Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/d3RxmmdrJadKJdrLvYqqGxN9sqA.roa
File:                     d3RxmmdrJadKJdrLvYqqGxN9sqA.roa (raw, json)
Hash identifier:          lXscO9I8y6dFrwU6MMR7AvMnNv8EHi5LqC9jTsoEuO0=
Subject key identifier:   77:74:71:9A:67:6B:25:A7:4A:25:DA:CB:BD:8A:AA:1B:13:7D:B2:A0
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A9B4DED5A933702FE4DBC96794546C0BF
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/d3RxmmdrJadKJdrLvYqqGxN9sqA.roa
Signing time:             Sat 16 Sep 2023 00:04:50 +0000
ROA not before:           Sat 16 Sep 2023 00:04:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18a:9b4d:9891/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:9b:4d:ed:5a:93:37:02:fe:4d:bc:96:79:45:46:c0:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep 16 00:04:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7774719a676b25a74a25dacbbd8aaa1b137db2a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:e7:bc:bc:e0:fd:35:f4:0b:d6:5e:ac:a2:84:
                    15:a9:7c:61:1c:42:52:ea:92:e4:38:4e:32:41:8d:
                    3f:63:f1:1f:27:e5:c8:60:45:fb:62:f8:02:ab:bf:
                    5e:9b:a4:12:53:a3:1f:52:17:d4:cc:d6:3b:a1:3d:
                    9b:14:5a:22:99:ed:2c:72:ed:50:40:42:37:92:63:
                    4e:1a:33:cc:1e:ba:bb:b3:32:a5:ec:56:ca:5f:78:
                    05:32:1e:13:42:c8:66:f8:ac:5c:da:da:1d:7f:29:
                    04:45:17:bc:d3:6b:55:24:2e:5f:5f:da:5c:a4:51:
                    d9:15:37:9e:e6:b1:e2:8a:30:ca:37:73:18:28:3a:
                    2a:2d:89:f6:95:bc:d1:7f:8e:8b:a3:de:d5:2a:6d:
                    95:2f:32:e1:a1:38:ed:47:e5:8c:bc:04:b9:29:d8:
                    af:08:d8:e6:1f:00:f0:12:06:45:40:9c:81:c8:4a:
                    bc:d0:aa:34:c6:e4:36:52:27:46:d8:d6:f6:7d:04:
                    73:6b:92:68:9a:43:e0:7d:83:9a:f0:3e:b6:ea:6d:
                    5e:78:1c:d8:2d:cd:53:b1:2c:9a:af:27:47:86:ca:
                    46:54:9b:c8:10:27:fd:b9:cc:05:c0:8a:23:77:63:
                    f0:f9:27:97:79:65:0b:15:cc:5d:b0:78:04:47:93:
                    7a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:74:71:9A:67:6B:25:A7:4A:25:DA:CB:BD:8A:AA:1B:13:7D:B2:A0
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/d3RxmmdrJadKJdrLvYqqGxN9sqA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         1d:81:11:57:2a:7f:b3:19:f1:01:e1:86:9d:0d:99:b5:e2:b6:
         a5:76:87:3a:93:7f:59:90:9f:d9:1f:fa:3a:d8:c7:54:7f:4a:
         45:93:01:33:4d:b3:89:37:7e:e8:f4:0b:59:3b:e9:4c:2a:32:
         08:7d:7a:d6:21:f7:7a:d9:d8:56:58:a3:1c:b4:99:38:04:e6:
         d2:b9:47:9f:f4:54:3f:5d:eb:53:11:b6:69:37:fb:59:2c:e4:
         ad:77:24:7f:9b:52:b9:fc:ae:15:44:50:fb:40:fd:3d:7c:a2:
         8a:0b:3b:8b:58:63:52:90:49:03:11:23:e3:f1:76:5e:4f:f0:
         ed:d5:4d:b0:a6:32:3d:2d:c1:50:c3:b7:ec:c9:c0:02:d1:cf:
         b1:e7:db:a3:78:84:73:e7:20:3d:d2:19:fc:03:0c:32:5b:7b:
         4e:8a:0f:68:61:3b:7f:93:ab:1d:88:5c:92:99:6f:ee:af:c0:
         7e:61:3e:4f:ce:46:1e:76:e1:1b:36:32:fc:d0:d7:88:ef:e1:
         cf:0a:8e:e6:f2:51:e6:c7:58:97:38:91:d2:8b:e8:a9:b8:a7:
         a9:5a:f4:9e:9a:6e:e6:7f:7f:e4:76:ea:93:cb:bf:d1:1a:bb:
         3f:e9:56:01:e9:e7:43:47:89:87:88:bd:d8:d2:6d:5e:c3:08:
         b9:fe:bc:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----