Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/_c8iy6KHi2FPDMloGIVXeCBdEhw.roa
File:                     _c8iy6KHi2FPDMloGIVXeCBdEhw.roa (raw, json)
Hash identifier:          /mN3/prNYvgc5aSfs3LspD8Gpp9MYpKTukXWoshd8EI=
Subject key identifier:   FD:CF:22:CB:A2:87:8B:61:4F:0C:C9:68:18:85:57:78:20:5D:12:1C
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018AA3AC430FA69C47CDA013BA0D19D053A8
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/_c8iy6KHi2FPDMloGIVXeCBdEhw.roa
Signing time:             Sun 17 Sep 2023 15:04:50 +0000
ROA not before:           Sun 17 Sep 2023 15:04:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:18a:a3ab:ab87/128 maxlen: 128
                          2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:a3:ac:43:0f:a6:9c:47:cd:a0:13:ba:0d:19:d0:53:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep 17 15:04:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fdcf22cba2878b614f0cc96818855778205d121c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:5e:64:29:91:77:a9:7e:e8:58:34:a0:7a:e9:
                    3d:e7:d9:89:50:d3:f3:b5:1c:34:c5:0a:ca:d0:73:
                    5e:44:45:f6:9e:1c:34:cb:27:34:bb:bb:65:5a:b9:
                    6b:79:4c:b5:72:10:a2:57:54:a3:d1:a1:a7:fc:0f:
                    67:28:5c:12:9d:47:65:44:45:4c:47:2f:61:e7:54:
                    b5:3b:08:77:4e:22:78:47:0b:ad:0b:7a:bb:7c:bc:
                    13:c6:bb:45:e0:69:3b:7f:61:90:e4:cd:be:4a:21:
                    ab:2f:76:bf:81:a3:0a:d1:75:97:16:bf:1b:8b:4b:
                    8a:68:92:de:c6:83:cd:cf:ed:59:6e:69:cb:ea:3b:
                    03:b8:ab:8d:fc:da:35:ef:e1:ed:58:75:7d:b6:0e:
                    c0:f6:17:6b:b1:8a:c4:34:c1:5c:a3:16:bd:5c:38:
                    16:af:a3:8d:94:cd:e0:7e:7a:7a:a2:5b:56:f7:52:
                    b5:c0:36:6c:b1:67:25:a3:15:d9:ea:ff:f0:ae:a6:
                    cd:b6:e7:d7:22:e4:ec:41:45:69:ad:c5:94:b5:11:
                    37:9a:e4:72:51:4f:56:ee:a7:1d:92:53:04:e4:e3:
                    0f:26:39:ec:db:a1:5c:4d:c5:c5:60:b6:49:2b:58:
                    27:f1:51:4e:0b:a0:a2:6f:4d:f8:c3:cf:0b:be:6c:
                    5e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:CF:22:CB:A2:87:8B:61:4F:0C:C9:68:18:85:57:78:20:5D:12:1C
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/_c8iy6KHi2FPDMloGIVXeCBdEhw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         78:2f:ef:f8:d1:4b:39:e4:ba:d4:af:03:71:fe:03:e1:4d:b5:
         bd:a7:38:bf:2b:37:e5:e0:4a:8a:23:8e:81:93:fa:bd:a7:90:
         13:76:0d:02:7a:a1:92:30:a5:16:61:08:43:27:ad:ad:ed:ad:
         48:41:be:87:60:a3:e3:5f:95:d5:a9:c3:c6:d3:91:c1:7f:a6:
         1f:f7:76:cc:4e:3c:5d:1e:76:98:1c:79:20:35:4c:51:b1:c3:
         ed:2d:20:ce:38:38:10:4a:98:ba:46:fc:75:ce:bc:26:c2:60:
         50:3f:6b:73:64:40:28:46:c2:62:65:9c:dc:0f:0b:e9:c5:fc:
         94:d2:88:e1:2b:9a:82:58:4e:53:f3:f5:cd:bb:0d:2f:68:ba:
         e3:dd:3b:2d:b0:dc:1b:c7:9f:45:80:50:bd:02:28:d8:99:72:
         55:6e:d1:cd:14:bc:8d:ac:1f:8a:46:d2:ef:02:e6:28:5b:26:
         af:53:79:5b:61:5b:eb:b3:4a:41:a9:b6:b5:71:d2:60:c0:4d:
         7e:4d:bd:57:57:3f:1f:8a:9e:79:9d:36:98:74:a7:aa:76:e0:
         da:8b:85:b3:79:4f:ac:4f:c3:09:c1:ce:52:ab:08:2b:a2:62:
         db:22:fb:97:5a:62:3c:9e:a7:e5:46:4d:fa:71:7b:41:9f:b7:
         9e:30:47:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----