Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/pMlZoij-z9lwun8JKbjHKEgZazU.roa
File:                     pMlZoij-z9lwun8JKbjHKEgZazU.roa (raw, json)
Hash identifier:          RYXDL77cX4T1YauMoa+uYnS9azV15wmdldaDNum4PLA=
Subject key identifier:   A4:C9:59:A2:28:FE:CF:D9:70:BA:7F:09:29:B8:C7:28:48:19:6B:35
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A781D2BDDAC2E99A2EE6E29882CA3B4A8
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/pMlZoij-z9lwun8JKbjHKEgZazU.roa
Signing time:             Sat 09 Sep 2023 04:04:52 +0000
ROA not before:           Sat 09 Sep 2023 04:04:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18a:781c:d8f2/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:78:1d:2b:dd:ac:2e:99:a2:ee:6e:29:88:2c:a3:b4:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep  9 04:04:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a4c959a228fecfd970ba7f0929b8c72848196b35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:c1:9f:b7:d2:fc:3b:33:35:83:f7:19:45:2e:
                    12:85:33:b8:a1:61:74:9d:ae:c3:34:18:96:98:41:
                    eb:cd:e5:93:9b:31:23:66:6f:71:e2:e1:69:a9:02:
                    4d:94:79:3d:e7:7f:b7:61:24:c9:7c:83:3f:72:c8:
                    f4:20:2d:3f:7a:d0:ef:59:50:92:cd:e4:39:a6:ad:
                    b2:3d:c1:d0:45:b2:43:69:23:b7:6c:20:46:74:9b:
                    86:1e:3d:ff:8d:dd:20:cc:61:0f:e8:0d:81:85:d4:
                    68:e7:b9:87:41:5a:69:ad:8d:af:07:4d:35:94:70:
                    f5:16:29:c9:45:5a:1f:3b:94:18:b2:2b:cb:9c:af:
                    a4:f7:84:0f:54:22:f3:6b:f6:1b:b3:e6:4e:ed:50:
                    b9:87:77:3c:d9:52:ba:8d:36:cd:ca:38:08:e1:a9:
                    78:0f:e1:b7:95:47:6e:80:9f:2f:e6:2d:f4:d2:1e:
                    fc:7f:2e:b4:68:1c:0b:d2:00:92:2c:7b:b0:70:b3:
                    78:35:a3:9e:93:f6:08:43:96:20:74:e2:75:43:b3:
                    a1:f8:87:7e:56:b2:cb:0a:d1:92:1c:2f:d7:92:e3:
                    54:68:52:b5:7a:80:ba:6c:2c:3c:42:29:3a:d8:eb:
                    69:94:be:c9:a5:ae:27:d7:16:7e:b1:d7:49:9e:65:
                    06:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:C9:59:A2:28:FE:CF:D9:70:BA:7F:09:29:B8:C7:28:48:19:6B:35
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/pMlZoij-z9lwun8JKbjHKEgZazU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         a2:9f:39:94:7d:3f:97:19:f3:a9:39:e0:b6:9c:19:f9:a1:4c:
         85:82:5b:0e:ac:96:7a:9d:0b:9f:e8:d8:85:83:32:8d:a4:f5:
         ba:69:47:f8:fe:5e:d6:6f:65:4e:19:ed:c2:d6:56:22:fb:de:
         8f:b3:8d:3b:3b:d1:7e:56:8b:fe:e6:e1:50:c1:d7:74:98:49:
         3c:cf:b4:ab:4f:12:5c:ee:cd:da:9a:5f:2e:8f:e3:70:01:06:
         93:bf:75:65:60:8c:41:be:65:4e:85:86:6d:65:ae:65:00:00:
         45:71:4d:d0:33:4b:4c:44:bf:c0:61:02:e0:d3:79:e0:19:e9:
         5d:36:85:cf:45:0e:e8:fd:48:88:f7:1f:71:3d:47:e7:83:c5:
         c6:1c:08:81:e2:5f:2c:6c:9f:c1:c0:a1:3e:b7:a8:ea:39:cc:
         03:30:59:7e:e3:d0:1d:fe:b3:81:bc:63:4e:36:4d:60:60:21:
         e2:17:0c:6a:35:fa:62:92:58:a0:fa:c2:49:97:23:a5:b5:fa:
         af:ea:00:b3:6c:a7:d4:03:c2:5f:5a:c2:a3:97:fd:ba:a9:5c:
         80:fe:cb:ea:9e:89:74:13:09:1c:b1:d3:0a:33:7e:f3:4a:49:
         3c:aa:63:24:e2:5f:5e:c3:56:38:34:b5:46:5a:d8:be:87:8d:
         fa:91:ec:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----