Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/o6doJCJt2qTYZt8rQ1JLICqK3nc.roa
File:                     o6doJCJt2qTYZt8rQ1JLICqK3nc.roa (raw, json)
Hash identifier:          qC6V4xftz2fO0nA6OogMYUi3+7owstzeus1Dv7Z2bAU=
Subject key identifier:   A3:A7:68:24:22:6D:DA:A4:D8:66:DF:2B:43:52:4B:20:2A:8A:DE:77
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A4C92CFBF8E608FC59D92AF3D511699EA
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/o6doJCJt2qTYZt8rQ1JLICqK3nc.roa
Signing time:             Thu 31 Aug 2023 17:10:04 +0000
ROA not before:           Thu 31 Aug 2023 17:10:04 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18a:4c91:f267/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:4c:92:cf:bf:8e:60:8f:c5:9d:92:af:3d:51:16:99:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Aug 31 17:10:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a3a76824226ddaa4d866df2b43524b202a8ade77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:b5:eb:8b:ec:1c:18:56:42:37:b5:7c:50:4e:
                    0e:c1:c6:23:b7:71:61:55:d7:df:9c:ef:57:68:83:
                    37:f7:06:c1:36:0e:60:d7:4b:14:93:c9:32:0d:4f:
                    ba:09:f3:c0:53:3e:ec:e0:40:41:b3:ec:70:3a:18:
                    20:4a:b7:b7:82:19:f8:4e:da:00:36:f1:b8:3c:9a:
                    76:d1:fd:4b:bc:27:60:a5:ec:c2:69:7b:0f:7d:ab:
                    5a:c7:78:5c:6c:7a:da:11:70:6a:3a:84:85:56:b1:
                    d7:fe:a4:3f:21:f4:c9:91:bd:51:4a:43:0f:44:e0:
                    34:7e:52:10:3f:cb:1f:0e:3c:62:02:a5:41:bc:52:
                    be:0d:98:09:b0:6d:f2:e7:31:3d:73:79:62:19:27:
                    26:28:b3:38:de:7a:3a:ec:35:b3:97:b7:ce:83:e9:
                    ab:52:d9:e4:9b:c2:96:fb:ba:03:42:ea:bd:1d:15:
                    41:17:46:44:db:8a:bf:1c:42:1e:55:0b:a1:72:34:
                    fd:0a:46:50:fa:c4:31:1e:f4:21:5b:d5:7c:4c:cd:
                    d3:19:8d:5f:3e:31:af:48:2e:01:41:68:04:dd:57:
                    0c:52:28:d5:ae:10:1c:1d:59:bb:83:4c:a8:ce:dd:
                    36:53:2e:bb:2e:72:2b:b5:aa:1b:a4:92:8a:f5:29:
                    fc:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:A7:68:24:22:6D:DA:A4:D8:66:DF:2B:43:52:4B:20:2A:8A:DE:77
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/o6doJCJt2qTYZt8rQ1JLICqK3nc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         08:33:4a:d2:96:df:4b:0e:9d:2f:a4:2f:8a:5e:0c:77:17:4c:
         86:cd:32:bc:b0:35:69:21:06:84:6a:af:5b:a4:7f:e5:04:f3:
         cb:18:7b:0a:e5:8c:bb:84:6e:76:48:c2:9a:0f:86:47:48:d0:
         be:2c:46:68:2f:90:31:97:ab:44:e0:1a:13:d3:06:cc:41:c7:
         9d:e0:d5:aa:5f:f1:d9:69:f6:7f:02:60:6b:d9:b7:5d:c6:14:
         c6:26:3a:97:7f:08:74:1c:c9:75:9d:1c:c8:cf:c4:bd:b9:b1:
         ee:b7:9b:0f:81:72:ea:53:a6:03:32:83:2e:7c:1e:a1:d5:23:
         3d:a9:cb:28:95:ab:bc:b7:53:c4:22:72:d4:d5:2a:c6:1b:bf:
         97:3c:f6:be:3e:d1:64:a9:8d:1b:fe:e3:1a:1c:7a:98:94:3b:
         89:42:b0:8e:37:aa:ec:22:57:44:1f:f4:60:16:d8:17:cb:d1:
         e6:4c:a6:b2:3b:80:42:aa:b2:70:68:65:53:ca:f8:54:ce:b0:
         e1:9c:84:26:0d:d3:7b:38:c9:3f:b3:40:6c:d8:03:35:d6:2c:
         70:1d:eb:8e:c3:58:4f:24:a1:ed:c2:a7:55:e4:c4:ed:4e:a4:
         84:77:46:36:2e:b5:5b:78:b9:2d:5d:54:22:48:db:45:9e:57:
         b4:0a:ae:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----