Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/e3W7wb85tFTim558fhFP5Zh_Ztk.roa
File:                     e3W7wb85tFTim558fhFP5Zh_Ztk.roa (raw, json)
Hash identifier:          Aa/Gh/R+/uQ+dao+8aJjNfdKtdILqzh8cqyyHqdQ4Sw=
Subject key identifier:   7B:75:BB:C1:BF:39:B4:54:E2:9B:9E:7C:7E:11:4F:E5:98:7F:66:D9
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A88E20BCE2A18096205D590ABC608FE65
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/e3W7wb85tFTim558fhFP5Zh_Ztk.roa
Signing time:             Tue 12 Sep 2023 10:13:50 +0000
ROA not before:           Tue 12 Sep 2023 10:13:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:88:e2:0b:ce:2a:18:09:62:05:d5:90:ab:c6:08:fe:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep 12 10:13:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7b75bbc1bf39b454e29b9e7c7e114fe5987f66d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:88:81:47:14:09:bd:33:1c:7b:4d:be:c5:ef:
                    13:60:6c:81:3d:35:81:34:a3:b4:17:8f:25:5d:4a:
                    af:0f:7a:ec:39:18:b7:85:f5:43:25:e0:2f:d1:06:
                    f8:da:c9:15:97:7b:57:fc:d9:34:c0:88:5d:5d:06:
                    c6:ea:6f:45:01:52:f6:fa:02:50:5f:53:b1:9f:90:
                    b7:f2:aa:d1:cc:b2:8e:e8:db:12:14:4f:0d:67:04:
                    86:6f:5c:31:f1:b7:4a:a5:44:27:48:18:60:c9:61:
                    e7:b5:54:68:85:ed:1f:19:37:c5:3f:ff:19:c4:9c:
                    b5:e0:66:ab:50:df:b0:46:1c:d5:e1:7d:57:8d:70:
                    0b:c7:8e:72:f5:61:5b:9e:93:4c:a9:fe:35:fe:ab:
                    4c:de:c7:e8:f3:b1:f2:1d:38:ae:d9:00:ea:2b:b7:
                    9d:1d:04:1b:c2:7d:a4:1c:7d:d6:ac:6c:8d:4f:3c:
                    54:fa:91:d4:c7:83:e8:ab:00:3f:10:0e:0b:3d:4b:
                    be:c0:58:80:ab:13:88:71:2c:4a:96:e6:7d:78:d7:
                    8f:9a:d2:da:88:53:37:05:e8:53:96:db:03:0a:e2:
                    99:e3:43:d4:a9:e7:cb:ad:c2:19:c2:e0:7b:47:ae:
                    ef:e9:50:09:9a:c3:df:21:83:9b:a3:4f:04:19:1f:
                    74:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:75:BB:C1:BF:39:B4:54:E2:9B:9E:7C:7E:11:4F:E5:98:7F:66:D9
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/e3W7wb85tFTim558fhFP5Zh_Ztk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         2b:2c:97:74:a2:18:40:43:30:d0:db:0d:ef:32:26:13:bc:56:
         ac:a1:65:34:28:13:96:6b:a6:73:29:d4:fd:94:e9:9e:db:5c:
         7d:52:67:ae:0e:ee:45:1e:76:09:24:27:44:b7:e2:39:3f:ea:
         96:40:aa:e6:dc:4d:9f:b8:52:5b:c6:74:46:f5:61:45:a0:be:
         02:b2:81:90:91:11:a3:02:2b:0b:91:5a:e2:d5:9b:78:1a:72:
         e4:62:42:be:d5:30:64:ce:47:3d:95:3e:96:3a:08:7b:ab:0a:
         18:fe:ec:e7:35:c8:d2:b8:8c:dd:c7:c0:a5:af:64:72:4c:0b:
         cb:fd:86:77:f6:39:51:42:01:c9:ee:a0:86:41:76:0f:dc:e3:
         67:cb:f1:6b:37:f8:4e:2e:7f:a8:78:38:51:ad:3c:a0:ba:65:
         ad:e2:d0:5d:b1:e8:e9:cd:5e:9a:ca:fc:06:e9:1d:56:0c:63:
         98:ea:7a:1c:8c:fb:a1:51:6f:00:ce:30:bb:94:2a:cb:8a:35:
         17:7b:24:c1:47:15:b5:ed:4f:0a:0a:3f:e5:f5:ce:81:71:12:
         b2:56:d1:b8:d1:6d:aa:55:cf:d6:8b:a6:54:0a:ed:f6:5d:ae:
         bb:09:25:3f:27:3e:11:7e:45:5c:83:b5:ae:39:9a:c2:c7:af:
         d2:ee:0d:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----