Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/pCAn6bRnTKP2bZa2TJx-M8uDUII.roa
File:                     pCAn6bRnTKP2bZa2TJx-M8uDUII.roa (raw, json)
Hash identifier:          TNRJpJnU0rIenPnfNN66X9K0jOmv34i5tKgbB7P3TK4=
Subject key identifier:   A4:20:27:E9:B4:67:4C:A3:F6:6D:96:B6:4C:9C:7E:33:CB:83:50:82
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A67975E2AE64F378DFD734A676E86501C
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/pCAn6bRnTKP2bZa2TJx-M8uDUII.roa
Signing time:             Tue 05 Sep 2023 23:04:47 +0000
ROA not before:           Tue 05 Sep 2023 23:04:47 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18a:6796:e96e/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:67:97:5e:2a:e6:4f:37:8d:fd:73:4a:67:6e:86:50:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep  5 23:04:47 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a42027e9b4674ca3f66d96b64c9c7e33cb835082
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:66:ca:66:fc:70:ea:b9:3b:56:04:fb:b5:ad:
                    30:87:ab:3b:48:86:17:a8:b2:ed:10:8f:72:dd:ed:
                    f8:05:e5:18:dd:fa:3e:4a:68:4d:f4:9b:72:64:28:
                    10:d1:fd:40:b7:ae:78:91:41:1e:6d:00:29:4e:3b:
                    e9:0c:c9:97:91:6e:96:3b:65:b0:eb:4d:bb:10:09:
                    63:49:6b:23:32:87:0f:fc:af:69:f5:da:61:ec:4b:
                    35:60:7c:ff:5b:5b:e7:15:b5:8c:e1:3d:3c:d5:03:
                    0e:8b:0c:d9:8d:6d:2c:6f:61:b3:b1:b3:41:3b:eb:
                    8b:94:87:60:15:cf:1b:96:50:f8:77:6b:c3:28:6d:
                    f2:5f:0b:0e:99:9a:55:21:a1:1c:54:ff:36:f2:4a:
                    7e:4a:a5:c8:2e:9f:b2:03:a0:51:0c:e8:ac:fb:f1:
                    6b:df:96:bf:75:e1:45:aa:68:b1:b5:54:a8:61:a9:
                    ed:ef:7e:46:80:ab:62:93:bf:1f:bc:fa:68:de:38:
                    97:46:b5:18:18:bb:82:47:64:ba:7f:61:c8:70:b5:
                    7f:fc:56:e1:cc:78:95:e1:04:86:c7:f2:6f:e2:b3:
                    e2:a7:db:c7:4c:75:c9:8b:11:81:0f:2a:b4:76:4f:
                    b6:f3:2b:47:40:56:a4:af:76:26:0a:0b:a1:20:67:
                    0f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:20:27:E9:B4:67:4C:A3:F6:6D:96:B6:4C:9C:7E:33:CB:83:50:82
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/pCAn6bRnTKP2bZa2TJx-M8uDUII.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         2f:d6:4d:29:8f:a4:af:9b:d1:bd:4c:32:50:7b:93:de:70:9d:
         03:77:72:1c:e9:7c:2a:7d:01:7f:32:4c:ed:36:5e:8a:5b:8c:
         af:b0:45:2a:1e:64:c1:9e:ec:3a:26:a4:fb:51:c2:f0:19:97:
         e1:71:09:5e:58:ad:e0:9b:a7:88:c7:08:6d:e8:f5:c8:9a:a8:
         c5:82:03:58:19:37:b2:d9:6d:12:b6:6a:cc:2d:ac:85:fb:a7:
         f1:0c:fa:fa:5f:43:5f:74:18:80:f2:ad:d1:60:37:6f:83:72:
         81:9b:58:99:09:b0:2b:84:a2:4e:53:5d:1b:8a:8d:44:5a:a3:
         48:9a:29:14:4e:af:42:87:e2:3f:e9:44:e3:8f:ab:f1:d1:ba:
         12:d6:e0:0c:1b:20:51:1a:fa:2e:52:a1:9f:d3:77:df:d0:5d:
         f9:2b:03:54:f7:47:87:ab:4f:ad:4f:6e:5d:b1:db:d0:48:0f:
         ea:5e:f5:66:e1:33:4d:d2:d7:55:dc:fa:9e:70:f3:ab:45:19:
         1b:16:0c:3f:f3:56:0c:54:82:ae:72:08:fd:5a:9e:97:9a:46:
         bf:8c:26:5b:0e:32:c1:4e:a2:27:7a:94:bb:20:0a:5a:08:50:
         1e:a5:7f:b1:2c:87:8e:3f:d0:2b:90:35:fc:82:24:c6:1f:91:
         a8:ab:31:b8
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYpnl14q5k83jf1zSmduhlAcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMWYxNGM4NTA3NDVhN2MzMTJlYTJlYjBiZTAzMDUyZTQ5
NjcyNzUwHhcNMjMwOTA1MjMwNDQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNDIwMjdlOWI0Njc0Y2EzZjY2ZDk2YjY0YzljN2UzM2NiODM1MDgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWbKZvxw6rk7VgT7ta0wh6s7SIYX
qLLtEI9y3e34BeUY3fo+SmhN9JtyZCgQ0f1At654kUEebQApTjvpDMmXkW6WO2Ww
6027EAljSWsjMocP/K9p9dph7Es1YHz/W1vnFbWM4T081QMOiwzZjW0sb2GzsbNB
O+uLlIdgFc8bllD4d2vDKG3yXwsOmZpVIaEcVP828kp+SqXILp+yA6BRDOis+/Fr
35a/deFFqmixtVSoYant735GgKtik78fvPpo3jiXRrUYGLuCR2S6f2HIcLV//Fbh
zHiV4QSGx/Jv4rPip9vHTHXJixGBDyq0dk+28ytHQFakr3YmCguhIGcPywIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFKQgJ+m0Z0yj9m2WtkycfjPLg1CCMB8GA1UdIwQY
MBaAFKofFMhQdFp8MS6i6wvgMFLklnJ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQt
ODNmY2QyMjU0ODJhLzEvcENBbjZiUm5US1AyYlphMlRKeC1NOHVEVUlJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQtODNmY2QyMjU0ODJh
LzEvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAC/WTSmPpK+b0b1MMlB7
k95wnQN3chzpfCp9AX8yTO02XopbjK+wRSoeZMGe7DompPtRwvAZl+FxCV5YreCb
p4jHCG3o9ciaqMWCA1gZN7LZbRK2aswtrIX7p/EM+vpfQ190GIDyrdFgN2+DcoGb
WJkJsCuEok5TXRuKjURao0iaKRROr0KH4j/pROOPq/HRuhLW4AwbIFEa+i5SoZ/T
d9/QXfkrA1T3R4erT61Pbl2x29BID+pe9WbhM03S11Xc+p5w86tFGRsWDD/zVgxU
gq5yCP1anpeaRr+MJlsOMsFOoid6lLsgCloIUB6lf7Esh44/0CuQNfyCJMYfkair
Mbg=
-----END CERTIFICATE-----