Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/v6XqDnjP37pH74uYFmiB0jK9DU8.roa
File:                     v6XqDnjP37pH74uYFmiB0jK9DU8.roa (raw, json)
Hash identifier:          ffBeFz1b7CBs1WX46BojnSaR96iRXHxNOvI0k8MFsKw=
Subject key identifier:   BF:A5:EA:0E:78:CF:DF:BA:47:EF:8B:98:16:68:81:D2:32:BD:0D:4F
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A9FCF7DD50D81D724F3F98A56521F4FCF
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/v6XqDnjP37pH74uYFmiB0jK9DU8.roa
Signing time:             Sat 16 Sep 2023 21:04:50 +0000
ROA not before:           Sat 16 Sep 2023 21:04:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18a:9fcf:6935/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:9f:cf:7d:d5:0d:81:d7:24:f3:f9:8a:56:52:1f:4f:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep 16 21:04:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=bfa5ea0e78cfdfba47ef8b98166881d232bd0d4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ec:ce:19:d3:8f:24:33:34:a3:ca:c7:ff:79:
                    41:24:7e:75:bb:ec:c9:6d:13:37:f7:0e:87:fb:21:
                    30:74:b0:7b:a0:f6:29:b0:5d:82:31:3e:b6:77:ff:
                    76:9b:b0:93:50:f5:8a:2f:f8:53:02:74:ba:1c:5a:
                    23:0b:49:03:43:73:b9:fd:5d:7c:2e:2b:d6:07:b7:
                    fa:ad:a8:f5:91:99:ac:86:01:f9:1d:1d:0d:a8:e0:
                    0b:31:02:f0:4a:c3:f2:43:f6:ee:f3:56:36:c3:a9:
                    d9:81:5d:dd:6c:73:96:84:df:9a:74:21:59:c1:a0:
                    f1:81:65:73:25:a0:bb:b5:86:7b:cf:cb:ef:80:34:
                    24:65:94:5e:57:72:76:47:d3:b8:5e:15:0f:84:a9:
                    73:58:13:1e:8b:55:a4:07:10:af:58:68:8f:54:f8:
                    66:ea:11:45:c4:fb:24:94:64:58:be:01:18:6f:89:
                    47:7f:02:dd:94:c6:0a:7b:47:ec:5c:4d:d4:20:17:
                    cb:16:39:17:ec:d9:fc:c1:59:90:74:36:a1:f6:e1:
                    37:48:6a:1b:32:e8:74:1c:00:77:fe:c5:ca:f3:4b:
                    c6:84:43:df:21:06:58:7c:d4:5f:b9:c8:65:a5:ea:
                    75:5c:5f:fa:18:74:1e:14:60:f0:5b:26:f2:57:19:
                    fe:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:A5:EA:0E:78:CF:DF:BA:47:EF:8B:98:16:68:81:D2:32:BD:0D:4F
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/v6XqDnjP37pH74uYFmiB0jK9DU8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         a4:ef:b8:32:1f:74:da:bf:bc:a2:08:9b:97:73:37:54:54:e1:
         db:cf:2a:57:47:71:40:e2:25:26:cf:38:4a:18:21:e7:62:65:
         40:e4:41:9e:2b:7d:98:1f:75:ca:88:13:1b:37:ac:31:ff:96:
         23:d2:21:cf:05:07:92:dd:a5:1f:f3:3b:10:68:f3:44:8c:a8:
         3e:11:1f:e5:a0:8d:f0:df:b8:40:6d:3a:99:91:4f:b9:be:1d:
         28:09:a9:5f:cf:b5:74:f2:f7:88:f2:9c:3c:b7:4b:45:11:eb:
         8e:9b:e8:f9:20:94:67:a4:8a:9d:83:a5:a3:75:78:b8:57:bb:
         2b:d7:85:87:ba:2d:3d:60:9a:4a:86:80:31:be:04:99:b2:ea:
         46:34:b5:d0:25:83:71:fe:f8:9b:bb:d6:94:a0:08:74:71:a9:
         f5:15:44:27:d8:ec:b6:80:96:12:b0:b5:af:de:d6:20:2c:2f:
         50:0e:22:a6:8a:bb:18:96:13:49:a6:c3:c6:c3:87:67:5d:25:
         38:02:56:2a:66:69:f7:ff:49:7e:a5:fc:d1:ff:6b:c8:7a:8a:
         12:60:55:d2:bc:da:dd:79:8d:4d:aa:19:2f:7e:b2:99:0f:38:
         2d:43:3a:be:d5:5a:50:06:1f:c9:55:7d:61:2c:e0:79:33:be:
         46:9b:c7:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----