Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/gqvX06chIfuKR-B88lWhQ_REz3c.roa
File:                     gqvX06chIfuKR-B88lWhQ_REz3c.roa (raw, json)
Hash identifier:          XQKkBV4i/8easaDFJjV1x78bTm+hYjX+iU0PLpEiClY=
Subject key identifier:   82:AB:D7:D3:A7:21:21:FB:8A:47:E0:7C:F2:55:A1:43:F4:44:CF:77
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A99D779C80C3F147AB7BB49B482D7DEA7
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/gqvX06chIfuKR-B88lWhQ_REz3c.roa
Signing time:             Fri 15 Sep 2023 17:15:50 +0000
ROA not before:           Fri 15 Sep 2023 17:15:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:99:d7:79:c8:0c:3f:14:7a:b7:bb:49:b4:82:d7:de:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep 15 17:15:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=82abd7d3a72121fb8a47e07cf255a143f444cf77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:29:b1:a1:9b:6c:a5:80:cb:3a:e5:52:03:1f:
                    89:c6:1c:24:2e:32:98:b7:e5:81:00:e8:4b:6a:78:
                    68:4c:b6:98:5e:53:14:83:65:55:eb:f3:c0:0d:e7:
                    fb:08:29:21:4c:15:6e:87:08:fa:ea:11:49:c2:d0:
                    86:3b:80:e0:5c:c8:c5:b4:b9:99:db:33:ee:2c:99:
                    2b:b5:6d:c9:cf:00:fa:e2:6a:36:1b:88:ee:49:11:
                    ae:37:f6:50:f0:6e:d4:ee:d3:f4:6e:93:3d:cc:86:
                    22:44:de:d8:f4:f5:a4:d2:60:81:61:19:97:af:86:
                    15:d4:e6:c0:ff:d5:49:db:05:e8:5d:1d:26:08:9f:
                    1b:d9:73:1b:78:20:db:21:4d:67:ba:a6:59:0c:27:
                    9f:2a:b5:80:da:11:d4:b2:44:e8:ad:4f:d0:1a:e9:
                    9e:6f:1b:0d:8d:af:78:d6:2e:ac:48:05:3e:4c:de:
                    d7:3d:47:bf:79:5e:bd:c2:9c:36:17:da:99:8c:ec:
                    7b:60:4e:70:92:d5:6c:1f:8f:41:8a:19:3a:38:37:
                    74:ec:9e:b2:0d:24:7e:d4:62:ee:1a:e0:e4:8f:bd:
                    be:ac:94:5a:7a:4d:a1:7a:bd:99:7d:31:f5:2b:d3:
                    fe:a6:32:4c:79:32:29:ce:8e:a4:e0:ca:25:09:e0:
                    41:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:AB:D7:D3:A7:21:21:FB:8A:47:E0:7C:F2:55:A1:43:F4:44:CF:77
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/gqvX06chIfuKR-B88lWhQ_REz3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         27:61:7e:56:22:29:d4:c8:fb:52:57:05:b0:df:8c:13:74:7a:
         2e:cd:20:28:e3:12:f0:36:f0:b5:a8:f2:45:6c:49:23:76:11:
         d6:73:87:d0:7b:0b:9c:6f:ba:c4:45:85:a0:f9:45:1e:74:f6:
         e2:88:39:fc:f6:43:a8:48:98:f0:09:a5:9e:87:1a:2d:1d:e5:
         a4:b0:98:12:ea:a7:c1:ef:87:d2:c0:da:8a:b3:4d:de:f8:8d:
         92:dc:7c:29:26:be:d8:9d:b2:2c:12:81:10:d2:db:be:7b:bd:
         98:de:1a:c5:be:3c:43:e8:71:d9:2b:d1:b5:43:0e:5b:7d:bb:
         8b:24:43:7c:23:fd:48:47:13:e0:ff:f3:81:41:3a:1f:7e:ad:
         7f:d2:3a:c2:5f:bb:75:40:c2:79:bd:99:38:14:48:05:18:04:
         c9:63:84:e0:54:d4:79:0b:b7:8b:2b:76:37:48:42:ab:11:e8:
         6d:0e:cc:1e:2c:75:df:87:33:cf:a5:2e:bf:a9:45:5e:f7:54:
         e7:23:99:df:f8:ee:21:b7:1d:9a:99:00:a1:5a:4a:b3:cb:43:
         1a:ec:a5:fd:9c:12:2a:a6:a2:8b:2d:fa:d7:b3:43:e9:aa:56:
         a4:50:dd:da:05:a3:d6:1b:c7:86:dd:a7:fd:38:51:41:85:bf:
         f0:72:3c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----