Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/Zl0ZY3Oq9bfO84GuU96l7O29Vn8.roa
File:                     Zl0ZY3Oq9bfO84GuU96l7O29Vn8.roa (raw, json)
Hash identifier:          lCzLHsPovtgEvXPk66wGpQhIKvm/rNLTZHFC5SmkAXw=
Subject key identifier:   66:5D:19:63:73:AA:F5:B7:CE:F3:81:AE:53:DE:A5:EC:ED:BD:56:7F
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A61D4B5B519E167ED4B72AD16CBC5A224
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/Zl0ZY3Oq9bfO84GuU96l7O29Vn8.roa
Signing time:             Mon 04 Sep 2023 20:14:04 +0000
ROA not before:           Mon 04 Sep 2023 20:14:04 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:61:d4:b5:b5:19:e1:67:ed:4b:72:ad:16:cb:c5:a2:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep  4 20:14:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=665d196373aaf5b7cef381ae53dea5ecedbd567f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:40:e7:1c:c8:5c:78:ae:00:74:06:fa:d9:92:
                    dc:08:11:2e:7f:43:f7:67:a9:92:0f:ec:51:d7:0c:
                    81:76:4b:73:0d:0d:90:93:a7:d5:67:b5:11:29:21:
                    d5:7c:e2:36:68:1a:dd:77:59:4b:dc:94:1a:93:09:
                    da:45:bb:30:5c:54:f6:f9:26:ae:85:93:03:63:86:
                    21:49:aa:dd:bd:b1:3a:52:8f:f4:df:a6:c8:27:16:
                    44:5c:52:3a:ca:38:29:df:64:06:0c:b4:87:c0:70:
                    ed:8f:87:d7:a8:2a:37:cc:77:b6:ca:38:62:ab:15:
                    ab:0e:eb:bc:e9:c5:e0:2b:99:88:99:21:48:36:9c:
                    ab:bc:ff:27:9d:62:d8:77:4e:78:e9:dc:87:a8:2f:
                    76:68:20:ac:42:a1:5f:40:19:ce:5e:9b:16:59:86:
                    b1:79:8d:e9:aa:50:e2:ed:40:ad:0a:36:72:8d:fa:
                    f5:57:f3:8a:e9:82:34:1b:58:3b:14:9a:6a:21:e7:
                    27:f9:28:e6:77:45:bf:72:3d:dd:a0:3a:27:c8:b4:
                    da:c2:46:15:54:98:7a:3e:61:43:d0:51:b7:7c:b4:
                    f3:5b:18:2e:d3:46:7d:16:4a:a2:64:6e:05:2b:b5:
                    98:ac:28:2d:5f:5a:4d:4e:c1:08:0a:d4:12:60:24:
                    f6:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:5D:19:63:73:AA:F5:B7:CE:F3:81:AE:53:DE:A5:EC:ED:BD:56:7F
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/Zl0ZY3Oq9bfO84GuU96l7O29Vn8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         42:fa:e6:f7:0e:07:9f:e6:06:1a:ef:4d:32:34:2f:18:37:e9:
         5b:71:86:bd:02:34:63:cb:e3:d3:64:90:02:34:fb:96:fa:ab:
         d8:86:06:19:a9:95:5f:4e:5f:42:a1:69:d9:40:cb:0d:77:d0:
         82:6a:86:f6:fc:4a:70:39:50:64:2f:9b:68:7f:82:d1:7e:38:
         b6:46:03:83:8f:2a:45:f3:f0:4c:dc:d5:f5:dd:c9:32:2f:19:
         38:a0:e7:80:07:d5:8d:30:b2:9c:21:5b:f1:ea:09:ea:5e:15:
         d2:48:7d:a5:89:89:a3:74:10:a8:f6:d0:d8:ec:1a:ed:74:1a:
         be:33:9a:de:8a:b8:eb:0f:67:5c:29:a9:8b:11:b0:d5:f2:45:
         b1:b7:56:6d:e3:fc:76:5d:5f:3c:83:14:c1:02:60:fb:70:16:
         c1:b2:9c:b5:b1:f2:1a:e6:5f:1e:32:4b:7a:ac:3c:85:74:1d:
         58:aa:42:a9:73:f2:99:94:1c:69:ce:ab:8e:2c:fb:49:c9:b6:
         ea:98:66:96:a1:0c:5d:67:5d:73:40:9f:06:1a:5e:b9:7b:4f:
         58:83:f2:44:dd:41:87:4f:6e:d1:81:0d:06:b3:40:8a:9c:51:
         4d:89:29:cb:7a:ad:5c:a4:0a:19:08:4b:8e:f9:b9:2a:32:f0:
         c5:7e:c3:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----