:31:23:ad:c3:10:01:e5:2a:1c:e6:
                    3b:2f:9e:1c:9d:8d:ca:0f:5e:1c:a4:b6:55:37:a6:
                    bd:e4:24:5e:e8:a7:f5:92:d7:26:bd:e2:d0:2b:4d:
                    58:27:64:07:d4:e9:85:eb:97:1c:28:9d:c8:38:74:
                    6b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:9D:7A:36:CE:7B:30:6C:FA:62:DA:EA:FD:3F:93:CF:B3:A2:E8:B9
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/YZ16Ns57MGz6Ytrq_T-Tz7Oi6Lk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         08:ae:49:6b:5c:36:f8:c8:8e:e4:26:8d:ad:a5:e1:ed:de:4b:
         10:6f:b3:09:40:b0:d9:89:7a:95:f9:1d:80:be:e7:10:d5:f5:
         0d:34:e0:a8:b5:21:7b:80:b1:09:8e:c3:56:c8:49:ed:1c:70:
         d8:70:bc:30:06:9e:00:38:89:29:e9:ab:36:6b:cd:2a:59:3e:
         d2:17:11:81:29:8f:bb:d5:8c:ad:a5:61:e9:68:69:30:8d:7a:
         43:ca:02:1b:2a:63:18:d0:ac:49:5c:47:b5:df:fe:87:ed:8f:
         94:ab:97:84:76:9e:f9:15:59:b4:ee:1a:00:91:95:91:d5:a3:
         49:8a:0c:4b:2d:87:f4:f8:a0:f1:ae:97:2f:38:3a:6e:8b:cb:
         35:35:27:a7:80:72:24:be:44:c3:2f:db:bb:b3:8d:8c:ff:3a:
         6a:b1:4c:04:51:a3:02:6c:9f:09:bf:7c:f4:2c:4c:e3:91:d2:
         f4:d7:ea:aa:a1:3b:df:0f:5a:86:a5:ae:d1:45:62:23:0d:36:
         11:70:26:ca:60:d5:2d:04:7f:88:4c:cf:94:73:13:ec:e9:04:
         15:f8:cc:a8:e0:40:7a:1f:aa:bd:f8:01:9d:6f:66:d6:9f:21:
         b0:10:2e:7b:15:75:f7:68:cb:14:e9:5b:3c:7e:de:23:fb:6c:
         47:13:63:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----