Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/uU5JvvUpz2HktVoHqT7nQjBk8xU.roa
File:                     uU5JvvUpz2HktVoHqT7nQjBk8xU.roa (raw, json)
Hash identifier:          jIcXDs6zB/F2RbnSWf4TINKDOSZgvUtc9calSxmxj3o=
Subject key identifier:   B9:4E:49:BE:F5:29:CF:61:E4:B5:5A:07:A9:3E:E7:42:30:64:F3:15
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A94416C6E57A41EADD7FC21FE35F85932
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/uU5JvvUpz2HktVoHqT7nQjBk8xU.roa
Signing time:             Thu 14 Sep 2023 15:13:50 +0000
ROA not before:           Thu 14 Sep 2023 15:13:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:94:41:6c:6e:57:a4:1e:ad:d7:fc:21:fe:35:f8:59:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep 14 15:13:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b94e49bef529cf61e4b55a07a93ee7423064f315
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:84:3e:6c:5a:6e:f5:97:76:33:94:cc:a3:4f:
                    56:aa:b0:0b:4c:b8:85:e9:ba:99:6d:3e:2b:8b:f2:
                    99:44:61:6f:57:3e:02:cc:0d:1d:95:a0:54:9c:62:
                    e6:d9:80:81:d3:86:22:f6:7e:76:25:2d:06:8d:a6:
                    0c:22:a2:89:63:05:b1:d2:7d:94:27:1a:6a:0d:73:
                    ba:0c:1d:3b:f6:9c:07:06:87:3d:45:ad:03:8c:77:
                    36:f9:5b:88:39:56:2b:f2:fe:24:9d:65:a1:bc:3a:
                    5d:aa:23:2f:98:09:37:f3:6d:a7:de:6f:78:33:c4:
                    84:2b:aa:04:2a:96:3c:12:ed:a7:fe:8d:3f:29:d6:
                    5d:6b:7c:f2:c7:72:8a:bf:5d:b0:61:c9:43:f0:93:
                    d9:0e:5f:0c:a0:02:fc:cc:81:80:91:b1:b5:05:28:
                    1c:62:0e:e5:1c:1a:b3:38:52:83:f9:7d:28:ae:92:
                    4f:6c:8b:09:0c:75:dd:e7:c5:33:ed:f0:4f:b7:a9:
                    fd:5a:2d:7b:27:86:c1:eb:a8:8f:81:22:0d:78:fa:
                    a9:17:4f:e5:4c:1e:af:6b:f8:c8:a2:81:3e:bc:7c:
                    f5:f8:cd:cf:7c:bc:a1:02:ad:6a:20:eb:51:23:b9:
                    20:9e:b6:f2:f8:bb:26:6a:62:6d:f5:45:47:97:f2:
                    ca:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:4E:49:BE:F5:29:CF:61:E4:B5:5A:07:A9:3E:E7:42:30:64:F3:15
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/uU5JvvUpz2HktVoHqT7nQjBk8xU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         1f:28:ea:fb:5b:9c:3a:3c:57:79:9f:ce:f5:9f:34:4e:b3:7d:
         20:7b:b4:61:67:ff:fc:98:07:a7:f0:2f:8a:49:00:0e:28:2e:
         5a:9b:3f:a0:9f:3c:e6:87:0c:3d:ce:45:48:49:cb:b7:89:41:
         5b:ca:96:7b:d3:8a:c3:e7:dc:8d:5e:da:56:59:bd:df:e9:cf:
         bc:68:56:10:bf:51:fa:a3:23:4f:cd:7f:60:22:5f:7d:24:19:
         ea:cf:07:a9:5c:b1:54:1e:49:70:d1:e8:28:5f:94:68:f0:99:
         57:d8:ff:67:3f:88:09:49:19:e8:4b:ea:2e:ee:0d:e5:12:56:
         9d:fb:50:56:81:6f:45:a1:4c:8d:07:b2:29:1a:f5:d9:a4:d8:
         7c:b4:9d:cf:80:30:66:2d:c3:4f:a3:4c:fd:31:a4:96:bc:24:
         5f:6a:08:60:9b:8e:ea:1b:57:d0:8e:a2:54:f9:56:3f:ad:7b:
         5c:05:7f:6d:41:7f:ed:87:0a:7d:ed:dc:6d:62:67:fb:fc:bf:
         98:26:16:95:d2:02:3f:08:40:61:a8:98:58:bd:24:95:ce:43:
         c4:3c:a5:76:9a:80:0e:80:fb:1c:c5:5a:8e:43:2f:6c:a3:6a:
         83:5e:7c:d4:5b:f9:8a:9f:01:91:3a:75:a6:95:cb:6b:de:56:
         63:90:59:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----