Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/aYUbWYX6o15jUwCsfOE-reDMNS4.roa
File:                     aYUbWYX6o15jUwCsfOE-reDMNS4.roa (raw, json)
Hash identifier:          LObbTvXZyRJ6UY4NoJnk9PPjgSFbaSWY+iA3TRkrC2Q=
Subject key identifier:   69:85:1B:59:85:FA:A3:5E:63:53:00:AC:7C:E1:3E:AD:E0:CC:35:2E
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A97034B031C6CA18F7C05161BE22655F5
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/aYUbWYX6o15jUwCsfOE-reDMNS4.roa
Signing time:             Fri 15 Sep 2023 04:04:50 +0000
ROA not before:           Fri 15 Sep 2023 04:04:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18a:9702:f34a/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:97:03:4b:03:1c:6c:a1:8f:7c:05:16:1b:e2:26:55:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep 15 04:04:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=69851b5985faa35e635300ac7ce13eade0cc352e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9c:c5:dd:6c:6f:a8:2a:e4:c3:4e:f8:de:ae:
                    84:7b:08:4a:8e:61:0b:8e:e3:57:8a:ac:d2:92:ef:
                    30:5a:08:c6:95:08:c3:d4:f6:ad:d6:52:6f:b4:a6:
                    f1:4c:60:e6:18:af:a4:aa:6b:a5:64:40:49:4d:90:
                    60:77:e4:e8:cb:b5:3d:f7:69:61:93:1f:94:96:15:
                    c8:6f:74:94:f7:27:54:ef:72:cd:65:04:05:1e:45:
                    ab:b3:ed:1f:75:25:e0:77:4c:20:6b:d3:fc:48:93:
                    fa:4c:33:09:25:b4:0d:87:a9:09:53:28:b3:2d:c8:
                    04:f6:45:03:a0:4b:9e:23:80:d4:8e:21:9d:d7:72:
                    e1:ef:31:75:8b:34:f9:98:6e:ad:33:ce:02:73:e7:
                    82:d0:8f:52:dd:4d:9c:e7:19:d9:cd:62:79:c9:52:
                    0a:b1:cc:c8:cf:fa:21:9c:a3:47:0f:b0:7e:53:f7:
                    4e:f8:b1:3b:22:34:1c:54:f7:88:d6:88:20:16:3b:
                    53:10:7a:76:76:97:5e:af:76:d1:af:5f:b0:ba:34:
                    08:4e:52:da:ac:9e:54:91:7a:5d:25:4b:45:f9:ba:
                    95:72:c2:e2:e3:59:5c:ab:ef:8a:25:3c:dd:03:fa:
                    55:11:d9:59:0b:a2:bd:50:0c:d2:bb:11:38:32:f0:
                    86:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:85:1B:59:85:FA:A3:5E:63:53:00:AC:7C:E1:3E:AD:E0:CC:35:2E
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/aYUbWYX6o15jUwCsfOE-reDMNS4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         70:06:88:f1:76:ac:fc:fb:68:29:d2:2b:e7:b6:29:94:6d:74:
         2f:bd:a8:9d:2e:9c:97:e5:c6:42:68:84:14:bb:15:4d:8a:ba:
         ad:42:7d:6d:8a:5e:bc:62:d0:09:5f:2e:81:84:c7:61:23:b2:
         d4:2d:f7:fe:42:b8:c8:3f:60:63:8c:ab:a2:19:0f:d6:58:12:
         8d:e8:67:0c:46:f4:27:8b:fe:cf:7d:d8:c9:29:4f:aa:11:35:
         fe:44:a5:0e:f3:1b:28:67:35:14:f6:9a:9d:47:a4:b7:1a:39:
         95:e8:94:79:24:cd:4b:6b:80:dd:d7:1d:88:42:9b:45:a1:e6:
         cb:82:57:e4:6a:8b:b6:4d:42:02:8c:f0:35:2b:38:66:da:16:
         d8:b9:84:cb:b6:68:17:42:ef:93:c6:7c:e0:39:d7:72:3e:32:
         a1:3c:b9:29:00:22:53:c8:b1:d3:97:21:16:65:57:9b:2e:92:
         21:00:84:88:50:71:99:c4:be:ac:8e:a8:2d:a6:81:58:07:78:
         c6:1f:bb:71:2e:64:37:b8:9d:31:d8:b6:08:cf:93:65:0c:4e:
         98:5e:a4:83:25:26:5d:a3:e6:37:1e:75:3e:30:79:f6:00:08:
         73:a5:6c:f9:8e:b5:6a:b0:b3:83:66:e4:30:97:07:32:46:52:
         f9:3d:e1:51
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYqXA0sDHGyhj3wFFhviJlX1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMWYxNGM4NTA3NDVhN2MzMTJlYTJlYjBiZTAzMDUyZTQ5
NjcyNzUwHhcNMjMwOTE1MDQwNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OTg1MWI1OTg1ZmFhMzVlNjM1MzAwYWM3Y2UxM2VhZGUwY2MzNTJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5zF3WxvqCrkw0743q6EewhKjmEL
juNXiqzSku8wWgjGlQjD1Pat1lJvtKbxTGDmGK+kqmulZEBJTZBgd+Toy7U992lh
kx+UlhXIb3SU9ydU73LNZQQFHkWrs+0fdSXgd0wga9P8SJP6TDMJJbQNh6kJUyiz
LcgE9kUDoEueI4DUjiGd13Lh7zF1izT5mG6tM84Cc+eC0I9S3U2c5xnZzWJ5yVIK
sczIz/ohnKNHD7B+U/dO+LE7IjQcVPeI1oggFjtTEHp2dpder3bRr1+wujQITlLa
rJ5UkXpdJUtF+bqVcsLi41lcq++KJTzdA/pVEdlZC6K9UAzSuxE4MvCGDQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFGmFG1mF+qNeY1MArHzhPq3gzDUuMB8GA1UdIwQY
MBaAFKofFMhQdFp8MS6i6wvgMFLklnJ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQt
ODNmY2QyMjU0ODJhLzEvYVlVYldZWDZvMTVqVXdDc2ZPRS1yZURNTlM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQtODNmY2QyMjU0ODJh
LzEvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHAGiPF2rPz7aCnSK+e2
KZRtdC+9qJ0unJflxkJohBS7FU2Kuq1CfW2KXrxi0AlfLoGEx2EjstQt9/5CuMg/
YGOMq6IZD9ZYEo3oZwxG9CeL/s992MkpT6oRNf5EpQ7zGyhnNRT2mp1HpLcaOZXo
lHkkzUtrgN3XHYhCm0Wh5suCV+Rqi7ZNQgKM8DUrOGbaFti5hMu2aBdC75PGfOA5
13I+MqE8uSkAIlPIsdOXIRZlV5sukiEAhIhQcZnEvqyOqC2mgVgHeMYfu3EuZDe4
nTHYtgjPk2UMTphepIMlJl2j5jcedT4wefYACHOlbPmOtWqws4Nm5DCXBzJGUvk9
4VE=
-----END CERTIFICATE-----