Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/tOZvhbWi5Xpu-QAEJ4qEI0otjUo.roa
File:                     tOZvhbWi5Xpu-QAEJ4qEI0otjUo.roa (raw, json)
Hash identifier:          jueLGU9qg1lDumZ5Kk7t6jOgQxmPhw6YBeuIcnliNWw=
Subject key identifier:   B4:E6:6F:85:B5:A2:E5:7A:6E:F9:00:04:27:8A:84:23:4A:2D:8D:4A
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A8AD06E655D42554DF28758B72ACB09D9
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/tOZvhbWi5Xpu-QAEJ4qEI0otjUo.roa
Signing time:             Tue 12 Sep 2023 19:13:50 +0000
ROA not before:           Tue 12 Sep 2023 19:13:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:8a:d0:6e:65:5d:42:55:4d:f2:87:58:b7:2a:cb:09:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep 12 19:13:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b4e66f85b5a2e57a6ef90004278a84234a2d8d4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:dc:85:3a:c1:66:12:e6:37:9b:5b:5f:6b:ac:
                    c5:20:e6:d1:4f:c7:27:6b:a2:0a:7b:ca:7a:f1:29:
                    05:d9:6c:4a:f4:1f:5a:46:c4:a6:e2:48:0b:25:08:
                    fc:c3:de:83:8b:14:c8:7e:8e:46:b1:51:d8:96:5c:
                    1b:f0:e9:9f:4e:5e:4e:bf:65:9b:be:d7:64:7a:ab:
                    92:50:4e:80:e8:12:e3:67:38:81:2e:04:30:96:0d:
                    6d:7f:da:fd:4c:32:be:ce:6c:ee:c0:18:23:70:98:
                    a3:7c:ea:73:cb:d4:c8:3e:22:ef:2d:d8:66:62:96:
                    0d:12:0e:88:11:aa:62:37:18:7f:c3:ff:36:db:af:
                    a6:d1:43:e1:b2:fa:54:f1:d9:e6:e5:88:3e:6b:b5:
                    e8:70:ee:07:8c:00:91:6a:d9:dd:f7:54:6b:40:e8:
                    55:cf:63:e4:9b:56:b5:e6:c0:a4:5f:5f:88:b6:1f:
                    8d:61:1f:5c:2c:a6:b4:8e:ef:ba:2e:03:15:6a:ab:
                    5b:39:92:70:d7:4e:93:c6:39:dc:97:9e:ee:6c:b6:
                    a2:b7:a5:3d:e5:25:2f:77:08:dc:38:72:d5:e2:dc:
                    43:c4:1e:b9:93:65:63:47:97:a6:af:70:d2:8f:a1:
                    fb:13:23:89:45:4b:b0:2a:5f:a3:00:8d:20:56:46:
                    e0:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:E6:6F:85:B5:A2:E5:7A:6E:F9:00:04:27:8A:84:23:4A:2D:8D:4A
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/tOZvhbWi5Xpu-QAEJ4qEI0otjUo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         68:e4:e2:91:a4:f4:05:84:db:58:6c:80:1a:fa:8b:8e:bd:22:
         39:45:d0:7e:58:2a:27:90:97:60:ba:b2:18:6e:e4:82:af:74:
         fc:0c:30:97:38:74:d2:5e:28:eb:ac:24:26:6d:98:bc:0b:64:
         4a:a5:40:13:9a:1d:2c:23:10:75:0e:eb:c3:f8:85:a2:31:d5:
         9d:f4:c5:15:3a:d3:0b:49:e2:ec:84:65:36:a2:94:82:cc:ad:
         85:db:e4:1b:e9:80:57:26:0c:58:3b:bc:a7:73:f8:0f:c2:e8:
         9b:59:1c:f9:e3:2c:20:70:05:1f:ef:e3:32:53:d3:04:e8:83:
         50:63:58:13:ea:2f:29:40:52:87:ad:ab:0a:d1:d0:f5:7a:5f:
         59:f3:4b:52:8b:6a:8a:78:d3:32:dc:e6:fe:01:59:74:49:c5:
         34:80:11:a0:8c:ae:f2:aa:19:ce:df:76:83:3a:91:d5:20:d8:
         5e:85:9d:78:5a:16:47:fa:e3:66:98:1c:51:54:17:76:f6:55:
         c7:c6:25:24:d7:25:41:42:a6:84:2d:6e:5b:15:3b:0f:db:d9:
         91:9d:be:1e:c7:9f:28:3c:9a:79:34:ed:09:52:14:59:a6:21:
         a9:bf:02:97:df:79:37:f6:da:82:1e:e7:db:78:e6:a2:9e:26:
         8d:1e:0b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----