Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/t2JFxFoy8ZtF624P0L2wuBGT77Q.roa
File:                     t2JFxFoy8ZtF624P0L2wuBGT77Q.roa (raw, json)
Hash identifier:          H2uPnIdHfB4h/8F8U6Fm548fC1ikj9ZKCMLUIxHIWvE=
Subject key identifier:   B7:62:45:C4:5A:32:F1:9B:45:EB:6E:0F:D0:BD:B0:B8:11:93:EF:B4
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A9E8E24881492DD451989A7DD29C118D8
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/t2JFxFoy8ZtF624P0L2wuBGT77Q.roa
Signing time:             Sat 16 Sep 2023 15:13:50 +0000
ROA not before:           Sat 16 Sep 2023 15:13:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:9e:8e:24:88:14:92:dd:45:19:89:a7:dd:29:c1:18:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep 16 15:13:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b76245c45a32f19b45eb6e0fd0bdb0b81193efb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:2e:6e:eb:4e:63:79:d0:90:0f:78:11:f8:66:
                    de:28:ab:c1:f3:c7:81:22:f8:ba:33:aa:95:62:a7:
                    d4:bf:66:52:5d:24:f8:31:76:a1:7a:50:30:08:0e:
                    f2:80:c0:5b:bc:d1:39:c5:df:54:65:54:f2:16:44:
                    71:15:59:0a:d1:ac:e8:d2:d7:00:21:d4:b8:80:d4:
                    95:14:65:34:ce:28:5b:71:16:01:95:80:bb:3f:b7:
                    d9:1c:fe:ea:ce:05:1b:53:f2:7d:2d:6b:ad:2e:a3:
                    32:39:32:5e:d9:d5:e5:c2:58:c1:ec:ba:bf:db:85:
                    cf:18:25:cd:cc:de:13:cf:f4:d1:99:d4:ff:dd:42:
                    bd:dd:7b:13:b8:83:ff:2b:86:07:d8:a9:29:ad:20:
                    4d:ad:cb:e8:f1:97:01:b5:b3:ec:d4:36:83:39:87:
                    fc:60:1e:c6:ad:05:26:57:1d:e7:21:32:44:43:1d:
                    22:ba:0d:d1:23:2a:e5:30:cb:23:4d:87:0e:7d:70:
                    cf:1c:f9:f3:95:30:47:23:8b:bf:2d:4a:e3:af:66:
                    01:f7:c4:9c:42:9e:6f:70:be:f1:ce:01:96:ee:66:
                    83:dd:b2:a8:42:e2:f6:6f:e6:3f:2e:1a:6e:a5:86:
                    58:bd:51:9b:78:9d:db:fc:e3:7c:e0:ac:3e:07:c6:
                    5e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:62:45:C4:5A:32:F1:9B:45:EB:6E:0F:D0:BD:B0:B8:11:93:EF:B4
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/t2JFxFoy8ZtF624P0L2wuBGT77Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         01:e4:0f:61:fc:02:53:9c:83:dd:8f:0c:9e:f9:37:8d:e1:99:
         84:77:08:12:34:0b:3d:e8:00:85:3f:c1:e4:69:a5:3b:01:fc:
         6a:eb:39:56:93:5b:f1:85:55:af:ea:66:9a:e3:65:aa:6c:70:
         df:e6:e6:67:ea:cb:9f:dd:e5:63:81:b6:37:cb:f3:ca:6d:d4:
         99:69:d8:2d:cb:98:4b:90:88:ca:c4:9c:58:47:67:55:09:1f:
         32:e8:75:9f:7d:0f:c5:00:73:00:f0:6c:b2:5c:2c:f3:74:f2:
         ff:5c:81:af:c9:07:ac:7b:7c:a8:c0:c6:84:01:e3:20:5f:f7:
         6f:20:38:50:14:71:fd:11:a6:39:d9:0e:08:07:04:f0:49:4c:
         ce:a6:d4:ce:fd:a5:2c:d0:67:21:03:ac:3f:f2:b2:3d:a3:d9:
         67:91:94:c2:08:05:b6:c0:97:02:1b:94:57:70:93:7f:43:ef:
         5c:0c:2b:15:f7:2a:00:0d:cb:34:96:53:42:ff:ae:2b:33:78:
         47:c1:92:9d:75:74:50:05:a5:bf:a5:61:32:58:5d:52:1a:59:
         c6:fd:95:61:be:0e:69:e4:07:5f:6c:55:80:ee:ba:ef:19:ca:
         72:d2:0b:98:ff:ba:02:e4:0a:f5:5a:16:bd:a0:8f:95:0b:90:
         ef:e9:fd:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----