Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/sQGPFFVy0v4PhxFQz0-TXLUg2WI.roa
File:                     sQGPFFVy0v4PhxFQz0-TXLUg2WI.roa (raw, json)
Hash identifier:          /CiqOFWg+nBrzKzy8eNXVyhARhzi8mR1hnrrBWMtcO8=
Subject key identifier:   B1:01:8F:14:55:72:D2:FE:0F:87:11:50:CF:4F:93:5C:B5:20:D9:62
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A8269E41707D2D897823150C5F7CCF722
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/sQGPFFVy0v4PhxFQz0-TXLUg2WI.roa
Signing time:             Mon 11 Sep 2023 04:04:52 +0000
ROA not before:           Mon 11 Sep 2023 04:04:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18a:8269:7be5/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:82:69:e4:17:07:d2:d8:97:82:31:50:c5:f7:cc:f7:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep 11 04:04:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b1018f145572d2fe0f871150cf4f935cb520d962
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:fc:f4:99:27:c3:8d:2e:88:67:31:23:4d:76:
                    c8:4b:36:c9:fc:88:f3:7d:96:bb:65:b0:5e:c6:3f:
                    95:d9:3d:38:37:76:26:03:d2:b6:1e:12:5f:88:1e:
                    04:21:41:e5:fd:cf:b7:4e:06:b7:51:7b:18:d3:17:
                    f0:d2:77:08:27:e2:5d:05:de:50:8a:b2:4e:c1:48:
                    72:82:50:5e:92:d7:3d:a8:11:99:b2:5d:04:dc:a9:
                    4a:96:ae:fc:37:ab:64:5a:23:3e:f2:e5:a4:f5:91:
                    87:00:c8:72:0c:08:bc:a9:e2:83:55:1c:8e:5d:86:
                    bb:0a:ad:bc:06:4a:72:26:d5:ff:0f:65:3d:fb:bc:
                    6c:92:40:2b:31:1e:05:46:36:0b:89:86:23:ff:20:
                    cc:68:c7:5a:94:19:40:26:1a:3e:bd:bd:21:db:6a:
                    f0:33:2a:0a:ab:fd:a4:2c:aa:2d:aa:28:d3:de:2c:
                    47:2d:d3:e5:7c:b4:d3:42:4e:a7:12:18:6a:b6:64:
                    a9:1d:cf:11:31:d1:ea:83:e2:c2:19:76:b6:88:e2:
                    5b:35:39:c3:73:72:93:d3:f9:52:54:c9:32:2a:03:
                    53:7b:9b:f8:51:42:93:9c:3e:d6:9b:1a:0b:2a:9a:
                    35:8c:13:08:6c:eb:3c:dc:bb:26:46:2e:5d:7b:10:
                    33:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:01:8F:14:55:72:D2:FE:0F:87:11:50:CF:4F:93:5C:B5:20:D9:62
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/sQGPFFVy0v4PhxFQz0-TXLUg2WI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         0c:00:1d:e6:a6:31:22:4c:64:e2:f4:f6:68:76:c6:b9:e6:10:
         f6:11:b7:0a:49:f2:cd:09:d6:65:12:c9:39:0f:98:60:7e:dd:
         4c:1f:ef:b2:8e:1f:df:be:17:03:5b:5a:e5:23:2f:fe:0a:33:
         98:b0:77:7e:f8:71:3e:8f:40:85:40:e7:4e:89:99:1f:64:d3:
         48:c4:64:f2:3b:5d:52:5b:bb:d6:ef:46:26:ec:b4:60:97:4f:
         f7:1b:ac:84:c9:a1:8e:2f:e4:83:3f:40:71:3d:0f:6c:81:18:
         ef:a1:1b:de:e9:8f:3b:a9:8f:cd:2b:6d:8b:42:76:89:cc:11:
         51:89:84:c4:88:c9:29:a2:4a:5f:4b:c5:40:43:d4:f3:ea:cb:
         47:9a:e9:eb:e9:62:8d:52:40:42:7c:d3:2f:09:87:15:93:94:
         de:dc:c9:26:51:27:b0:58:3a:22:f8:83:cb:03:0f:b9:89:2e:
         af:ba:10:e3:e4:40:c1:9a:47:cd:ea:9b:d1:c9:70:72:96:f2:
         33:91:bb:2c:52:29:7f:95:30:2f:20:61:78:4d:97:5e:07:07:
         df:a9:10:a3:be:c5:20:67:f9:d4:a0:30:8a:d5:ee:de:c1:8f:
         b6:51:32:ae:96:65:8c:4e:30:19:3a:00:aa:f7:c2:b4:5f:1c:
         2f:46:86:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----