Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/dz20UNEnSAr0x0zjNI2U7uSfFs4.roa
File:                     dz20UNEnSAr0x0zjNI2U7uSfFs4.roa (raw, json)
Hash identifier:          mJkLCA9vBumnXu4ayh9L+HvPNKxKpywoi+vs8Fyiz+g=
Subject key identifier:   77:3D:B4:50:D1:27:48:0A:F4:C7:4C:E3:34:8D:94:EE:E4:9F:16:CE
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A97DF05FCD2095B4F89964B724270C3CE
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/dz20UNEnSAr0x0zjNI2U7uSfFs4.roa
Signing time:             Fri 15 Sep 2023 08:04:50 +0000
ROA not before:           Fri 15 Sep 2023 08:04:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18a:97de:be76/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:97:df:05:fc:d2:09:5b:4f:89:96:4b:72:42:70:c3:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep 15 08:04:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=773db450d127480af4c74ce3348d94eee49f16ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:62:4e:f7:2e:43:4c:92:fb:4f:cb:30:da:ea:
                    4d:dd:f6:1a:21:38:0a:2c:8e:91:47:1b:bb:4c:92:
                    01:39:cc:96:08:ea:29:98:bd:0d:f6:02:a3:83:38:
                    32:e1:3a:3c:ca:1b:b8:2e:97:c4:54:37:30:33:58:
                    6f:05:a3:d6:bf:5e:89:1e:a5:bd:11:d1:c4:d7:6d:
                    e4:5d:8c:fc:01:11:e8:84:cf:95:c1:c0:93:3a:a0:
                    bf:56:56:cd:dd:a1:b9:84:2b:d9:e9:31:35:db:99:
                    f4:9b:76:31:f1:0d:44:38:8c:65:1d:6e:79:64:0c:
                    c8:30:2c:08:f1:dc:fb:10:45:d5:dc:97:17:ac:97:
                    f3:40:d4:a0:69:e1:04:93:28:37:01:a8:3b:fd:0e:
                    94:ca:f0:61:bf:d2:73:0c:17:c4:88:bd:b3:bc:b3:
                    c0:27:84:80:ca:a8:ad:23:af:74:b2:49:db:e2:e8:
                    03:3b:22:16:b3:b5:65:85:76:86:2d:c8:de:ec:fd:
                    fd:96:9c:98:ce:42:04:02:3f:d0:21:28:67:c8:12:
                    22:be:56:05:ab:0c:d0:4b:02:a2:bf:60:c0:4d:eb:
                    55:6f:3b:67:bd:fd:bf:09:eb:2b:66:95:95:c5:92:
                    58:97:c3:e1:f3:93:54:06:fb:71:ff:a7:1a:77:98:
                    88:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:3D:B4:50:D1:27:48:0A:F4:C7:4C:E3:34:8D:94:EE:E4:9F:16:CE
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/dz20UNEnSAr0x0zjNI2U7uSfFs4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         03:bb:a7:71:62:f0:ae:2f:48:72:83:bb:52:42:76:13:46:90:
         f8:d1:a8:ba:6f:3f:26:0f:a3:9f:23:cb:4e:fd:6b:96:10:42:
         7c:1f:b9:c9:89:f2:4a:dd:a2:92:e1:bf:d5:ee:b9:77:d6:2e:
         93:b0:ff:3e:55:7d:95:22:60:99:8d:47:ee:2b:b6:c9:35:ed:
         4a:9f:d9:c3:2c:99:9d:e7:07:0c:e3:ae:ff:10:59:0a:48:4f:
         fb:bd:47:ff:fe:8f:96:ad:dc:a9:49:9a:3f:2e:f1:35:e1:45:
         d8:23:95:44:bc:cf:7a:bf:a1:54:38:f9:eb:f3:85:bf:53:a5:
         a4:45:e2:66:ad:b0:ee:bb:de:76:d6:11:7e:62:6c:17:f2:b0:
         49:cb:62:d4:55:05:e9:f9:a1:38:cc:e0:a8:39:3d:38:b0:bf:
         df:17:bd:74:62:2a:6c:bd:b5:92:ef:10:28:29:2a:36:e4:d3:
         cb:b9:22:5e:56:dc:92:39:e8:b4:bf:06:78:01:22:40:12:eb:
         32:51:f8:e1:06:4f:be:04:be:06:1b:c6:01:5b:2d:bd:a5:57:
         08:8d:a2:03:28:2f:fc:58:ab:7e:8c:00:b3:3e:0d:52:c2:2a:
         9f:51:36:2c:5e:88:a0:b3:02:ce:46:98:c7:41:ad:94:78:ad:
         fe:1a:8b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----