Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/_xx6ZS2P6qwqmm7UnGxBpg_l8sY.roa
File:                     _xx6ZS2P6qwqmm7UnGxBpg_l8sY.roa (raw, json)
Hash identifier:          pVjxjrcVmXWH/NNzynV7FZUeAFRDz0CyEnd5c7ddAoM=
Subject key identifier:   FF:1C:7A:65:2D:8F:EA:AC:2A:9A:6E:D4:9C:6C:41:A6:0F:E5:F2:C6
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A8B753984A1FC093821DCFE32F174E1B2
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/_xx6ZS2P6qwqmm7UnGxBpg_l8sY.roa
Signing time:             Tue 12 Sep 2023 22:13:50 +0000
ROA not before:           Tue 12 Sep 2023 22:13:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:8b:75:39:84:a1:fc:09:38:21:dc:fe:32:f1:74:e1:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep 12 22:13:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ff1c7a652d8feaac2a9a6ed49c6c41a60fe5f2c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:25:48:f3:f0:f2:75:ba:79:e5:81:a5:0a:64:
                    70:9e:98:55:69:c2:92:f6:5e:2d:9f:0e:0b:12:5a:
                    6a:f7:a3:58:90:c3:9d:15:04:4e:67:31:df:28:57:
                    48:b0:61:85:b5:25:6d:9b:77:c0:63:10:6c:bd:70:
                    e2:96:a2:17:0f:fc:60:30:df:a8:7c:ed:d1:a8:36:
                    13:90:ad:8e:07:4c:fd:99:46:b8:11:db:44:3f:c6:
                    99:10:56:0e:2b:3d:77:36:95:e0:9b:95:bb:ad:1e:
                    1f:cb:74:c8:99:10:e2:6c:62:fa:44:40:69:4b:8c:
                    3b:72:84:ae:b6:b7:50:ac:7a:0a:85:a1:1f:cb:96:
                    bd:d7:db:74:76:63:f0:af:97:05:3d:f4:12:24:3e:
                    ef:9f:45:1b:20:cb:e6:41:3c:a1:21:a2:4d:27:df:
                    8d:eb:0f:cc:85:c0:7c:33:1d:69:ff:97:0e:bf:d5:
                    aa:f5:40:63:2e:03:27:5d:2e:72:72:e9:f6:61:24:
                    03:84:11:63:7e:af:56:b6:b9:04:78:e4:99:8c:e9:
                    f4:73:68:42:1d:68:03:1f:79:df:3f:f1:52:d7:48:
                    de:20:85:3f:22:b9:ca:79:6b:62:71:46:40:82:0b:
                    46:d4:5b:b2:48:b8:d1:dc:a8:4a:f8:c5:a8:1c:a9:
                    6f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:1C:7A:65:2D:8F:EA:AC:2A:9A:6E:D4:9C:6C:41:A6:0F:E5:F2:C6
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/_xx6ZS2P6qwqmm7UnGxBpg_l8sY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         07:af:85:4c:4e:39:3c:e2:a8:1e:b5:26:2a:67:77:91:82:ac:
         87:80:42:4a:09:ad:d4:dc:22:5e:b0:e9:b4:77:48:5a:f4:ac:
         d7:04:2c:d7:81:da:e8:9b:99:e6:3b:01:8c:44:88:70:45:48:
         d6:f5:bc:5b:ec:1f:83:7c:16:39:c9:2d:77:e5:28:22:15:d6:
         3e:4f:4c:2f:4d:22:f0:05:8f:8f:aa:93:18:56:91:40:e5:5c:
         f4:cd:45:a0:f3:64:1b:5b:55:9d:cf:a2:24:86:d3:45:54:db:
         9a:b2:d0:20:02:93:1e:9e:7c:c8:88:d0:e4:b0:b3:31:e4:27:
         72:d4:53:bd:b4:8c:15:f4:cf:88:b3:6f:25:01:fb:90:16:69:
         63:d6:55:3a:7d:e2:be:f0:2e:d0:34:cb:00:87:10:d0:5a:1f:
         88:dc:f8:e8:6c:49:91:c8:3f:0b:88:9d:d1:ae:b7:96:0e:73:
         05:3d:f4:3c:af:b4:99:cd:34:8d:90:75:54:9f:4d:51:45:e8:
         47:7f:f1:fb:4e:fb:a6:71:c3:d7:32:33:88:2b:92:fe:5d:08:
         b6:08:f6:f8:6e:59:55:91:2e:ea:22:6e:46:01:2b:85:f1:a7:
         91:76:0f:64:9a:03:35:7d:df:43:62:cc:bf:68:09:1e:a7:ad:
         4a:f8:5e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----